Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0Lbcp4et4MOkkn5giGY2Rg8qcB0.roa
File: 0Lbcp4et4MOkkn5giGY2Rg8qcB0.roa (raw, json)
Hash identifier: RuFsXTwgqshdNMcX71Xvfbw5YMkcoC/ENnh48QCmkZQ=
Subject key identifier: D0:B6:DC:A7:87:AD:E0:C3:A4:92:7E:60:88:66:36:46:0F:2A:70:1D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6026
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0Lbcp4et4MOkkn5giGY2Rg8qcB0.roa
Signing time: Wed 14 May 2025 11:40:21 +0000
ROA not before: Wed 14 May 2025 11:40:21 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24614 (0x6026)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 11:40:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D0B6DCA787ADE0C3A4927E60886636460F2A701D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b7:d1:3f:24:72:0e:e3:7f:46:f9:15:32:ab:
d8:26:dc:de:cf:8d:46:72:af:e5:c9:24:26:7c:4b:
22:ce:40:b2:85:2c:a5:ac:22:7c:b9:d7:09:8a:df:
61:46:78:9e:ef:69:8f:17:e3:b9:04:25:5a:9b:45:
61:54:df:f5:2e:e3:94:3d:55:f2:53:4b:65:21:fe:
d0:07:1a:dd:3d:7c:a5:52:7d:51:9e:a7:22:cd:e5:
e4:27:8f:c4:bc:4c:c4:c0:ea:1b:ac:69:42:5f:d3:
d3:02:5c:29:a9:03:7e:7a:08:cb:cd:77:99:44:5b:
db:fd:17:54:53:84:b2:d9:c0:f8:3a:4b:bc:38:53:
10:1b:ed:69:f3:70:c8:a5:6f:a0:78:90:08:79:7c:
88:68:6a:a1:1f:35:c2:2a:56:78:c9:c3:4a:54:20:
5f:bb:5a:ac:91:a1:24:ed:61:73:f7:5d:7e:c0:d7:
9a:ed:fd:1c:72:76:52:be:a6:1a:1c:81:1a:53:26:
89:ca:8a:c8:27:49:3a:cb:cc:d1:3e:cd:6d:3b:07:
ae:85:09:bb:31:a8:71:8f:1e:ec:bf:ab:10:57:6f:
da:e6:dd:dc:87:77:a1:c8:d0:c6:bf:5e:96:32:4d:
e4:5e:78:ea:68:bb:ad:bc:82:6d:e0:d4:51:06:3f:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B6:DC:A7:87:AD:E0:C3:A4:92:7E:60:88:66:36:46:0F:2A:70:1D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0Lbcp4et4MOkkn5giGY2Rg8qcB0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
02:e0:d2:4b:c8:73:35:b2:96:c3:7d:e4:69:4b:36:8a:27:69:
b0:fc:24:5a:2f:a0:80:5a:bf:12:d9:80:98:84:0d:b1:ea:17:
14:c6:a9:9c:cf:29:b7:17:67:cb:b1:d0:23:89:2d:71:63:29:
8a:58:00:d8:fd:44:a8:b5:71:d1:13:a8:15:2f:d5:d1:31:fe:
8b:a1:3f:aa:6b:61:b0:5b:86:f6:52:4a:c6:bf:41:0c:e6:00:
7c:f7:59:fb:fb:2c:51:db:05:5f:10:6c:09:05:d9:53:c3:43:
37:90:c5:91:43:c7:6e:99:5d:2e:6b:f0:ce:fe:53:fc:a8:6c:
d2:53:f5:b5:84:f2:c0:00:92:ff:91:12:34:7d:d7:5c:b1:fc:
04:80:28:af:10:dc:cf:9c:e6:8d:38:2f:c7:8f:44:ab:9e:d3:
f3:18:a4:be:78:bb:38:e6:74:a2:30:31:ce:49:28:86:df:7c:
07:ce:ee:01:33:df:a9:5f:c1:48:ea:10:66:f5:ee:c9:49:f1:
7f:77:1f:f5:bd:81:4f:ed:d6:8d:92:5a:6b:1f:88:92:03:ef:
b2:32:42:49:65:d5:c2:c3:ee:a2:11:96:c1:12:02:10:da:1e:
fa:0b:cf:8d:d5:57:58:64:4f:8c:dd:fd:d1:1b:7a:f2:e7:bb:
20:ba:1d:d0
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICYCYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MTQx
MTQwMjFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQwQjZEQ0E3ODdBREUw
QzNBNDkyN0U2MDg4NjYzNjQ2MEYyQTcwMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCXt9E/JHIO439G+RUyq9gm3N7PjUZyr+XJJCZ8SyLOQLKFLKWs
Iny51wmK32FGeJ7vaY8X47kEJVqbRWFU3/Uu45Q9VfJTS2Uh/tAHGt09fKVSfVGe
pyLN5eQnj8S8TMTA6husaUJf09MCXCmpA356CMvNd5lEW9v9F1RThLLZwPg6S7w4
UxAb7WnzcMilb6B4kAh5fIhoaqEfNcIqVnjJw0pUIF+7WqyRoSTtYXP3XX7A15rt
/RxydlK+phocgRpTJonKisgnSTrLzNE+zW07B66FCbsxqHGPHuy/qxBXb9rm3dyH
d6HI0Ma/XpYyTeReeOpou628gm3g1FEGP5K1AgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQU0Lbcp4et4MOkkn5giGY2Rg8qcB0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzBMYmNwNGV0NE1Pa2tu
NWdpR1kyUmc4cWNCMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAC4NJL
yHM1spbDfeRpSzaKJ2mw/CRaL6CAWr8S2YCYhA2x6hcUxqmczym3F2fLsdAjiS1x
YymKWADY/USotXHRE6gVL9XRMf6LoT+qa2GwW4b2UkrGv0EM5gB891n7+yxR2wVf
EGwJBdlTw0M3kMWRQ8dumV0ua/DO/lP8qGzSU/W1hPLAAJL/kRI0fddcsfwEgCiv
ENzPnOaNOC/Hj0SrntPzGKS+eLs45nSiMDHOSSiG33wHzu4BM9+pX8FI6hBm9e7J
SfF/dx/1vYFP7daNklprH4iSA++yMkJJZdXCw+6iEZbBEgIQ2h76C8+N1VdYZE+M
3f3RG3ry57sguh3Q
-----END CERTIFICATE-----
Generated at Sat May 17 22:37:07 2025 by rpki-client