Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lDP1aw_fgu1L0-2EgoXOYVPHUZc.roa
File: lDP1aw_fgu1L0-2EgoXOYVPHUZc.roa (raw, json)
Hash identifier: vmT4wW6XpE3nCE1+dGKz0aE3CAA61J+M5Mk1WLRWCc0=
Subject key identifier: 94:33:F5:6B:0F:DF:82:ED:4B:D3:ED:84:82:85:CE:61:53:C7:51:97
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5F9E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lDP1aw_fgu1L0-2EgoXOYVPHUZc.roa
Signing time: Tue 13 May 2025 01:40:17 +0000
ROA not before: Tue 13 May 2025 01:40:17 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24478 (0x5f9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 01:40:17 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9433F56B0FDF82ED4BD3ED848285CE6153C75197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a7:65:75:74:af:72:e7:bc:44:f6:db:a7:54:
d0:06:12:2e:72:ba:86:e3:c4:d9:17:d8:3b:df:d0:
6b:bc:13:37:a4:27:51:c3:01:cb:08:b8:b3:c0:81:
62:2f:9d:ce:34:28:a5:ca:ed:5d:a1:a7:3b:cb:d1:
cc:25:c5:76:9c:4d:df:a1:04:75:6d:a6:c2:03:76:
de:e2:6e:ea:41:bf:4d:fd:a6:ff:28:9f:86:6e:2c:
8a:64:52:ff:61:29:a8:80:5a:25:60:00:04:89:f6:
a4:9b:96:4d:31:05:72:d2:14:9d:ba:cf:9f:77:e8:
2b:1b:6c:dc:2a:e4:fd:4b:3a:40:65:31:81:69:73:
28:bb:9f:ae:ac:5b:5d:51:14:70:0e:59:b3:9b:9c:
fb:52:3f:8d:f2:8e:d3:39:f0:c3:c2:60:65:b3:7a:
24:31:ec:b5:e7:1e:fa:5d:01:fa:72:ad:fc:39:c1:
20:f1:70:82:41:4d:d4:03:cd:f2:42:08:69:87:55:
5c:86:b3:77:dc:54:a4:d5:8e:ab:fb:39:ca:80:14:
61:8d:a2:e6:39:c5:36:b8:6d:a7:50:e0:41:d4:2c:
f1:52:ed:81:bb:bf:c8:9c:12:86:1a:5d:3e:01:00:
af:75:e5:d5:b1:d7:02:35:71:53:2e:bb:56:53:cb:
39:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:33:F5:6B:0F:DF:82:ED:4B:D3:ED:84:82:85:CE:61:53:C7:51:97
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lDP1aw_fgu1L0-2EgoXOYVPHUZc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
71:68:78:9e:87:cb:7a:23:21:85:d3:2a:22:bc:2c:04:63:42:
da:e1:2a:96:bf:1c:a2:19:0e:75:0d:9d:f8:1e:52:98:fe:b4:
06:af:d1:ea:fb:81:cc:e3:9b:4e:54:19:db:d1:d9:2d:16:3b:
6c:2c:86:29:b0:5b:bb:4f:c0:2d:32:71:9f:3a:1c:85:75:1c:
71:9f:6a:1c:d1:b6:c4:ea:09:f6:7f:20:60:6c:01:bb:37:f2:
ed:7c:de:81:aa:7b:2a:dc:25:13:9b:3e:76:8e:f9:0f:3a:8d:
4e:88:df:21:be:fd:bd:83:ba:32:3b:61:98:f6:a2:8e:c3:b1:
45:40:e9:cc:57:3d:15:98:73:9b:10:d0:00:89:c2:15:68:fc:
7d:67:00:3b:ab:d6:3b:05:00:87:f2:45:7d:98:a9:f4:f4:77:
de:26:eb:6a:44:b7:ff:31:74:92:dd:c2:5a:a7:2a:ce:76:80:
95:50:25:f3:24:cd:c5:16:69:33:49:0b:c6:11:d8:6d:1a:3f:
78:bb:2f:bd:1b:28:5d:86:50:18:71:0d:89:af:af:87:88:aa:
36:b9:13:48:96:fc:e2:2d:ab:38:ff:30:94:4d:d8:0a:42:85:
61:78:89:31:32:6e:70:81:57:fa:6d:c2:9b:ea:ff:e6:59:3f:
a6:f2:4f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:57:50 2025 by rpki-client