Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/BcLvGF_m4khaclaOFpX78KF9dlk.roa
File: BcLvGF_m4khaclaOFpX78KF9dlk.roa (raw, json)
Hash identifier: rkyq6YgaPlQVGrlZj+fdrHPFA75N8K0hCUXQajNvWsA=
Subject key identifier: 05:C2:EF:18:5F:E6:E2:48:5A:72:56:8E:16:95:FB:F0:A1:7D:76:59
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 67AA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BcLvGF_m4khaclaOFpX78KF9dlk.roa
Signing time: Tue 03 Jun 2025 12:41:43 +0000
ROA not before: Tue 03 Jun 2025 12:41:43 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26538 (0x67aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 3 12:41:43 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=05C2EF185FE6E2485A72568E1695FBF0A17D7659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:c3:a2:5d:91:1c:6c:d5:d1:93:73:cc:be:
23:c6:91:6c:6c:db:eb:bb:42:b4:ee:36:d8:26:04:
af:c8:cc:73:0f:4d:5e:fb:3f:07:1f:57:aa:65:81:
ae:64:73:8f:71:04:d1:48:bf:68:56:43:c6:43:50:
9d:2a:0a:a1:6a:a6:18:e1:4d:a9:62:10:ec:63:9c:
66:b7:9a:11:03:5a:ee:73:45:3a:0f:d6:8e:3d:40:
95:76:d7:2a:48:e1:39:cf:62:f6:4d:f6:ca:1b:1a:
25:99:39:0f:c3:2d:18:6b:ff:da:aa:6a:f6:a4:e8:
70:6d:3f:41:bd:5b:bb:8c:b8:5d:1a:79:5f:2a:54:
b7:86:ce:0a:b6:b9:10:4e:1b:22:38:ea:65:4d:ab:
f3:4c:93:4d:e0:09:84:db:d1:d8:9a:2f:75:ba:5f:
bb:cb:d4:12:24:2f:99:75:97:6f:85:5b:f8:0d:4f:
75:11:7b:ba:11:52:c3:d5:e1:0e:e6:a7:3a:4b:fe:
6f:40:a7:30:ac:18:dc:64:53:9b:00:6c:c1:6a:d4:
7f:06:48:40:c6:e3:ad:9f:9a:05:ec:a1:8b:bc:eb:
be:af:09:d8:c3:3b:70:6c:fb:86:c7:2a:76:f1:b3:
65:e6:72:f4:d8:3c:31:fa:81:c8:57:dc:16:f6:1b:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C2:EF:18:5F:E6:E2:48:5A:72:56:8E:16:95:FB:F0:A1:7D:76:59
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BcLvGF_m4khaclaOFpX78KF9dlk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
4e:37:27:51:84:38:6b:42:46:23:58:3c:ea:f5:22:41:ed:63:
50:53:c8:90:dd:15:52:94:91:09:5c:63:ec:a6:d2:37:fb:e7:
23:b8:3b:17:4b:bf:30:00:1b:c4:06:69:e7:f2:1d:9c:2b:30:
75:f6:19:5d:33:9b:3f:3e:f7:f5:6f:b4:6c:0e:97:ce:32:88:
b7:a9:53:bc:ef:70:7c:1f:ac:29:5e:98:ef:df:af:44:39:bb:
54:88:89:23:78:57:29:01:7b:2a:d7:07:29:ca:25:d3:dc:88:
4d:b7:33:28:74:81:d0:9a:22:97:1e:a9:bd:f5:1b:92:5f:9c:
32:fe:c9:da:e2:56:59:e9:51:06:0d:eb:cc:e9:d2:c4:c0:2d:
13:5e:e9:2f:8f:2c:25:3d:97:8f:23:74:7c:49:e5:7e:60:bb:
e3:b5:0a:b1:cc:7c:cb:f1:16:5a:61:e0:84:9d:5e:0e:91:74:
3e:fa:78:dc:79:9d:7f:96:c5:5c:6a:6e:46:82:9d:ba:6d:3f:
2a:9d:eb:7b:e0:92:34:b3:84:5d:0d:ba:f4:68:92:b0:3b:39:
47:5d:01:e5:6e:37:ef:6b:7c:1c:9a:93:c5:38:a9:cd:41:b7:
4b:2d:68:1d:3e:c6:68:06:20:d9:6c:f9:ca:eb:c2:12:4c:58:
56:ba:6d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 14:23:36 2025 by rpki-client