Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/EgulNfcp6Uf_oct07KggpT1i87Q.roa
File: EgulNfcp6Uf_oct07KggpT1i87Q.roa (raw, json)
Hash identifier: XSvx/hxzxNUvGb6IP9gHo6s7TfEOafUdkl4lkwDvT/k=
Subject key identifier: 12:0B:A5:35:F7:29:E9:47:FF:A1:CB:74:EC:A8:20:A5:3D:62:F3:B4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 63C4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EgulNfcp6Uf_oct07KggpT1i87Q.roa
Signing time: Sat 24 May 2025 03:10:53 +0000
ROA not before: Sat 24 May 2025 03:10:53 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25540 (0x63c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 24 03:10:53 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=120BA535F729E947FFA1CB74ECA820A53D62F3B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:33:c1:c3:2e:11:f0:36:c5:c2:77:46:49:
01:16:47:43:b8:2d:a2:01:8c:ba:6e:e9:24:83:f3:
b1:5c:78:67:99:fb:ff:dc:b2:8a:da:00:87:c2:5a:
46:f8:d1:09:07:26:2d:de:82:f2:94:2f:a1:b4:83:
ed:93:76:f4:2c:a6:14:3c:d3:37:f4:d9:10:f2:a0:
8f:a0:54:ef:5e:0a:3f:39:40:03:0f:93:e0:6f:4f:
96:c9:ca:c9:9d:4c:a1:ea:95:9d:e2:7f:fb:d1:a4:
5e:f9:22:fc:43:90:27:1f:be:f7:de:d1:9a:cb:37:
37:e6:2e:fa:ab:e4:67:15:a9:76:35:b0:12:21:32:
fa:f2:69:e7:6b:a2:88:47:97:0a:47:60:49:bb:4d:
63:69:7e:71:75:79:ab:d1:6d:c4:fe:5c:2f:11:3a:
4e:f5:f5:bb:34:37:1d:da:ff:75:13:7f:b7:d3:98:
ee:98:af:8c:9e:86:b6:e5:ae:13:5e:6f:1c:32:73:
b6:89:a7:32:86:5b:ee:ac:f0:59:1d:9f:37:a9:b3:
bd:4b:69:b6:88:6c:af:ef:56:13:7e:e8:4c:b6:44:
bf:bc:91:cf:4e:8b:f5:c5:44:2d:cb:50:f3:2e:b8:
ab:83:c3:14:69:08:66:ff:2c:83:57:28:6b:8a:fa:
64:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0B:A5:35:F7:29:E9:47:FF:A1:CB:74:EC:A8:20:A5:3D:62:F3:B4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EgulNfcp6Uf_oct07KggpT1i87Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
3e:e7:45:ad:11:3d:ed:69:f5:58:07:5a:77:51:c3:7f:5d:20:
b0:db:58:61:cc:94:c0:cb:c9:35:c8:1d:5b:e6:4e:f1:52:4a:
5e:a2:0b:54:99:1e:f4:da:ea:5f:f5:aa:f4:62:81:69:e1:0f:
40:93:a0:2c:42:9e:df:82:fc:ff:89:3b:f2:07:33:16:c0:f3:
86:45:35:b5:ae:2a:9c:0b:b9:84:a7:a0:a7:86:f7:57:d5:f0:
d8:c6:f1:ca:d8:23:ad:33:6d:53:24:75:75:5c:51:af:5d:9c:
51:94:db:ad:dc:9b:a2:eb:ec:a6:52:2c:b2:27:92:34:ea:0f:
24:ba:bb:f4:a2:f1:61:57:1a:37:b9:52:2d:89:72:56:76:0e:
11:12:2e:7f:59:9b:fe:cc:43:35:f9:cb:7a:0e:9a:bd:bf:be:
c7:aa:f2:e0:85:ad:6c:b5:18:6d:0f:af:26:b2:c0:dd:d9:5c:
db:cd:a4:64:4f:db:12:27:ca:4e:78:3e:0f:a3:32:70:d9:76:
aa:3a:30:e8:cc:1e:37:83:69:0e:b7:04:b1:7f:a8:74:a8:ad:
08:f4:d3:dd:38:03:04:41:c6:f1:22:e3:bf:76:c9:b4:9a:eb:
5b:ba:7f:d8:35:95:72:5c:6c:68:a4:52:28:e8:9c:5b:ff:15:
52:15:65:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 21:18:08 2025 by rpki-client