Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ljW5MehuLZwCWC6biP_RXR-0_G8.roa
File: ljW5MehuLZwCWC6biP_RXR-0_G8.roa (raw, json)
Hash identifier: Kh/EqZqRDRgtobpGPlKxG3TB9eX/pSo28WDIeoaiaqo=
Subject key identifier: 96:35:B9:31:E8:6E:2D:9C:02:58:2E:9B:88:FF:D1:5D:1F:B4:FC:6F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 698C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ljW5MehuLZwCWC6biP_RXR-0_G8.roa
Signing time: Sun 08 Jun 2025 13:12:16 +0000
ROA not before: Sun 08 Jun 2025 13:12:16 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27020 (0x698c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 8 13:12:16 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9635B931E86E2D9C02582E9B88FFD15D1FB4FC6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:71:6f:5b:5b:9d:b7:09:5f:b1:6b:61:9d:
a9:c3:cb:88:20:18:ed:24:46:b1:59:01:b9:eb:b9:
30:6c:03:79:99:32:bd:77:87:ef:cb:4e:32:e0:c9:
93:1f:5a:ec:3e:38:13:2b:36:da:f9:bf:01:11:ba:
79:53:b8:a4:87:20:5a:9b:50:8e:5b:1e:27:98:a9:
0b:cb:21:d2:95:3c:86:f4:f3:7d:b9:2c:ba:6e:30:
82:a6:3f:e8:56:fc:bc:bd:e9:ca:55:8f:d9:83:6f:
3c:f4:dd:d6:e7:d0:25:24:cd:65:1a:ca:aa:39:a6:
ad:8a:12:3c:9b:e6:83:95:f8:8b:22:be:fb:6a:81:
36:ac:97:04:6a:74:0a:a2:5e:34:e9:50:3b:ef:0d:
36:c0:06:1a:1d:b8:74:9d:87:f1:98:59:8c:71:49:
7e:ca:db:2a:51:73:6b:f5:0d:67:51:ca:15:63:34:
2c:c5:50:7a:a9:da:b3:90:5d:31:44:97:f5:be:5a:
3b:e3:a8:27:6f:32:a4:8c:d5:a7:f3:12:5c:a8:5d:
a5:5c:cc:e5:31:2f:ab:92:48:dc:04:0f:6e:80:66:
a7:43:da:47:65:55:f1:23:cd:ba:6b:1c:4b:cf:85:
fe:38:ad:38:17:97:23:4b:46:c8:a6:85:a2:7b:81:
32:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:35:B9:31:E8:6E:2D:9C:02:58:2E:9B:88:FF:D1:5D:1F:B4:FC:6F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ljW5MehuLZwCWC6biP_RXR-0_G8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
35:d8:4a:35:bb:ff:25:b2:29:93:b6:27:30:11:90:58:dd:73:
46:99:a9:5f:17:b2:9d:52:ff:1b:5f:16:32:0a:ab:ce:89:18:
ca:6c:b1:08:94:7f:df:75:98:7e:30:52:5e:58:c2:2c:36:bc:
31:a0:03:0c:99:1d:f3:62:63:ab:d9:a3:57:36:17:6f:f3:e8:
ff:56:2c:d4:d6:f7:04:91:5f:59:48:fc:f0:41:62:f7:37:cf:
aa:ab:99:87:1c:8a:aa:85:18:dc:fe:87:b8:12:53:b6:0c:67:
3c:28:94:77:f0:5c:01:91:35:f0:78:5c:f7:bb:36:7d:dd:01:
53:51:9c:9b:17:0a:be:ab:39:9d:48:9c:41:fc:a6:c9:03:69:
7f:11:c5:8c:74:47:a7:f1:2c:e5:6d:9e:af:9a:2b:78:d9:59:
5b:5f:a9:75:ab:95:1f:0b:eb:a0:a5:77:ca:8d:0b:5a:c5:02:
34:54:d7:bc:3c:b7:81:c4:fa:2c:ff:09:16:d1:35:82:2f:51:
b7:0c:d9:e1:e5:50:4d:f6:6c:84:95:14:12:31:c0:63:9e:c1:
57:0b:a0:5a:9e:80:a1:eb:af:1b:d5:5d:ff:f8:dd:14:1b:ed:
08:40:4f:75:91:9c:dd:94:ee:a5:f6:26:35:2c:54:9d:ac:df:
4a:25:49:eb
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICaYwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MDgx
MzEyMTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDk2MzVCOTMxRTg2RTJE
OUMwMjU4MkU5Qjg4RkZEMTVEMUZCNEZDNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCq5nFvW1udtwlfsWthnanDy4ggGO0kRrFZAbnruTBsA3mZMr13
h+/LTjLgyZMfWuw+OBMrNtr5vwERunlTuKSHIFqbUI5bHieYqQvLIdKVPIb08325
LLpuMIKmP+hW/Ly96cpVj9mDbzz03dbn0CUkzWUayqo5pq2KEjyb5oOV+Isivvtq
gTaslwRqdAqiXjTpUDvvDTbABhoduHSdh/GYWYxxSX7K2ypRc2v1DWdRyhVjNCzF
UHqp2rOQXTFEl/W+WjvjqCdvMqSM1afzElyoXaVczOUxL6uSSNwED26AZqdD2kdl
VfEjzbprHEvPhf44rTgXlyNLRsimhaJ7gTKTAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUljW5MehuLZwCWC6biP/RXR+0/G8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2xqVzVNZWh1TFp3Q1dD
NmJpUF9SWFItMF9HOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQA12Eo1
u/8lsimTticwEZBY3XNGmalfF7KdUv8bXxYyCqvOiRjKbLEIlH/fdZh+MFJeWMIs
NrwxoAMMmR3zYmOr2aNXNhdv8+j/VizU1vcEkV9ZSPzwQWL3N8+qq5mHHIqqhRjc
/oe4ElO2DGc8KJR38FwBkTXweFz3uzZ93QFTUZybFwq+qzmdSJxB/KbJA2l/EcWM
dEen8SzlbZ6vmit42VlbX6l1q5UfC+ugpXfKjQtaxQI0VNe8PLeBxPos/wkW0TWC
L1G3DNnh5VBN9myElRQSMcBjnsFXC6BanoCh668b1V3/+N0UG+0IQE91kZzdlO6l
9iY1LFSdrN9KJUnr
-----END CERTIFICATE-----
Generated at Sat Jun 21 11:30:13 2025 by rpki-client