Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lmfzDIpZ3XtQ30EPq_c_0BVJkDg.roa
File: lmfzDIpZ3XtQ30EPq_c_0BVJkDg.roa (raw, json)
Hash identifier: eyR+HEZPdqRSHT8V7rm1Wp+x2R3z49IgOyNamvu7LLw=
Subject key identifier: 96:67:F3:0C:8A:59:DD:7B:50:DF:41:0F:AB:F7:3F:D0:15:49:90:38
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6830
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lmfzDIpZ3XtQ30EPq_c_0BVJkDg.roa
Signing time: Wed 04 Jun 2025 22:11:46 +0000
ROA not before: Wed 04 Jun 2025 22:11:46 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26672 (0x6830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 4 22:11:46 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9667F30C8A59DD7B50DF410FABF73FD015499038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:6b:98:26:31:e8:21:3a:83:fa:05:5a:21:
15:a1:08:21:7e:4b:4e:b7:88:af:d6:e4:be:2d:8b:
82:26:1b:c1:00:83:7e:f2:17:bf:bb:dc:17:24:98:
51:a3:97:5d:d8:11:fc:07:82:04:ca:b4:4b:de:87:
78:ff:35:0f:7c:ff:c5:21:27:ea:cb:13:69:ba:ba:
fd:d5:65:06:c5:04:1e:02:5f:d4:18:9d:fe:9c:79:
7f:5d:e3:50:fb:7c:d4:72:4e:46:9f:18:03:e1:ea:
3f:3d:5f:94:b5:08:49:12:e7:b2:9d:6d:be:7b:ad:
ec:9f:a4:e7:56:10:01:56:60:58:b4:56:ff:f2:4d:
3a:4e:7a:14:28:15:78:41:49:97:c7:6e:87:02:3b:
6a:4f:be:ef:a4:b1:7e:f4:56:5e:06:b2:76:06:88:
00:df:5e:65:75:93:fe:09:e1:54:f7:f9:a6:6a:92:
bd:92:64:3c:f2:8a:37:28:1d:3c:1c:f1:99:d2:f8:
21:92:a5:b9:4f:f6:41:b5:8a:75:ea:8a:86:b2:44:
39:ab:38:99:ed:95:8a:42:e0:c1:d3:a8:5d:cc:2b:
2f:93:86:97:d9:3e:c2:aa:a8:6c:d5:e6:16:76:f8:
e9:2d:27:10:4a:6d:99:06:4b:85:d8:63:05:f2:50:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:67:F3:0C:8A:59:DD:7B:50:DF:41:0F:AB:F7:3F:D0:15:49:90:38
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lmfzDIpZ3XtQ30EPq_c_0BVJkDg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
4c:c6:c8:4f:05:5b:70:73:1a:04:86:7e:7e:fc:06:78:bf:d3:
3e:f9:35:47:96:59:e4:8c:d3:02:df:73:f3:14:2b:b5:62:87:
ef:2d:38:a3:2d:ba:ea:8b:4f:6c:ea:08:a5:d3:5a:39:95:b3:
21:29:69:79:07:18:4b:49:e4:9f:8f:37:3d:bf:62:03:a4:0b:
aa:f2:61:c8:a3:06:f6:e3:b7:05:fb:a4:32:1f:c8:1c:67:73:
92:9d:1c:28:f7:d8:1c:46:d4:48:73:39:ea:bb:70:fb:b2:24:
14:9b:41:e2:9d:ab:3c:82:58:da:c7:55:50:12:6d:35:25:ea:
6e:00:8e:88:62:2d:73:5a:33:78:8a:10:6d:b9:b1:88:83:c7:
93:47:ff:1d:a7:f1:65:cc:9c:0e:53:3d:9b:33:7a:6a:78:20:
2c:4e:35:f6:62:8f:0f:0e:f3:d1:89:11:df:38:ab:9d:98:13:
f9:b0:e6:15:af:e0:dd:cd:3b:e5:5e:c2:30:64:6c:83:5a:e7:
9f:b8:55:73:56:98:3b:3d:16:7d:5c:d4:6f:5e:22:f9:53:b2:
5a:d0:a8:3f:a2:30:78:fe:6e:7d:3a:fa:39:3a:e7:b5:73:33:
71:94:a8:6d:10:c9:46:91:c4:c3:f5:47:d7:e4:ce:77:d6:b0:
91:31:28:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 17:37:03 2025 by rpki-client