Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Tuh-gK9hDu9GqNCZAqSt6txxwfI.roa
File: Tuh-gK9hDu9GqNCZAqSt6txxwfI.roa (raw, json)
Hash identifier: BIj+jkNNdrD1Hc6eoyw9eMrHOXwOAbmQ83ypVIUtLlc=
Subject key identifier: 4E:E8:7E:80:AF:61:0E:EF:46:A8:D0:99:02:A4:AD:EA:DC:71:C1:F2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 74E6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Tuh-gK9hDu9GqNCZAqSt6txxwfI.roa
Signing time: Wed 09 Jul 2025 01:15:13 +0000
ROA not before: Wed 09 Jul 2025 01:15:13 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29926 (0x74e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 9 01:15:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4EE87E80AF610EEF46A8D09902A4ADEADC71C1F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cb:67:26:eb:02:2f:25:4e:b5:98:81:05:a4:
a3:b0:19:cd:f6:ec:fb:2b:bf:2e:fa:95:23:5c:a1:
62:ec:d8:23:d6:62:56:04:25:bc:bf:aa:53:f8:1b:
ec:1d:c6:eb:bd:a7:72:2b:7d:7c:42:f6:73:ed:bb:
f1:b1:c0:b7:e5:bb:61:95:d7:98:db:b8:8d:54:c8:
40:ef:ba:9d:27:5c:88:ea:14:ce:0c:bb:6b:59:b6:
7d:cb:fd:bb:7b:76:1b:b4:24:31:28:45:c3:de:a4:
5a:39:57:60:8d:47:b0:cf:9e:53:68:27:30:c5:cd:
8f:1b:e4:82:e6:cc:16:91:38:ac:79:6d:d7:9d:be:
07:e5:bc:49:b6:32:fa:3a:07:7a:ea:a3:59:1f:79:
3f:a8:cd:06:a6:11:70:65:0b:e0:bf:fd:b2:a2:ac:
27:87:98:0e:06:e6:95:60:5e:65:87:6a:12:49:80:
09:87:83:f1:3e:5d:9e:0c:81:1a:71:b1:31:8b:ea:
81:45:e8:6b:28:a1:54:f0:c7:f5:34:42:51:71:e5:
4a:5e:ec:bc:1c:78:1b:c4:ef:aa:75:32:1c:18:e5:
a4:75:b8:31:ab:1c:34:93:f2:33:65:5f:f4:3c:aa:
7e:b1:7f:c3:11:3f:eb:76:06:0f:8b:db:3c:fd:68:
d4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E8:7E:80:AF:61:0E:EF:46:A8:D0:99:02:A4:AD:EA:DC:71:C1:F2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Tuh-gK9hDu9GqNCZAqSt6txxwfI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
59:67:43:61:df:4c:6c:6b:03:38:3e:34:54:f1:c4:b9:31:20:
25:c8:e7:40:54:6a:db:60:5e:a4:73:21:73:fb:1f:95:49:76:
c3:7f:96:81:d9:b7:4f:c3:e6:f5:d5:97:2d:d3:01:7d:8e:d3:
8d:90:e6:96:0a:fd:a8:27:74:22:18:8f:2a:c0:18:1d:8e:d9:
13:d3:65:e1:65:82:f5:9c:c8:19:a4:1a:e0:90:43:2b:32:33:
f1:0a:8c:2a:c9:a6:86:ad:f9:61:92:cc:b5:d6:48:5c:96:bc:
02:86:14:50:59:d2:27:2b:26:a0:6a:9e:5c:73:06:31:48:8f:
e8:3f:c4:ea:63:88:a0:eb:af:25:1e:98:63:8f:c0:2a:c6:ef:
e7:a0:70:7a:c9:03:cd:b5:15:cd:4f:7f:91:75:3a:5b:4e:7e:
6a:7a:48:2d:3f:26:41:bd:04:0b:f6:7b:a5:55:b1:a4:fc:6f:
7c:1b:de:df:cf:64:42:74:c2:ee:1c:03:dd:74:55:61:70:2f:
db:03:28:bd:ef:ad:d4:57:04:00:d1:cd:76:fd:bb:53:08:2c:
08:48:2d:1f:a5:29:7d:62:22:a9:97:99:aa:69:f1:71:56:78:
49:a9:86:65:8d:fd:c8:8f:7c:54:27:f8:a2:71:6b:de:00:68:
cd:e1:2c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:36 2025 by rpki-client