Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Tvs6maieGx1iZTL0yTpgeK72F_I.roa
File: Tvs6maieGx1iZTL0yTpgeK72F_I.roa (raw, json)
Hash identifier: gNZBhUJ8Tjfp0yNayFL8vGLIJ2w/UstaBj8H9ut3fP0=
Subject key identifier: 4E:FB:3A:99:A8:9E:1B:1D:62:65:32:F4:C9:3A:60:78:AE:F6:17:F2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 74B4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Tvs6maieGx1iZTL0yTpgeK72F_I.roa
Signing time: Tue 08 Jul 2025 12:44:57 +0000
ROA not before: Tue 08 Jul 2025 12:44:57 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29876 (0x74b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 8 12:44:57 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4EFB3A99A89E1B1D626532F4C93A6078AEF617F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:44:e5:9c:74:72:d0:88:22:6c:c2:dc:81:
d3:82:3d:8e:09:65:6b:68:8f:43:77:ec:ea:e1:48:
03:bf:8d:8e:8b:fc:4e:98:3e:d4:ef:0c:34:00:22:
e3:10:13:e6:88:b1:dc:c6:d0:4a:9d:d1:c3:88:59:
6e:4b:31:f1:45:a9:af:cc:00:3f:0c:87:dd:d3:cd:
95:e7:42:1e:71:d5:70:3f:58:2c:66:2b:e9:f6:10:
ec:77:30:49:7b:e0:51:e2:b0:27:af:5c:fa:32:1e:
2a:2e:9d:c2:f9:bd:be:35:cb:a7:42:b6:b1:80:16:
b7:8d:7c:f1:61:5d:32:01:4f:9c:d8:b8:77:3c:8a:
72:2a:d2:5d:ed:c8:74:ad:9e:32:88:d6:c3:b9:04:
98:6b:2f:26:d2:15:97:02:7b:e0:01:06:39:f2:c6:
18:e5:f9:4a:2c:8b:87:d4:86:6a:e6:f3:1a:41:ec:
88:0b:e5:b6:2e:56:c8:1c:59:05:6c:5a:66:f1:b7:
bc:52:e2:76:6f:f5:d7:a5:7b:c7:34:2e:ca:6b:69:
68:3f:19:d7:8d:11:1c:83:20:ca:5d:a2:0c:d9:84:
a8:a4:03:cf:49:af:3e:19:bb:6e:5e:43:ae:a3:fc:
d6:26:3b:e1:75:ec:80:3f:dc:80:ac:81:7f:ba:8c:
14:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FB:3A:99:A8:9E:1B:1D:62:65:32:F4:C9:3A:60:78:AE:F6:17:F2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Tvs6maieGx1iZTL0yTpgeK72F_I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
34:15:0e:7a:29:c2:2d:f1:52:82:8c:d6:f9:4c:f9:9b:be:8c:
60:32:74:4c:d8:5d:eb:8a:7b:22:b6:01:8e:63:44:a8:81:6e:
9a:2a:a9:b6:f3:5b:a0:63:be:20:d0:28:a6:4a:c7:26:f6:38:
f5:41:80:3a:50:9b:44:42:9e:c6:38:4d:ae:69:6b:76:f9:d3:
da:85:4a:98:3e:65:b9:e9:eb:b7:72:ac:18:f0:7d:93:f1:07:
9d:8f:cd:6d:2d:fe:8d:70:94:76:d6:f3:cd:28:e4:de:d0:23:
a0:ba:c2:b0:dd:72:49:c3:ec:ef:3d:19:79:9a:69:44:d1:90:
0e:7c:b2:3c:4a:36:8b:b9:ec:6b:4b:82:5d:5e:16:3e:39:31:
a5:05:b1:16:34:64:2d:3b:64:53:9a:df:79:7c:55:6d:7e:db:
56:55:19:b9:b5:8e:6a:1b:3e:81:cc:02:bb:a5:ea:23:86:8b:
ee:99:47:6d:05:27:3b:bd:4d:ba:96:d0:35:3a:17:ec:c4:5b:
f5:38:18:de:a3:8a:ec:3c:0b:35:52:f8:f1:e7:96:d8:25:5f:
95:44:32:84:fc:98:f9:f7:14:b5:b7:7a:51:57:d7:28:04:8c:
c7:ea:13:26:a9:e5:80:8e:48:bc:5f:32:92:25:ed:94:66:f3:
0c:81:08:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:35:17 2025 by rpki-client