Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/tgmNlucQRg57CLcWQlmYnla1PG0.roa
File: tgmNlucQRg57CLcWQlmYnla1PG0.roa (raw, json)
Hash identifier: bv/FBd6STT55CfQjj+ELqWX3hsnj2ae0AA10ey2gD/w=
Subject key identifier: B6:09:8D:96:E7:10:46:0E:7B:08:B7:16:42:59:98:9E:56:B5:3C:6D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7868
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tgmNlucQRg57CLcWQlmYnla1PG0.roa
Signing time: Fri 18 Jul 2025 10:12:14 +0000
ROA not before: Fri 18 Jul 2025 10:12:14 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30824 (0x7868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 18 10:12:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B6098D96E710460E7B08B7164259989E56B53C6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:f5:ce:e3:2c:d8:31:0b:f8:9c:51:f4:c7:
ba:fd:49:66:bc:12:39:6e:f0:73:73:5a:4d:6c:9d:
94:4f:38:73:0f:52:1c:24:3b:e1:90:4d:24:a0:0d:
40:a9:d0:70:1b:5c:7f:33:0f:1f:88:ce:c0:48:53:
34:0e:f3:23:18:5c:43:b0:b3:cc:73:71:72:e9:a1:
f9:db:57:bf:06:13:b1:23:8a:06:47:c9:4a:f7:70:
9f:c6:b3:b0:5b:93:d6:14:bd:76:63:36:ad:ef:43:
da:3f:e8:81:82:e1:5b:bc:1b:1e:a4:cc:c1:a4:38:
2b:d6:be:c6:b8:e4:54:f5:59:8d:f3:50:d7:bd:f6:
a7:2f:6b:14:67:ca:aa:dd:97:36:4a:e8:da:7f:7e:
7e:c1:98:b0:9e:2d:7a:2e:63:59:77:46:d6:01:4c:
48:d4:92:0c:ad:57:66:b9:b8:26:f2:a5:43:a6:08:
65:a6:03:f4:30:79:4c:a7:4a:61:f0:f6:1a:d2:95:
85:60:44:44:68:8e:8e:40:6c:1b:81:77:07:99:23:
88:03:ee:17:df:96:38:66:59:ab:77:08:c1:e4:45:
fb:17:4d:96:30:86:71:fe:74:58:84:53:22:35:30:
da:02:b7:b0:be:19:58:4c:46:31:28:d2:1a:4d:54:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:09:8D:96:E7:10:46:0E:7B:08:B7:16:42:59:98:9E:56:B5:3C:6D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tgmNlucQRg57CLcWQlmYnla1PG0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
9e:41:45:dd:c9:3b:a2:9c:8a:b7:78:5f:1c:14:2c:a1:cc:c4:
29:1f:d7:80:e7:a7:9a:ed:ad:22:56:e8:8e:47:34:c4:64:a4:
86:e3:b0:3e:b0:70:01:2f:d3:2e:dc:5a:a4:99:6c:05:d5:6b:
62:16:df:8b:c2:25:e4:36:4b:96:49:55:35:96:8b:21:44:2d:
a0:9d:4d:7a:42:5e:d3:68:86:14:55:02:5b:f6:96:79:99:2d:
68:6c:b2:9f:ae:69:47:7d:9b:17:5d:5d:38:95:2b:5e:fe:43:
80:51:5c:82:bc:b4:f7:da:fa:3e:2b:fd:aa:fd:01:ad:93:da:
b4:53:bc:37:75:bb:d4:9a:9d:c5:e6:33:2b:50:a1:72:41:5a:
d2:7b:b9:4f:63:99:41:51:c3:3b:74:05:b9:f4:73:ad:8b:81:
c5:0d:ab:ff:b9:a5:67:03:ca:a7:f2:be:27:b6:4a:f1:91:e0:
5b:32:f0:9c:41:08:97:52:35:e7:5e:6a:81:ec:39:ab:74:d3:
45:4d:2f:89:c1:19:05:67:b2:86:b4:80:66:2c:1c:ad:59:f2:
4a:4e:e7:b9:31:64:a8:c4:cb:0b:b8:3f:93:f3:ab:fd:e7:6e:
4d:73:32:1e:29:b4:93:78:78:fa:a8:3c:24:bf:f7:87:88:be:
3e:99:db:0f
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICeGgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MTgx
MDEyMTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEI2MDk4RDk2RTcxMDQ2
MEU3QjA4QjcxNjQyNTk5ODlFNTZCNTNDNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCbkPXO4yzYMQv4nFH0x7r9SWa8Ejlu8HNzWk1snZRPOHMPUhwk
O+GQTSSgDUCp0HAbXH8zDx+IzsBIUzQO8yMYXEOws8xzcXLpofnbV78GE7EjigZH
yUr3cJ/Gs7Bbk9YUvXZjNq3vQ9o/6IGC4Vu8Gx6kzMGkOCvWvsa45FT1WY3zUNe9
9qcvaxRnyqrdlzZK6Np/fn7BmLCeLXouY1l3RtYBTEjUkgytV2a5uCbypUOmCGWm
A/QweUynSmHw9hrSlYVgRERojo5AbBuBdweZI4gD7hffljhmWat3CMHkRfsXTZYw
hnH+dFiEUyI1MNoCt7C+GVhMRjEo0hpNVJ8rAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUtgmNlucQRg57CLcWQlmYnla1PG0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3RnbU5sdWNRUmc1N0NM
Y1dRbG1ZbmxhMVBHMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQCeQUXd
yTuinIq3eF8cFCyhzMQpH9eA56ea7a0iVuiORzTEZKSG47A+sHABL9Mu3FqkmWwF
1WtiFt+LwiXkNkuWSVU1loshRC2gnU16Ql7TaIYUVQJb9pZ5mS1obLKfrmlHfZsX
XV04lSte/kOAUVyCvLT32vo+K/2q/QGtk9q0U7w3dbvUmp3F5jMrUKFyQVrSe7lP
Y5lBUcM7dAW59HOti4HFDav/uaVnA8qn8r4ntkrxkeBbMvCcQQiXUjXnXmqB7Dmr
dNNFTS+JwRkFZ7KGtIBmLBytWfJKTue5MWSoxMsLuD+T86v9525NczIeKbSTeHj6
qDwkv/eHiL4+mdsP
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:34:18 2025 by rpki-client