Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/twuuvzyTMQDRYwq4QITf2Yns04U.roa
File: twuuvzyTMQDRYwq4QITf2Yns04U.roa (raw, json)
Hash identifier: XTgiFqoQoSB7piUH3ctyR2ZMM1zO1F7qXHIrXglrPz4=
Subject key identifier: B7:0B:AE:BF:3C:93:31:00:D1:63:0A:B8:40:84:DF:D9:89:EC:D3:85
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 74DC
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/twuuvzyTMQDRYwq4QITf2Yns04U.roa
Signing time: Tue 08 Jul 2025 22:45:02 +0000
ROA not before: Tue 08 Jul 2025 22:45:02 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29916 (0x74dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 8 22:45:02 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B70BAEBF3C933100D1630AB84084DFD989ECD385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:7a:7f:2c:c6:db:66:cc:62:c9:d1:fb:2a:
31:0a:eb:3a:c6:27:e5:1f:9d:41:c2:df:b4:e0:31:
1a:57:b9:cb:6e:cb:22:56:2d:97:4d:ea:d0:ce:bb:
aa:bd:c0:fd:24:73:88:81:13:10:cb:3e:91:b0:f4:
ce:2d:fa:87:ba:d4:6b:08:18:c3:60:8d:fc:b3:59:
98:e5:16:c5:ba:ad:84:96:55:55:8b:ba:cc:1a:a0:
a0:c8:59:f3:91:df:89:78:0b:2b:a4:01:41:49:0e:
e7:da:db:15:e2:2b:93:c7:ed:e0:9a:9c:ef:37:44:
67:f3:83:2e:23:dc:41:64:cd:ed:9b:49:90:25:47:
87:a6:a5:ab:63:17:92:26:f6:2a:6e:f0:35:b1:71:
9d:8b:b7:cb:91:47:75:7d:86:37:e7:f7:04:95:0d:
b4:ff:2d:a3:0c:d5:86:1c:13:2a:4b:30:35:c9:69:
eb:3c:9c:32:6b:26:b7:0d:27:ac:dd:ce:14:f8:8c:
b3:cf:fb:32:5a:fe:e4:bf:f3:75:de:61:d5:95:48:
d9:ab:d8:47:7a:d0:bc:87:76:cc:1c:57:e4:b9:44:
88:34:05:21:60:77:7e:fb:18:94:97:d3:c8:a4:18:
10:d7:ae:f4:d8:cf:23:bb:4f:32:ee:1f:c3:6c:e8:
24:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0B:AE:BF:3C:93:31:00:D1:63:0A:B8:40:84:DF:D9:89:EC:D3:85
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/twuuvzyTMQDRYwq4QITf2Yns04U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1b:df:fd:d3:d3:26:0a:5c:29:96:61:43:bb:04:aa:7b:5a:6d:
ab:ca:e9:b6:44:06:49:37:24:2b:6f:62:07:ea:a7:fc:da:09:
55:3c:79:1d:99:92:42:ed:88:a4:2c:42:2b:4b:4e:6b:fb:05:
17:7f:44:42:74:9d:eb:90:ad:da:84:d3:ca:e0:fe:2e:af:7d:
a3:84:e3:1f:93:7e:33:0a:08:e2:ce:65:6d:e4:7b:57:d8:a2:
71:1b:59:1e:ac:5e:6b:d1:a8:5d:77:a0:d8:d0:ce:8f:4a:96:
25:7d:66:98:c5:67:d8:04:d1:2c:37:77:89:65:60:00:cb:40:
19:09:9d:eb:32:84:c7:13:75:67:55:34:eb:85:d4:42:dd:48:
56:62:a1:e1:ab:b1:7c:53:52:a9:e1:48:b1:61:0f:37:e7:11:
15:84:e6:66:f4:d5:bf:03:a2:a3:97:8d:59:77:bd:85:4f:ca:
55:b6:c8:8d:a4:26:83:a8:9b:99:1a:ff:2a:ca:b6:a0:10:78:
25:d2:76:58:cb:3a:b2:97:04:29:b2:8f:3d:9f:d5:75:af:1b:
40:c3:aa:7f:1f:9e:cb:24:8b:ff:b6:6f:02:7c:45:e5:12:98:
b2:aa:f5:07:fd:5e:3f:a8:76:cc:66:86:46:0d:9b:22:79:76:
a0:03:38:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:37:10 2025 by rpki-client