Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Day5_5ex-8mAVGyuZsz8qbIYFik.roa
File: Day5_5ex-8mAVGyuZsz8qbIYFik.roa (raw, json)
Hash identifier: U/2R9bBb7SHER0WViyR//Lwdb7g6Y6IRuAPq04YzJ/0=
Subject key identifier: 0D:AC:B9:FF:97:B1:FB:C9:80:54:6C:AE:66:CC:FC:A9:B2:18:16:29
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6D1C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Day5_5ex-8mAVGyuZsz8qbIYFik.roa
Signing time: Wed 18 Jun 2025 01:12:32 +0000
ROA not before: Wed 18 Jun 2025 01:12:32 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27932 (0x6d1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 18 01:12:32 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0DACB9FF97B1FBC980546CAE66CCFCA9B2181629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:4a:29:39:2a:81:0b:a0:9a:ad:e4:aa:00:
ec:7e:6a:51:58:9b:32:3c:ec:97:1b:f3:00:17:4b:
15:af:11:1c:06:b2:aa:58:8d:26:49:94:97:2c:01:
33:c5:f4:64:7a:4f:1f:f9:35:0a:9e:80:82:b3:f7:
09:e3:0a:15:91:22:df:47:5f:d8:b9:0f:91:b5:19:
76:b6:a1:ee:fc:ad:27:fe:cd:59:ae:b7:d2:40:1e:
0b:03:99:75:1a:ab:8f:34:a3:71:15:75:c2:23:0f:
f0:73:56:f5:82:9e:96:87:8e:3d:01:d6:e1:1b:ff:
94:72:e1:2f:c2:67:2d:f2:00:90:23:3d:54:df:04:
77:1f:ae:45:ca:51:e1:5d:42:a0:68:97:19:39:a2:
ff:48:bb:a2:20:b7:21:1f:9a:8f:81:c9:5f:12:7e:
69:82:ed:32:a4:63:90:b1:0c:9e:2b:ae:52:02:1c:
4f:f8:10:e1:28:ea:d9:f3:00:3a:59:72:04:4c:92:
7b:99:c9:23:b1:a6:5e:e5:81:9b:ca:6f:0f:a0:ce:
80:6f:60:d8:3a:39:45:9f:6d:bb:77:47:99:80:d4:
18:8a:22:bf:e6:28:34:97:72:fc:6b:a0:38:f7:64:
ec:72:16:af:2e:14:89:bb:f7:ce:df:c2:c4:c9:89:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:B9:FF:97:B1:FB:C9:80:54:6C:AE:66:CC:FC:A9:B2:18:16:29
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Day5_5ex-8mAVGyuZsz8qbIYFik.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
57:a5:e9:05:d5:3b:8f:77:b5:cb:d2:5a:33:ca:a7:b8:78:a1:
ef:d9:b3:54:7e:38:da:33:15:29:82:5e:a5:06:41:be:99:97:
ec:4a:02:80:75:9d:33:d0:0d:0e:13:c8:e2:8d:fa:f6:a5:dd:
b4:b2:bb:77:ad:30:4e:8b:36:10:75:02:f6:b9:4e:98:0b:1d:
89:dc:12:a2:a6:6b:60:e8:30:dc:cb:54:9e:9b:38:e9:a4:2c:
ae:c9:82:10:c5:03:42:46:b3:01:d9:b4:cf:c9:01:84:3f:2e:
3a:96:ff:7d:c9:06:73:ce:f5:90:26:0e:97:db:95:a7:14:9e:
c5:9c:42:b3:4c:50:ef:28:4e:0f:08:a6:b9:f8:62:81:d4:22:
34:dd:64:61:a3:bd:b2:4d:75:b7:a3:bf:b4:0f:08:a7:35:e4:
16:0c:0b:16:fa:2f:02:bb:61:99:87:f6:18:aa:74:77:c7:2b:
72:93:80:bb:eb:cc:fc:23:67:78:9c:1a:d7:ff:81:d1:93:3b:
4a:02:5d:91:14:61:41:7d:dc:86:09:43:39:1a:e7:57:0d:cd:
64:30:68:18:56:8c:75:93:3f:e5:28:61:5b:86:9e:6d:cc:62:
12:72:bf:53:1b:12:03:65:33:f9:93:d9:b1:1b:7c:7f:b2:0f:
34:04:82:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:35:15 2025 by rpki-client