Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-6REzchqlkL45NEAmKBuAYi9EHk.roa
File: -6REzchqlkL45NEAmKBuAYi9EHk.roa (raw, json)
Hash identifier: Re69Yn60GvgSjaoNF6d02rk+UvGwmFwk17JfKN7p9PA=
Subject key identifier: FB:A4:44:CD:C8:6A:96:42:F8:E4:D1:00:98:A0:6E:01:88:BD:10:79
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 64A6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-6REzchqlkL45NEAmKBuAYi9EHk.roa
Signing time: Mon 26 May 2025 11:42:34 +0000
ROA not before: Mon 26 May 2025 11:42:34 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25766 (0x64a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 26 11:42:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=FBA444CDC86A9642F8E4D10098A06E0188BD1079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:c1:aa:c4:a1:38:b9:fd:15:63:d0:97:5a:
41:cc:7f:fa:7c:14:a3:7d:1a:04:09:fe:6f:a2:7d:
f2:73:58:a3:4d:57:a1:c4:09:e4:71:7e:2c:e3:a0:
ba:92:c6:3b:93:a7:d5:66:dc:61:85:b6:6a:54:3a:
0b:e4:09:bc:c3:e9:eb:50:87:aa:c6:25:19:6e:2e:
ce:3d:73:cb:5b:bd:a0:0c:f0:08:eb:8f:15:1c:35:
b5:bb:7c:ad:87:bd:a1:95:6c:eb:3a:a6:f9:7a:d8:
94:10:e2:74:64:8d:a6:0d:cf:73:1a:9c:00:52:b3:
ce:08:06:d8:b7:a1:ac:44:9c:15:47:35:da:2b:af:
59:ec:4c:1c:e8:c3:8f:55:87:6d:3c:18:62:15:b5:
d5:36:cf:f0:ae:8b:69:a4:40:e0:ab:81:16:2e:a5:
43:55:cd:33:41:4c:85:f6:5b:73:21:39:56:98:48:
ba:ef:2c:c8:d7:8a:d5:22:d3:9a:1f:4c:96:25:92:
b5:9e:21:bb:55:88:f4:9c:04:70:93:c8:f9:50:25:
fe:80:96:37:31:07:8c:b3:c3:63:fe:6d:a2:5c:fb:
36:0d:a9:37:41:aa:81:81:f6:53:10:dc:0a:48:a4:
10:97:5a:48:ae:5a:4c:17:95:1f:4c:e3:87:d7:07:
b0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A4:44:CD:C8:6A:96:42:F8:E4:D1:00:98:A0:6E:01:88:BD:10:79
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-6REzchqlkL45NEAmKBuAYi9EHk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
0e:dc:0e:46:17:7d:92:06:99:0a:b9:6f:e3:a6:f4:21:3e:ea:
d7:8c:a5:a1:66:a7:31:c4:55:9c:51:7c:e0:e9:af:d1:0f:3a:
ac:c5:70:64:ba:7b:e6:31:37:e6:25:5a:94:15:3d:cf:0b:f4:
62:55:09:97:3b:38:00:81:dd:bd:f7:b1:b4:db:b7:b4:b8:13:
67:0e:c0:0d:d8:79:65:d2:ca:f0:18:01:87:8d:0a:5c:70:c6:
2f:a1:e1:56:7b:af:ec:b5:b0:16:b8:70:46:7d:29:6f:91:fd:
43:97:27:d3:a0:5e:b8:75:86:4b:6c:66:30:02:9d:ec:ab:91:
32:61:b5:90:10:a8:91:02:f1:4f:d0:74:9f:36:39:7d:5a:e2:
5f:af:f6:d0:1c:ec:5d:19:17:76:84:d4:34:2b:55:47:a8:83:
0d:fd:ed:e3:3b:57:34:51:47:68:c9:97:aa:89:4a:a3:62:e6:
9f:b7:53:80:5d:15:ec:22:21:65:6b:96:70:9e:d9:51:09:3e:
97:5d:73:1d:fd:be:3c:b2:d2:eb:ec:6b:54:1b:ac:56:7b:5b:
b7:17:15:bb:b9:3a:c5:bf:d3:77:ee:82:72:db:35:da:1a:96:
ac:ec:9d:9c:dc:2d:80:0e:21:ff:2d:2c:65:21:96:2e:28:e5:
6b:22:2b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:18:54 2025 by rpki-client