Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-A2zyrzNJ26ZS5m9nMbYJJypffw.roa
File: -A2zyrzNJ26ZS5m9nMbYJJypffw.roa (raw, json)
Hash identifier: Y8JeZB8LDb1BP2v7X+Iji6b0hE84FvvDzYuW9/MaAQU=
Subject key identifier: F8:0D:B3:CA:BC:CD:27:6E:99:4B:99:BD:9C:C6:D8:24:9C:A9:7D:FC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6422
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-A2zyrzNJ26ZS5m9nMbYJJypffw.roa
Signing time: Sun 25 May 2025 02:40:59 +0000
ROA not before: Sun 25 May 2025 02:40:59 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25634 (0x6422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 25 02:40:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F80DB3CABCCD276E994B99BD9CC6D8249CA97DFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:5b:81:35:3a:37:85:13:60:b9:42:94:16:
d0:85:7a:84:d2:09:34:ae:30:de:ef:e7:9c:31:ea:
9b:ec:ba:34:35:a9:9d:bb:6f:f3:db:f2:d8:de:68:
03:e6:d5:36:9e:9f:34:e2:7c:99:9a:2b:fd:fb:df:
e4:00:0b:e6:e2:0b:24:11:04:64:61:bc:ad:d9:4d:
33:ea:ed:29:ec:b0:5d:22:de:e5:02:4f:97:02:f9:
f8:70:a2:1e:9a:e9:9e:22:2f:b1:dd:ca:d6:f6:a2:
c7:d1:c5:6c:15:4b:3d:59:5f:72:d0:5d:3a:5b:70:
fa:3c:ec:31:15:4f:f0:8a:c8:3c:a0:7c:2b:57:3f:
79:4b:e2:fd:51:f9:e9:f1:93:26:49:a4:76:78:47:
de:4c:a4:55:d8:9e:46:df:4d:89:18:3c:1a:e7:54:
3b:f9:a0:ef:26:cb:b7:f6:97:13:d2:59:5e:3b:08:
be:8a:0b:88:a6:9b:fc:87:af:36:d2:9d:eb:03:d8:
b5:45:af:b5:0e:fd:ea:d1:8a:2e:54:4d:d1:ef:09:
23:58:9f:84:79:e2:0d:f7:6c:cf:2f:bb:9b:a6:f8:
25:a5:fb:8c:df:b8:b7:24:b5:9a:b8:18:46:a0:ec:
8e:68:63:73:2b:e0:95:49:50:31:27:cb:70:40:26:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0D:B3:CA:BC:CD:27:6E:99:4B:99:BD:9C:C6:D8:24:9C:A9:7D:FC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-A2zyrzNJ26ZS5m9nMbYJJypffw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
58:f9:ce:09:23:0b:3d:c5:ca:ff:74:9c:3d:28:51:a1:07:80:
a3:b3:f8:46:39:14:fc:00:f2:2d:ef:71:7a:a2:6e:9f:d5:5e:
9f:42:01:76:bf:3d:16:e2:3f:8f:6f:63:4c:0c:80:ff:da:f7:
c1:45:cf:53:56:db:5c:01:a6:a6:3e:f2:db:7a:3a:57:b2:bb:
8f:33:5a:72:18:07:b1:c7:a4:f6:43:07:52:06:dc:c5:30:2c:
fd:d6:ad:8a:04:53:a4:62:e7:91:8b:f4:70:65:01:1a:74:55:
16:be:0a:d6:0e:b4:ae:62:a3:5b:e3:69:25:27:a5:7b:3b:97:
c1:2f:90:c9:e6:b5:d8:3d:5a:b3:49:71:e7:1a:c2:4e:50:ef:
03:13:b2:75:f5:da:9f:46:b3:48:a2:ea:18:5a:90:65:bb:4e:
0e:e3:48:8b:26:f7:de:54:ab:0e:d5:79:7f:e8:e7:94:14:35:
9b:69:29:63:cb:cc:e4:d1:ed:10:f3:15:f2:56:83:ff:17:0f:
ee:7a:9e:8b:d7:c4:a1:45:f7:d1:21:26:2c:ca:b7:cc:a1:7b:
0b:42:1a:95:89:75:e0:17:3b:c4:5d:bc:b2:cb:11:f0:40:50:
d8:de:a4:51:38:e1:33:41:4f:db:5c:1a:cc:1d:6c:83:57:e2:
7e:df:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:29:22 2025 by rpki-client