Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-tIZpujlXPXPAzbsYd0k6vfRI4k.roa
File: -tIZpujlXPXPAzbsYd0k6vfRI4k.roa (raw, json)
Hash identifier: lRO/ebeKUcMmH32VNMwf0ikG8yh0Mpgy1NQmiArBl1w=
Subject key identifier: FA:D2:19:A6:E8:E5:5C:F5:CF:03:36:EC:61:DD:24:EA:F7:D1:23:89
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6236
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-tIZpujlXPXPAzbsYd0k6vfRI4k.roa
Signing time: Mon 19 May 2025 23:43:53 +0000
ROA not before: Mon 19 May 2025 23:43:53 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25142 (0x6236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 19 23:43:53 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=FAD219A6E8E55CF5CF0336EC61DD24EAF7D12389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:e3:ae:3b:3e:23:ea:37:ef:1a:56:56:a4:
fb:fa:aa:fa:0e:b1:47:91:38:c9:f0:0d:c7:0f:ce:
bf:b4:27:43:2d:ba:06:f8:a3:3d:96:7f:dc:75:9a:
e7:7f:c5:e1:e1:5d:37:6a:61:42:a0:1f:58:16:6a:
19:d7:2d:48:4e:f3:f7:3d:25:cd:0f:6c:e7:dd:a4:
00:16:b4:12:d4:96:7f:04:02:e5:ad:73:d0:95:99:
ce:0c:11:70:a7:92:41:7e:42:4e:ce:50:16:17:67:
e5:56:10:9c:a4:71:09:8f:16:89:d7:61:ad:fe:b1:
03:9d:6e:54:b5:73:e0:81:1d:3c:41:fb:4e:20:1c:
94:15:55:5a:1a:12:bf:93:31:bb:4d:5b:f8:72:29:
39:5f:10:54:ae:40:40:a1:b6:48:cb:c2:15:90:1a:
1b:53:ef:ee:d0:c6:13:46:f4:7c:06:87:67:b0:d1:
49:3f:57:7b:94:88:75:39:e0:0a:0e:c1:a9:fb:80:
47:c7:39:69:eb:d0:71:c4:94:a7:27:d0:e9:ab:94:
cc:ab:be:17:b5:af:52:a6:03:b1:15:f6:fe:b8:4b:
27:02:d9:f2:4b:7f:15:0b:e4:cb:b6:10:be:1e:1c:
55:fe:3d:2b:1b:77:73:ba:f3:b8:4c:6b:86:dd:10:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D2:19:A6:E8:E5:5C:F5:CF:03:36:EC:61:DD:24:EA:F7:D1:23:89
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-tIZpujlXPXPAzbsYd0k6vfRI4k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
40:7e:d4:5e:4e:74:f2:bb:c5:11:aa:5e:cf:d6:1c:8c:5a:b5:
7b:bd:33:2c:7f:59:e1:ae:45:63:96:29:f8:84:90:d0:26:a6:
8c:2c:21:a8:5c:e6:2c:31:44:e0:c8:e0:7f:02:61:12:04:b8:
d0:cf:12:7a:52:98:47:a1:c0:07:07:27:82:3d:d9:a9:c4:b5:
9a:f4:37:55:04:39:df:53:15:03:cc:e2:aa:22:20:e7:e2:b6:
89:60:33:18:b7:59:d1:58:ee:8a:41:08:e5:0d:ab:1e:41:c3:
74:38:ee:a2:88:6e:17:9d:65:e3:5c:b1:4a:22:62:b7:a7:f9:
8c:d7:ad:05:6b:0e:ea:2a:18:a1:c6:ad:ee:42:18:77:54:1b:
55:b9:08:ef:54:c9:d4:79:d2:46:a2:89:56:4c:68:a2:ec:df:
9e:e7:e6:63:f2:3f:44:67:20:09:03:01:7a:12:3b:07:c9:44:
c0:e0:97:6e:0d:d3:9c:5a:b2:32:df:50:8c:1c:06:e1:67:cf:
25:ee:0c:0e:d4:c5:6e:64:bc:fa:4b:de:24:e4:ad:56:9f:8d:
73:19:33:99:da:fd:82:13:08:4b:37:a6:5b:34:4b:f2:2c:f4:
b7:e2:e9:0f:cc:56:91:d9:f6:38:cb:cc:ab:5d:b4:a0:cd:6b:
e3:0f:f2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:17:31 2025 by rpki-client