Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/4VKcJAEXV_I1QKqod0B6emz8HJA.roa
File: 4VKcJAEXV_I1QKqod0B6emz8HJA.roa (raw, json)
Hash identifier: DJM3uTF3Rxh6xOQ4XCfP9JRH2evXcpO+5ql1QNPZN0A=
Subject key identifier: E1:52:9C:24:01:17:57:F2:35:40:AA:A8:77:40:7A:7A:6C:FC:1C:90
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 64AE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4VKcJAEXV_I1QKqod0B6emz8HJA.roa
Signing time: Mon 26 May 2025 13:41:05 +0000
ROA not before: Mon 26 May 2025 13:41:05 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25774 (0x64ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 26 13:41:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E1529C24011757F23540AAA877407A7A6CFC1C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f2:c5:0c:47:df:1c:4c:4c:ef:17:83:8e:82:
4e:24:09:ce:4d:c5:d8:bf:de:63:48:4e:99:5d:94:
8c:76:41:a6:ee:35:70:58:d2:03:93:ed:8d:45:e3:
e4:cd:64:eb:61:18:91:35:9e:df:65:96:0b:09:8c:
45:83:97:fd:f1:3d:06:80:22:27:a5:2d:b7:af:d4:
a1:b9:42:8c:7e:9d:bf:6d:55:af:09:e6:a1:54:5c:
8f:60:c3:9c:dc:57:00:f2:fa:3b:cd:eb:77:3b:9c:
1a:13:71:fe:73:77:d6:75:eb:40:eb:cf:ca:f0:8b:
d7:42:ff:92:8e:0f:04:c5:45:23:36:18:9f:d3:4b:
ec:df:7d:f8:c1:47:e5:2d:87:18:71:4b:a4:d0:0f:
9f:41:1a:95:76:9e:67:41:e8:c6:e5:a3:4d:fc:a1:
89:97:a0:6e:c9:f7:93:18:e9:0d:2f:40:81:21:a5:
3c:d4:a5:ef:df:5a:9e:84:12:02:f6:8c:20:d0:3b:
d2:b5:2d:69:2e:5c:db:61:97:4e:b2:a2:19:f5:a7:
4c:a4:fd:11:72:be:9a:7c:58:a0:c7:5a:d2:2c:4b:
3a:22:dd:db:a7:81:77:11:81:03:2c:9a:ae:35:f0:
ec:35:6d:ec:22:d1:87:6e:58:02:0e:fb:cf:02:e7:
a8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:52:9C:24:01:17:57:F2:35:40:AA:A8:77:40:7A:7A:6C:FC:1C:90
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4VKcJAEXV_I1QKqod0B6emz8HJA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
ba:d6:ac:ab:46:9f:92:9f:d6:18:63:53:ae:57:46:57:fb:5e:
76:b7:5e:fd:f7:d7:97:ef:55:ed:3e:7c:22:5e:d3:05:76:23:
68:8c:62:3f:01:af:d5:3c:33:97:7f:f1:f6:62:72:50:15:ae:
08:85:0b:6f:40:2a:61:11:21:93:eb:d1:43:52:ac:88:b6:0c:
b4:cf:83:7d:36:9f:8c:24:64:9f:1d:40:25:ca:76:d5:ce:0b:
cd:41:c5:43:27:a8:0a:84:4f:5b:c2:e1:ab:30:91:0a:d1:fb:
2d:3f:fe:d3:f9:2f:94:63:fe:e1:f8:70:26:bc:e9:aa:8d:66:
ac:43:d4:94:13:df:05:ce:50:93:d7:8c:9a:26:61:a0:75:ec:
43:e4:ab:d7:76:31:de:94:e1:95:d4:83:d6:6f:95:91:df:0a:
24:9b:5a:c4:22:30:03:ae:02:63:8d:99:2c:0d:38:67:ab:c7:
ee:8a:54:7a:6a:ab:43:70:f9:97:f4:84:75:10:0d:bb:ca:43:
42:3a:94:32:30:fc:d2:22:d5:79:0e:a0:fb:a3:bd:a6:71:54:
ed:52:30:df:95:01:36:6e:42:3d:52:48:b1:af:3e:56:7f:87:
06:af:04:3d:5b:50:be:60:a3:8e:fb:99:72:d8:59:0f:e7:02:
27:27:d2:e4
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICZK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjYx
MzQxMDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEUxNTI5QzI0MDExNzU3
RjIzNTQwQUFBODc3NDA3QTdBNkNGQzFDOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDT8sUMR98cTEzvF4OOgk4kCc5Nxdi/3mNITpldlIx2QabuNXBY
0gOT7Y1F4+TNZOthGJE1nt9llgsJjEWDl/3xPQaAIielLbev1KG5Qox+nb9tVa8J
5qFUXI9gw5zcVwDy+jvN63c7nBoTcf5zd9Z160Drz8rwi9dC/5KODwTFRSM2GJ/T
S+zfffjBR+UthxhxS6TQD59BGpV2nmdB6Mblo038oYmXoG7J95MY6Q0vQIEhpTzU
pe/fWp6EEgL2jCDQO9K1LWkuXNthl06yohn1p0yk/RFyvpp8WKDHWtIsSzoi3dun
gXcRgQMsmq418Ow1bewi0YduWAIO+88C56hZAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQU4VKcJAEXV/I1QKqod0B6emz8HJAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzRWS2NKQUVYVl9JMVFL
cW9kMEI2ZW16OEhKQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQC61qyr
Rp+Sn9YYY1OuV0ZX+152t17999eX71XtPnwiXtMFdiNojGI/Aa/VPDOXf/H2YnJQ
Fa4IhQtvQCphESGT69FDUqyItgy0z4N9Np+MJGSfHUAlynbVzgvNQcVDJ6gKhE9b
wuGrMJEK0fstP/7T+S+UY/7h+HAmvOmqjWasQ9SUE98FzlCT14yaJmGgdexD5KvX
djHelOGV1IPWb5WR3wokm1rEIjADrgJjjZksDThnq8fuilR6aqtDcPmX9IR1EA27
ykNCOpQyMPzSItV5DqD7o72mcVTtUjDflQE2bkI9Ukixrz5Wf4cGrwQ9W1C+YKOO
+5ly2FkP5wInJ9Lk
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:55:31 2025 by rpki-client