Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/5JJfOmwmqQJL-c8MFzmR6IZu7sw.roa
File: 5JJfOmwmqQJL-c8MFzmR6IZu7sw.roa (raw, json)
Hash identifier: j3kvddkAPjDGuKzppq+sWng5Qfzrh/bLCkUcSiwOCLg=
Subject key identifier: E4:92:5F:3A:6C:26:A9:02:4B:F9:CF:0C:17:39:91:E8:86:6E:EE:CC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6332
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5JJfOmwmqQJL-c8MFzmR6IZu7sw.roa
Signing time: Thu 22 May 2025 14:40:51 +0000
ROA not before: Thu 22 May 2025 14:40:51 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25394 (0x6332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 22 14:40:51 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E4925F3A6C26A9024BF9CF0C173991E8866EEECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:e8:f7:4e:92:9e:70:8c:6f:0e:e4:e5:f1:
bd:63:f9:59:76:ec:e5:6f:a0:57:33:48:d4:7a:5f:
62:d4:a3:44:e4:b4:76:d9:3a:4b:3c:0f:63:89:e9:
2c:21:83:6d:c4:66:5b:f6:01:9a:60:f1:53:72:b3:
ec:f1:81:b2:76:52:ee:ff:31:15:da:64:da:0b:53:
17:78:1a:b1:4f:cd:13:ae:39:e8:a7:28:fe:26:bb:
c0:18:24:54:7f:d9:9a:c5:d3:1a:8b:d8:2c:02:bb:
8a:85:51:d2:65:15:ce:9d:f7:19:1f:76:e1:88:8d:
16:db:64:62:8e:b6:bb:06:cd:8f:0c:0d:b2:f2:97:
4a:ba:e4:80:b6:c8:44:75:27:e8:86:1f:39:92:9d:
4a:7d:a1:10:35:48:59:98:5f:85:42:fc:08:fa:c0:
25:7d:2c:12:2c:64:e8:7c:e5:cf:00:24:a2:8b:7a:
78:2c:23:4a:f5:e8:9d:7e:8d:b2:42:2e:7d:18:4c:
5a:72:fd:53:1e:fe:2e:8e:75:34:5a:e5:ce:55:ee:
95:07:c4:14:23:03:68:71:ee:6d:08:a3:48:30:ad:
52:cb:ae:3c:fd:a1:df:07:32:af:4b:45:d8:de:6e:
2f:74:16:6d:8b:91:fa:3f:6b:44:d5:c9:aa:4a:d2:
84:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:92:5F:3A:6C:26:A9:02:4B:F9:CF:0C:17:39:91:E8:86:6E:EE:CC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5JJfOmwmqQJL-c8MFzmR6IZu7sw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
61:99:dd:02:25:30:eb:1e:df:b0:44:40:1e:ef:3d:39:d4:dc:
55:41:9b:e4:4c:7c:38:9d:71:be:cf:66:c9:f1:64:61:0a:a3:
7f:aa:09:60:26:81:0c:da:e0:9d:e5:5d:cd:c8:61:1e:d7:bd:
ad:5b:2b:6a:25:16:27:ad:69:33:e6:28:2a:d9:23:b2:2b:9d:
6d:9b:ad:24:f0:6d:f5:71:3d:5c:ff:d3:11:1d:59:46:6d:10:
7c:40:de:97:c1:33:e5:c3:26:59:c6:0c:96:10:83:a4:3e:33:
99:89:bd:f2:81:d7:11:75:9e:d4:cd:09:3e:70:95:b1:67:26:
38:3e:e8:ba:62:62:b0:0c:6a:79:b4:86:c3:99:99:42:31:47:
4a:d3:b0:82:91:5d:9c:c4:45:0c:17:94:55:11:76:f3:99:1f:
4e:22:a6:21:73:66:12:72:4a:1a:db:f1:7a:bc:38:4d:14:f5:
89:c9:4a:3b:6f:58:66:a8:96:14:19:b5:65:fd:9e:e6:dc:57:
f7:7b:02:47:a1:a7:44:25:90:b5:b0:66:9c:24:ce:fc:54:fb:
ad:43:8f:2a:1a:63:2c:2c:47:cb:ff:91:d8:21:b2:d0:4d:04:
ac:4c:5f:c7:b4:84:f8:be:00:12:95:58:a8:08:e3:ca:69:97:
b0:78:06:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:24:15 2025 by rpki-client