Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6GdG5lRiMzUDVGMs26fDnTQ-LIc.roa
File: 6GdG5lRiMzUDVGMs26fDnTQ-LIc.roa (raw, json)
Hash identifier: J9o3My3jcAD0VQK5HpnRGOoRbCHEkYgMFKakQRwjc6g=
Subject key identifier: E8:67:46:E6:54:62:33:35:03:54:63:2C:DB:A7:C3:9D:34:3E:2C:87
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6654
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6GdG5lRiMzUDVGMs26fDnTQ-LIc.roa
Signing time: Fri 30 May 2025 23:11:33 +0000
ROA not before: Fri 30 May 2025 23:11:33 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26196 (0x6654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 30 23:11:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E86746E6546233350354632CDBA7C39D343E2C87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:d8:e4:74:1e:dd:42:2b:00:fc:16:01:49:
a0:38:92:12:09:7f:4d:fd:c6:a9:a1:44:07:2a:20:
7f:01:c0:78:d5:07:71:08:e8:4a:29:cc:b9:89:ce:
f9:bc:22:29:48:94:f7:c9:30:b3:0d:51:ce:72:87:
25:1a:cf:32:f8:13:0e:44:63:0c:e6:94:48:67:fe:
99:b9:a4:14:0d:97:fb:52:37:8d:59:6f:8a:08:2d:
3a:e3:71:84:e8:25:0c:38:17:c7:f0:31:a1:64:76:
b6:60:a2:87:85:58:ab:40:ee:3b:c2:af:18:cc:23:
00:9f:e8:ff:38:01:2e:05:89:2b:bb:e5:33:c7:57:
3b:fb:35:e7:78:6c:4c:84:86:39:44:83:02:f5:36:
37:4a:98:0b:3f:6e:a5:e8:94:61:2b:2d:23:07:83:
18:c5:6f:b2:fd:10:ba:88:d1:a4:38:09:e8:98:61:
c7:c8:41:94:fb:c5:0a:d7:56:dc:fd:61:51:e2:70:
4e:b2:53:2b:c7:7f:d7:26:d9:1d:69:0a:fb:fa:83:
ef:55:57:53:fd:00:67:30:f0:94:49:4f:36:89:b7:
b4:5c:74:a3:ec:16:aa:ce:57:39:72:b6:29:01:ac:
3c:e3:fa:79:67:d4:41:76:4a:03:d2:74:99:4c:94:
43:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:67:46:E6:54:62:33:35:03:54:63:2C:DB:A7:C3:9D:34:3E:2C:87
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6GdG5lRiMzUDVGMs26fDnTQ-LIc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
ba:d8:f3:f7:0d:0c:e7:5f:cb:2d:06:b8:67:df:13:97:ba:f7:
4f:0c:e0:8d:ba:17:63:6e:ff:cb:0e:29:13:ed:6e:10:56:e4:
a0:15:4a:9c:c1:9b:02:9b:90:88:84:3f:4f:96:17:40:94:8c:
26:f5:f6:77:fe:b0:e2:f2:a1:62:ed:9b:f6:46:e2:e6:0c:a4:
0c:1a:a1:a8:70:98:15:26:f0:90:d6:e1:29:1e:ea:14:7f:fa:
48:62:6d:0d:3f:b1:4e:f3:6b:35:3e:8a:ef:06:bf:88:fb:a0:
7f:7e:10:4a:4b:0e:e2:92:1c:22:a1:2a:e0:d8:64:e0:53:f7:
3e:bc:2b:7b:b1:1c:4a:90:58:0d:dd:ce:6d:4a:c3:77:e3:26:
6e:28:b7:ff:bb:ee:c2:50:47:d8:e8:4a:fe:57:a5:8e:0e:3d:
ee:f1:06:5e:57:ca:80:7b:f5:42:80:80:a7:a6:e1:31:3b:d7:
2a:05:17:50:1a:81:af:fa:b9:ec:31:7b:98:b1:18:c3:cb:1f:
75:a0:cb:23:7d:34:3b:dc:11:23:8a:2c:66:27:de:28:4d:9c:
c1:5e:37:fc:0e:50:40:e6:15:3c:09:c2:99:7e:f2:b3:7c:f8:
36:64:d7:3d:b0:d3:ed:0b:6e:94:1b:3b:3b:ed:64:60:c8:36:
1d:35:97:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:50:07 2025 by rpki-client