Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/DTEeWzZpLJhx6nGPL3R52zj5J7w.roa
File: DTEeWzZpLJhx6nGPL3R52zj5J7w.roa (raw, json)
Hash identifier: gSBXPvkNDYjDOjXDfsqzmK5J1xb22P3YieBn0WvhbHQ=
Subject key identifier: 0D:31:1E:5B:36:69:2C:98:71:EA:71:8F:2F:74:79:DB:38:F9:27:BC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 601E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DTEeWzZpLJhx6nGPL3R52zj5J7w.roa
Signing time: Wed 14 May 2025 09:40:26 +0000
ROA not before: Wed 14 May 2025 09:40:26 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24606 (0x601e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 09:40:26 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0D311E5B36692C9871EA718F2F7479DB38F927BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f1:0e:01:1b:41:1d:c2:ed:73:37:66:b6:77:
17:00:c2:87:7c:3e:c1:00:2d:7a:53:84:4b:23:a8:
a3:cb:55:fd:5a:0d:a0:55:f1:40:06:91:78:72:07:
23:27:5d:4a:a6:29:a9:42:5b:16:28:ac:09:6a:da:
e0:9c:60:b1:c4:a8:60:c5:f5:51:fc:cc:84:44:b1:
29:3f:81:a1:06:f3:3d:23:3c:8c:7f:9f:45:30:da:
31:d2:e1:a8:be:b3:56:c5:4c:26:cc:81:5e:5f:28:
6c:d1:84:d6:66:ee:01:8b:c2:c0:65:97:a2:84:c2:
29:25:2b:15:5f:be:a6:71:13:1a:a5:46:af:c1:a5:
82:09:e7:02:29:95:0c:30:58:3e:2b:94:28:9e:1e:
e6:77:3a:71:52:c6:62:53:1c:b9:dd:22:ca:e1:ea:
96:20:2d:b9:85:b6:65:2e:d7:20:b9:aa:23:d2:5f:
e6:14:ec:eb:d2:aa:0a:3b:f3:53:4c:0a:58:d2:76:
b8:8a:a0:28:9c:15:13:87:f7:63:c4:63:09:6d:64:
0c:d5:e6:58:7c:25:41:3b:d6:fc:95:3a:5c:99:c3:
a9:1f:61:7d:b1:b9:52:d9:31:f7:10:1c:99:78:d3:
fb:e0:f2:85:52:f3:28:80:89:94:55:09:fb:5c:21:
5f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:31:1E:5B:36:69:2C:98:71:EA:71:8F:2F:74:79:DB:38:F9:27:BC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DTEeWzZpLJhx6nGPL3R52zj5J7w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
66:23:26:f8:d4:ef:bd:21:ba:ea:41:7a:fa:11:63:4c:3b:60:
41:d6:a5:38:6a:bc:b2:a2:72:7a:6c:37:01:aa:ac:0b:be:be:
c0:b5:24:59:47:ff:3d:ea:0a:37:30:8f:93:f0:6b:3c:29:11:
c0:b8:45:48:bb:68:70:c1:34:f9:02:72:2e:37:63:cb:5a:a8:
3f:5e:a4:11:ae:da:ae:3f:3b:e5:5e:1c:5a:39:74:0f:57:ff:
28:6e:c7:a8:92:c5:76:09:a7:02:7e:9e:25:68:ab:3f:1e:5e:
c7:99:3a:17:35:b4:c5:71:34:76:07:2e:4a:c0:5e:94:bc:72:
11:d1:4f:3d:8a:e7:9c:a3:d0:d5:f8:99:97:4d:f5:6b:40:bd:
5d:d8:36:5e:42:10:87:7b:df:6a:c7:95:8b:fc:dd:de:ce:2d:
ea:5c:d6:4c:97:17:35:73:5f:53:1b:23:5c:4f:46:47:2d:7c:
03:59:d7:24:37:69:a6:1a:bd:61:00:b3:ad:5d:93:e9:32:eb:
08:e9:70:d8:c9:fa:f0:03:6e:f6:11:b4:2e:47:71:53:74:ed:
24:37:d1:58:a4:5f:84:7f:0c:3b:00:1c:d6:f3:7a:76:2b:33:
cb:d4:c3:63:41:9e:10:ec:db:50:e9:f1:ba:12:af:4e:54:7c:
85:25:5d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:02:30 2025 by rpki-client