Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/E2eWnuXXJcXRukTWDcCIArPxVMw.roa
File: E2eWnuXXJcXRukTWDcCIArPxVMw.roa (raw, json)
Hash identifier: iro45K2NjGdMXW0jEtLm9bNN/VSDub8QH1JQjR/cpT8=
Subject key identifier: 13:67:96:9E:E5:D7:25:C5:D1:BA:44:D6:0D:C0:88:02:B3:F1:54:CC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6196
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/E2eWnuXXJcXRukTWDcCIArPxVMw.roa
Signing time: Sun 18 May 2025 07:40:30 +0000
ROA not before: Sun 18 May 2025 07:40:30 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24982 (0x6196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 18 07:40:30 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1367969EE5D725C5D1BA44D60DC08802B3F154CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:a8:28:e4:fb:ae:37:83:2c:5f:41:0b:52:
f3:0e:b9:6e:91:c8:46:19:b5:92:01:7e:5d:d3:e3:
12:cc:53:7f:dc:b1:fd:53:54:6c:06:b5:aa:d9:be:
12:1c:f2:88:f1:e4:7c:4d:11:fc:e3:2a:52:95:d5:
55:d0:7e:9c:94:45:f0:3a:e1:83:51:93:e8:76:72:
65:41:ae:fb:64:7f:1f:07:0c:4d:7d:d2:a5:1c:49:
40:d5:fa:f6:7b:41:4e:56:3f:e9:df:ed:fd:fd:6d:
79:c0:71:06:7c:95:4e:bf:8c:cc:5f:4f:e7:59:0e:
43:c1:c2:ae:c1:16:c8:bc:2f:a1:cd:41:5a:83:40:
90:12:e3:c3:59:4b:91:5f:80:3c:a1:af:43:36:ce:
87:e2:6b:95:8c:09:27:ae:ca:ba:db:55:b2:28:14:
5d:25:ae:09:9a:fe:7c:4d:a9:6b:3d:b1:19:69:95:
f1:23:b1:f5:d3:a9:67:d8:91:51:2c:f1:53:8f:9c:
74:8a:24:6c:07:81:0c:86:20:3b:58:f2:39:ea:b4:
51:53:b7:b0:30:11:8a:5b:09:68:e6:b8:6e:c2:6e:
bd:e6:45:10:58:ed:3b:8f:2f:d3:3b:3b:b2:41:1f:
56:5e:a1:27:02:e8:29:13:d6:d0:b8:46:d9:da:90:
28:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:67:96:9E:E5:D7:25:C5:D1:BA:44:D6:0D:C0:88:02:B3:F1:54:CC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/E2eWnuXXJcXRukTWDcCIArPxVMw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
6e:d4:b1:15:3b:d1:d4:03:53:57:70:b9:cf:99:62:ee:11:53:
d9:27:2d:05:2c:bc:9b:d7:50:33:7d:03:81:7d:e8:e5:15:e9:
39:e0:3c:1c:58:67:6b:6e:e1:87:16:50:c7:76:f6:30:34:e0:
6b:01:4b:75:ef:c9:22:85:e8:73:3c:9d:75:79:53:48:59:75:
37:5a:81:6f:7d:8a:b1:8a:7a:50:41:a5:cf:af:81:24:59:44:
9a:50:f0:52:d7:0e:90:fc:81:12:69:8a:ec:b0:fb:bc:88:f5:
cb:c5:6e:61:c6:b9:65:1f:3f:53:08:71:c4:dd:40:c1:dc:76:
5e:5e:66:35:76:34:9c:36:d4:5c:18:e8:0b:bc:d0:e6:41:f4:
22:df:18:8e:39:f6:da:91:c8:c3:12:5a:eb:58:6c:4a:28:1b:
c8:5a:7f:84:b5:63:6c:97:d4:2f:af:e1:a9:3a:92:3f:7b:19:
81:fd:a9:af:5c:d6:84:2e:50:1d:71:69:f5:e9:93:7f:e1:66:
da:69:d0:d5:9b:f3:ca:b5:de:0e:3c:6e:f6:87:d9:46:c2:15:
6f:1c:13:80:0c:a1:73:0c:db:75:13:3a:82:5d:4e:3d:2c:86:
11:73:6f:04:71:d8:b0:bf:d9:3c:8f:a0:83:c1:76:73:8d:c2:
3b:ba:3d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:54:44 2025 by rpki-client