Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/IQZ8pkiVNes-o2iT5FS2V7t58jI.roa
File: IQZ8pkiVNes-o2iT5FS2V7t58jI.roa (raw, json)
Hash identifier: wnA9AkaD8iXO9tgWs+1cynrt4OOns3LIQYMLfr2GikE=
Subject key identifier: 21:06:7C:A6:48:95:35:EB:3E:A3:68:93:E4:54:B6:57:BB:79:F2:32
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6208
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IQZ8pkiVNes-o2iT5FS2V7t58jI.roa
Signing time: Mon 19 May 2025 12:10:38 +0000
ROA not before: Mon 19 May 2025 12:10:38 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25096 (0x6208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 19 12:10:38 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=21067CA6489535EB3EA36893E454B657BB79F232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:37:ee:fa:2f:7f:ab:f3:8f:ef:b0:64:76:32:
19:d0:8f:c7:32:8c:4f:b4:42:e0:de:38:47:a2:33:
14:c9:07:c7:17:68:b5:4d:8e:bd:54:50:0a:dd:59:
f5:a7:fc:65:a7:12:4a:45:1e:f5:1e:bf:1f:69:3a:
a7:bd:24:86:75:c9:ff:e8:d1:c3:3a:19:eb:01:4a:
ed:5b:36:e4:8f:06:e1:94:01:81:58:37:6b:2e:42:
d6:96:5a:3d:0d:42:c1:e7:6c:8c:88:cb:a4:1b:dc:
09:9a:de:03:5d:67:f9:22:b5:ff:a6:33:36:a7:43:
3a:75:d2:67:ed:70:47:7c:fe:5d:26:80:67:71:b5:
dc:f8:e4:ce:4b:d0:22:6f:b7:c3:93:a0:b4:7e:e4:
e2:e3:cc:1e:f7:36:a8:aa:65:9d:a6:39:71:2a:ae:
73:c2:5a:50:a0:4e:16:1d:d3:76:43:e2:ec:62:ef:
97:4c:8f:a7:5c:89:fe:97:00:5b:8c:6d:c0:b5:b9:
c5:c5:f9:f1:98:ad:79:58:a1:eb:13:90:f6:2e:00:
97:db:65:b2:a6:b5:ed:fd:eb:a7:42:b3:d8:26:a7:
98:0a:16:48:e9:de:ef:15:9e:16:ce:83:0f:84:b2:
a8:8f:68:79:5f:24:1a:e8:a1:30:3b:1f:c8:dd:1c:
e4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:06:7C:A6:48:95:35:EB:3E:A3:68:93:E4:54:B6:57:BB:79:F2:32
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IQZ8pkiVNes-o2iT5FS2V7t58jI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
0b:88:da:f2:23:a0:af:01:db:54:72:4b:2b:3b:57:cb:30:bf:
72:9c:8c:d5:bd:81:32:cf:19:96:0b:b2:63:a7:1c:c1:9b:45:
08:b6:a9:fe:5b:e7:88:4b:a5:b5:dd:2b:19:be:3e:52:7e:3d:
68:13:cb:67:6d:a5:0e:2b:68:25:25:7e:51:f2:a8:c1:cb:b2:
d5:db:fd:24:b1:6c:91:e0:b2:f5:99:92:60:4c:67:e9:b9:7a:
20:79:53:55:2e:99:aa:e8:cf:da:17:fd:7b:a8:16:94:e3:b6:
27:24:1c:9d:27:d6:30:65:cc:df:6c:a0:c0:aa:54:9c:37:f4:
e8:54:d4:46:fe:a0:2e:73:9f:d4:db:ad:2f:6a:ae:64:64:4b:
0e:3f:dc:05:0a:85:f4:b3:11:a2:a3:2c:3c:e1:1d:62:ce:7d:
6a:0f:34:94:0b:bd:0b:98:81:e2:3f:ca:60:b1:f1:9e:ff:6c:
e1:fb:78:21:78:0c:0c:b4:9c:61:3c:dd:3d:15:c6:e0:73:ca:
25:71:ca:07:da:c2:a9:46:6c:2b:39:71:49:34:95:04:8b:5e:
de:94:bf:46:24:67:74:c2:c4:0d:8a:08:8e:ca:51:2d:98:4e:
ef:6f:8c:b9:97:36:6d:4c:d0:b7:21:5a:aa:e9:14:2a:c7:2a:
db:1c:07:b9
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICYggwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MTkx
MjEwMzhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIxMDY3Q0E2NDg5NTM1
RUIzRUEzNjg5M0U0NTRCNjU3QkI3OUYyMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYN+76L3+r84/vsGR2MhnQj8cyjE+0QuDeOEeiMxTJB8cXaLVN
jr1UUArdWfWn/GWnEkpFHvUevx9pOqe9JIZ1yf/o0cM6GesBSu1bNuSPBuGUAYFY
N2suQtaWWj0NQsHnbIyIy6Qb3Ama3gNdZ/kitf+mMzanQzp10mftcEd8/l0mgGdx
tdz45M5L0CJvt8OToLR+5OLjzB73NqiqZZ2mOXEqrnPCWlCgThYd03ZD4uxi75dM
j6dcif6XAFuMbcC1ucXF+fGYrXlYoesTkPYuAJfbZbKmte3966dCs9gmp5gKFkjp
3u8VnhbOgw+EsqiPaHlfJBrooTA7H8jdHOTJAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUIQZ8pkiVNes+o2iT5FS2V7t58jIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0lRWjhwa2lWTmVzLW8y
aVQ1RlMyVjd0NThqSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQALiNry
I6CvAdtUcksrO1fLML9ynIzVvYEyzxmWC7JjpxzBm0UItqn+W+eIS6W13SsZvj5S
fj1oE8tnbaUOK2glJX5R8qjBy7LV2/0ksWyR4LL1mZJgTGfpuXogeVNVLpmq6M/a
F/17qBaU47YnJBydJ9YwZczfbKDAqlScN/ToVNRG/qAuc5/U260vaq5kZEsOP9wF
CoX0sxGioyw84R1izn1qDzSUC70LmIHiP8pgsfGe/2zh+3gheAwMtJxhPN09Fcbg
c8olccoH2sKpRmwrOXFJNJUEi17elL9GJGd0wsQNigiOylEtmE7vb4y5lzZtTNC3
IVqq6RQqxyrbHAe5
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:00:21 2025 by rpki-client