Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/J-Xcnm9m6X3__AnAooe3i25AN2Q.roa
File: J-Xcnm9m6X3__AnAooe3i25AN2Q.roa (raw, json)
Hash identifier: iJlsAdo4kfhtUx/2/mb2HauFvLqzn22pfFhbsgtrA58=
Subject key identifier: 27:E5:DC:9E:6F:66:E9:7D:FF:FC:09:C0:A2:87:B7:8B:6E:40:37:64
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6454
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/J-Xcnm9m6X3__AnAooe3i25AN2Q.roa
Signing time: Sun 25 May 2025 15:10:54 +0000
ROA not before: Sun 25 May 2025 15:10:54 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25684 (0x6454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 25 15:10:54 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=27E5DC9E6F66E97DFFFC09C0A287B78B6E403764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:16:c5:2e:e9:81:2e:02:9f:5f:6f:11:ea:81:
71:f7:8e:08:bc:bd:22:93:0a:82:cb:ca:da:b3:66:
d5:e5:a9:db:20:90:62:40:45:8a:5e:45:f9:91:f9:
8f:5d:48:3c:df:f1:09:2a:90:a9:50:a5:a7:d0:5b:
69:d2:93:3d:83:a8:fb:e7:d6:4b:6a:9d:a8:d8:65:
6e:20:18:87:41:d1:2d:bb:3c:5d:48:3c:9f:ef:19:
35:82:83:f6:11:c7:7f:7a:98:ab:a6:2d:87:5e:15:
0b:09:22:eb:09:5d:90:3b:1d:54:2c:cf:09:26:07:
4a:f3:d0:68:97:08:d8:0c:bd:b4:d9:99:99:5c:4f:
83:7f:37:9b:24:4f:82:89:ef:cb:8c:5e:43:27:99:
9a:b2:2a:b1:08:8f:af:ae:be:34:59:e0:00:4b:41:
7a:e8:f0:25:65:ae:4e:57:04:76:67:00:22:97:f5:
28:ba:f2:e3:f5:be:00:42:34:9f:5d:c8:c1:92:87:
d6:30:69:64:e0:ba:b8:4e:9f:55:04:08:ce:5c:59:
2c:af:e5:6c:5c:ed:7f:21:5d:d0:07:9f:f5:cb:4f:
9b:76:a3:e5:1e:81:dc:c1:db:02:c8:0d:7e:bb:33:
a0:04:aa:e0:e3:dc:d6:d2:c1:d2:e8:52:3e:f2:30:
3a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E5:DC:9E:6F:66:E9:7D:FF:FC:09:C0:A2:87:B7:8B:6E:40:37:64
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/J-Xcnm9m6X3__AnAooe3i25AN2Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
89:f3:6a:c1:d7:a3:0c:f1:2c:16:22:11:70:75:cc:8b:1a:b2:
de:eb:0e:66:d6:76:a2:87:6c:56:e8:6f:ed:b1:06:53:30:9c:
da:b4:36:76:c3:03:77:cb:30:ef:73:de:54:5f:23:7d:93:f4:
10:ae:b4:62:57:5d:e4:2e:a4:ce:56:16:6c:e8:e0:d2:fe:b6:
32:cf:8f:7e:80:8c:31:39:86:1b:23:1c:54:e3:db:60:dc:04:
ba:24:8a:6e:c4:ff:cf:a1:7f:40:82:7c:fd:09:e9:20:1b:ac:
23:b0:d2:2b:d6:26:c9:7f:a1:9b:eb:92:70:18:06:d8:0f:ce:
53:38:7e:0f:0e:4e:c1:74:c7:b6:31:60:61:54:67:16:40:bf:
3e:c4:66:05:23:7c:d5:50:0e:b3:de:82:81:51:89:3e:c0:48:
14:e9:07:b8:d6:4a:c5:ba:d8:8c:46:7d:3a:7c:d6:7c:64:04:
17:66:48:09:91:3f:7b:53:53:61:1d:07:81:4b:cd:3d:7f:20:
9c:36:71:d1:1c:eb:b1:10:20:11:ea:25:aa:1e:62:45:ba:66:
f1:2a:d1:bf:f4:c1:52:a8:42:c0:9b:af:b1:30:b1:3f:71:be:
6f:82:33:d3:d6:99:67:bb:5a:18:e4:ec:6d:1a:ca:77:61:c6:
05:8c:1f:78
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICZFQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjUx
NTEwNTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDI3RTVEQzlFNkY2NkU5
N0RGRkZDMDlDMEEyODdCNzhCNkU0MDM3NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIFsUu6YEuAp9fbxHqgXH3jgi8vSKTCoLLytqzZtXlqdsgkGJA
RYpeRfmR+Y9dSDzf8QkqkKlQpafQW2nSkz2DqPvn1ktqnajYZW4gGIdB0S27PF1I
PJ/vGTWCg/YRx396mKumLYdeFQsJIusJXZA7HVQszwkmB0rz0GiXCNgMvbTZmZlc
T4N/N5skT4KJ78uMXkMnmZqyKrEIj6+uvjRZ4ABLQXro8CVlrk5XBHZnACKX9Si6
8uP1vgBCNJ9dyMGSh9YwaWTgurhOn1UECM5cWSyv5Wxc7X8hXdAHn/XLT5t2o+Ue
gdzB2wLIDX67M6AEquDj3NbSwdLoUj7yMDrhAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUJ+Xcnm9m6X3//AnAooe3i25AN2QwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0otWGNubTltNlgzX19B
bkFvb2UzaTI1QU4yUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQCJ82rB
16MM8SwWIhFwdcyLGrLe6w5m1naih2xW6G/tsQZTMJzatDZ2wwN3yzDvc95UXyN9
k/QQrrRiV13kLqTOVhZs6ODS/rYyz49+gIwxOYYbIxxU49tg3AS6JIpuxP/PoX9A
gnz9CekgG6wjsNIr1ibJf6Gb65JwGAbYD85TOH4PDk7BdMe2MWBhVGcWQL8+xGYF
I3zVUA6z3oKBUYk+wEgU6Qe41krFutiMRn06fNZ8ZAQXZkgJkT97U1NhHQeBS809
fyCcNnHRHOuxECAR6iWqHmJFumbxKtG/9MFSqELAm6+xMLE/cb5vgjPT1plnu1oY
5OxtGsp3YcYFjB94
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:19:30 2025 by rpki-client