Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Jk0nvj-Z8VBLxChP4K6c58jPvTE.roa
File: Jk0nvj-Z8VBLxChP4K6c58jPvTE.roa (raw, json)
Hash identifier: x5wXfFH538IeRqP6rHeCA12T/tLUeM2AvEFnhniAy8w=
Subject key identifier: 26:4D:27:BE:3F:99:F1:50:4B:C4:28:4F:E0:AE:9C:E7:C8:CF:BD:31
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6492
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Jk0nvj-Z8VBLxChP4K6c58jPvTE.roa
Signing time: Mon 26 May 2025 06:42:28 +0000
ROA not before: Mon 26 May 2025 06:42:28 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25746 (0x6492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 26 06:42:28 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=264D27BE3F99F1504BC4284FE0AE9CE7C8CFBD31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:3d:6a:38:78:68:9a:32:49:b2:7d:c3:87:
21:21:20:03:e6:ed:ab:4b:88:85:6c:80:91:a6:05:
58:1a:5c:b8:24:38:0c:26:c5:56:6e:ba:68:3f:47:
6c:75:74:7c:48:52:42:33:a0:f4:8c:62:b3:3d:71:
85:ef:8d:0b:78:2a:96:c4:f0:8c:6c:7d:fc:46:b1:
28:59:0f:f6:d6:fe:50:ae:88:31:1b:f1:85:8a:3e:
30:05:fa:b0:b2:6d:f0:fb:b9:ef:7c:26:6f:4f:fa:
a8:1d:eb:70:11:ed:f3:cb:7f:b8:14:c8:31:59:ea:
b6:9d:a6:c3:16:be:7c:d2:a2:b0:2a:85:1a:97:d4:
c2:e9:87:67:52:8b:6b:a9:d5:5e:8f:ff:16:c7:f8:
05:dc:70:ad:06:a7:b1:3a:46:b6:2d:02:4d:20:0d:
eb:d2:cf:11:fd:b1:9e:f7:4a:09:fd:d2:2d:85:c2:
1f:cf:92:4e:2a:62:1c:5a:19:04:52:64:11:04:5b:
9c:ca:e3:49:b8:f3:11:e3:45:d5:66:51:ab:09:38:
ba:de:b6:c7:74:d9:8f:9a:ca:fd:08:3e:d5:28:ac:
a4:80:b8:97:b9:d5:ae:29:ec:fd:63:8a:26:d7:55:
33:19:47:0b:ee:dd:e6:6d:15:4e:29:b6:52:ad:e0:
ab:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4D:27:BE:3F:99:F1:50:4B:C4:28:4F:E0:AE:9C:E7:C8:CF:BD:31
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Jk0nvj-Z8VBLxChP4K6c58jPvTE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
19:5d:00:2a:2f:77:ae:8f:b6:0f:4c:b8:8d:29:8e:3c:bf:de:
03:47:d3:a0:ff:48:18:e5:23:70:20:d7:11:69:55:c9:cf:89:
3c:de:18:86:83:b1:2e:54:ec:a3:39:b5:f0:8d:dc:8b:cc:80:
46:38:4c:80:39:db:78:d9:77:94:54:8f:8e:47:68:09:c6:a2:
05:b0:f5:77:8e:69:8d:fb:f1:50:c2:ef:7c:d5:3d:6c:c2:04:
ec:58:70:1c:14:d4:95:cc:8f:ac:6a:6d:81:0e:93:36:b1:40:
b6:2b:62:19:64:f1:58:cd:8c:b9:68:d4:ad:33:21:f7:15:df:
93:56:c5:a9:85:82:c7:a4:99:6b:69:9b:9a:57:40:9b:ec:41:
71:7a:4a:da:a1:8c:27:2a:68:dc:78:db:26:e7:d1:c1:d7:95:
a4:77:e7:d1:ad:05:aa:39:fb:44:74:71:bf:01:23:db:f5:be:
16:59:a3:6d:d4:64:59:7c:b9:6b:34:4e:7d:43:58:94:b6:60:
27:49:be:62:ce:dc:7b:da:6e:76:9b:4e:1d:80:2f:4e:fa:68:
25:41:d8:30:1b:48:1e:82:67:cb:37:2b:d9:0b:28:83:8c:23:
ac:e8:b6:e8:3c:f1:10:6d:29:41:f1:ef:a2:f2:c1:8c:6d:09:
9d:b6:e1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:01:52 2025 by rpki-client