Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/K3fDWIdu1Z3yxavz0DkG1G9uCJQ.roa
File: K3fDWIdu1Z3yxavz0DkG1G9uCJQ.roa (raw, json)
Hash identifier: B2vgHNBtnNIqiz1ron8x4YQt7oN27v/xNSnmPRCCBa8=
Subject key identifier: 2B:77:C3:58:87:6E:D5:9D:F2:C5:AB:F3:D0:39:06:D4:6F:6E:08:94
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 61C6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/K3fDWIdu1Z3yxavz0DkG1G9uCJQ.roa
Signing time: Sun 18 May 2025 19:40:37 +0000
ROA not before: Sun 18 May 2025 19:40:37 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25030 (0x61c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 18 19:40:37 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2B77C358876ED59DF2C5ABF3D03906D46F6E0894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:1c:6f:fc:a4:b9:a0:4b:8f:54:3d:35:48:
38:2e:22:c0:cb:e1:97:e1:ad:bf:e4:22:4d:14:2b:
d6:a0:bc:d5:0d:97:e5:0c:b8:30:80:b9:dd:60:c2:
e0:25:2c:c3:04:59:82:59:c7:56:59:20:df:f1:ab:
71:37:23:96:89:c2:5b:34:0b:54:25:de:4c:bb:fd:
6e:ef:8b:4f:22:74:66:4b:4c:fc:3c:b8:ae:ae:34:
00:96:0e:c1:aa:59:cb:ee:31:33:36:d5:4d:18:eb:
f8:0d:70:66:02:76:38:fe:22:db:78:36:0e:08:ac:
00:34:f7:93:d4:d8:e0:2a:97:5c:85:ce:a4:b1:1d:
6d:31:a5:a5:30:9d:11:2a:c9:e1:ca:f6:17:83:c9:
ec:12:ca:ef:27:85:35:0c:4f:d2:b3:2e:5f:53:00:
7c:7c:35:60:36:5f:5c:27:01:e1:d3:23:07:a6:91:
eb:db:b6:df:da:30:fe:9d:40:ff:5f:94:e3:8e:76:
c9:93:32:af:f0:02:fc:93:8a:3e:17:50:98:9a:bf:
1d:0b:68:11:fb:7e:54:02:81:41:3e:e4:06:58:0b:
5c:19:37:6b:64:8a:c6:50:d7:73:93:78:96:0d:c6:
a4:46:d9:97:4a:4f:d9:f7:3c:e1:83:c4:c5:a4:e7:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:77:C3:58:87:6E:D5:9D:F2:C5:AB:F3:D0:39:06:D4:6F:6E:08:94
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/K3fDWIdu1Z3yxavz0DkG1G9uCJQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
46:47:8f:76:79:ae:7f:8d:21:96:b1:27:0b:c9:6a:c9:a5:91:
51:2b:6a:5b:b1:34:0a:2c:c3:85:eb:df:ef:71:62:73:8d:a8:
6a:ac:9f:3f:7d:84:32:02:c5:18:c5:31:0a:24:91:c1:e5:86:
63:3c:83:9b:88:cd:b3:13:32:a9:b6:16:33:e9:a1:4a:c2:f6:
fd:d1:ac:93:ef:b6:81:5b:8f:25:66:a5:2c:b8:6d:48:9f:56:
3f:bb:32:34:d6:5f:99:d8:67:35:9c:9a:42:d1:0b:6e:84:8a:
22:b5:8e:43:7c:bd:7c:49:2f:aa:6f:e9:27:4a:91:13:c9:fa:
3a:db:7d:62:cf:45:ba:51:83:59:7c:7a:e5:4b:33:d8:8d:06:
40:70:4c:7f:fb:b9:09:51:3f:b1:b3:7e:90:d5:45:0c:6c:b9:
e4:dc:c5:40:c6:92:1a:e3:ee:ee:95:ac:6f:9e:5e:fd:11:de:
0a:4c:c0:9c:b3:4a:e5:db:05:5e:64:9a:61:03:f6:5e:be:fd:
4e:47:ae:de:48:c5:f9:ee:4b:8d:21:7e:2b:3e:67:50:e4:19:
31:21:5f:b2:88:cd:ac:6e:0c:7b:18:22:3c:28:9b:e0:6e:d5:
11:99:8d:2b:8e:e2:c1:27:0d:98:bf:48:09:f1:70:a3:c3:7d:
42:20:3d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:57:11 2025 by rpki-client