Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/PqBNK5QYPO_h4QowMVR41Yd5BEo.roa
File: PqBNK5QYPO_h4QowMVR41Yd5BEo.roa (raw, json)
Hash identifier: 6KyM15IGI8fxgfUamY70UBIva6yzaeSVVy17N7qusbI=
Subject key identifier: 3E:A0:4D:2B:94:18:3C:EF:E1:E1:0A:30:31:54:78:D5:87:79:04:4A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 668C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PqBNK5QYPO_h4QowMVR41Yd5BEo.roa
Signing time: Sat 31 May 2025 13:11:27 +0000
ROA not before: Sat 31 May 2025 13:11:27 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26252 (0x668c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 31 13:11:27 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3EA04D2B94183CEFE1E10A30315478D58779044A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:1a:46:48:d4:60:20:0a:68:1a:6a:96:22:
3d:bd:d9:fd:3e:a7:3c:84:ff:c7:4d:76:60:57:0e:
7e:b9:7f:4a:6c:85:37:7e:66:bb:7c:0a:2f:37:5c:
dc:7a:ba:19:3f:e2:cb:64:3b:85:05:16:ec:a8:26:
92:38:3a:7f:d0:c4:0b:34:14:bc:d0:dd:43:c3:ab:
0c:79:e9:50:33:c9:5a:92:83:78:47:a6:fb:f7:33:
ff:82:0a:4a:01:39:fc:13:48:89:4e:41:cb:37:6b:
0f:e6:fa:f8:6e:97:fd:c8:96:ce:02:0a:88:e4:89:
9c:cd:97:2a:ff:4b:f0:73:ee:66:4b:80:d0:c3:a9:
62:f9:cc:a2:d8:84:63:d1:23:b5:a0:77:5b:05:d4:
75:eb:de:45:e1:2f:1a:64:85:37:31:f7:a1:98:06:
95:0a:9e:c8:ae:45:de:1c:b9:d8:58:20:af:9f:8d:
ee:22:9a:09:b0:a3:f4:9b:dd:4d:60:9c:65:10:74:
e3:16:53:3f:56:84:48:df:e2:41:a3:a1:50:58:35:
bb:9d:05:6f:e1:80:0f:5b:57:71:2c:d4:b1:ba:f6:
f3:8c:7a:f3:f2:58:24:01:1f:41:20:0b:3d:42:3a:
5a:3a:a4:5e:41:47:35:f2:c4:8e:c4:f9:c2:38:00:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A0:4D:2B:94:18:3C:EF:E1:E1:0A:30:31:54:78:D5:87:79:04:4A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PqBNK5QYPO_h4QowMVR41Yd5BEo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1b:b0:55:82:96:91:d8:d4:80:99:0a:56:3a:86:9f:13:e3:55:
03:4c:6d:1c:d1:6b:7e:a9:44:89:5b:10:d6:61:b0:29:a9:4f:
1b:77:f7:63:d9:c0:15:be:56:e4:d8:0d:23:29:a8:03:fd:ab:
f3:72:19:52:a0:8a:31:c3:e1:65:61:f8:fd:99:a4:95:15:13:
03:1e:a8:f5:29:5d:6a:1e:45:78:ea:93:40:70:dc:35:9b:d2:
33:7e:06:9c:1d:89:b7:c7:fc:54:df:24:15:08:c0:dd:fc:65:
b0:3e:71:ab:71:b9:ba:9a:ed:c8:68:97:09:fd:84:7e:50:01:
97:2b:32:c0:ee:67:cf:f7:bf:00:b3:06:8b:1e:cc:94:c9:fe:
3c:8a:23:6a:f6:6a:0a:10:a4:32:8d:43:8c:aa:7a:06:03:c9:
cd:20:cc:63:12:67:d3:d3:59:72:1e:4a:17:2a:f7:ef:ec:b3:
c8:15:fd:2b:83:85:49:ca:95:83:2c:ee:51:2b:8e:2c:0d:be:
ad:1a:ce:11:65:08:10:ab:86:6d:90:7c:15:03:e0:e6:96:23:
eb:10:22:53:d9:fb:3c:f2:a9:60:d8:a3:0c:d1:3c:df:00:3e:
a3:7c:8c:5e:52:aa:8b:16:65:d9:7f:6f:1d:e0:42:42:2a:9e:
1f:19:33:64
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICZowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MzEx
MzExMjdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDNFQTA0RDJCOTQxODND
RUZFMUUxMEEzMDMxNTQ3OEQ1ODc3OTA0NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRxhpGSNRgIApoGmqWIj292f0+pzyE/8dNdmBXDn65f0pshTd+
Zrt8Ci83XNx6uhk/4stkO4UFFuyoJpI4On/QxAs0FLzQ3UPDqwx56VAzyVqSg3hH
pvv3M/+CCkoBOfwTSIlOQcs3aw/m+vhul/3Ils4CCojkiZzNlyr/S/Bz7mZLgNDD
qWL5zKLYhGPRI7Wgd1sF1HXr3kXhLxpkhTcx96GYBpUKnsiuRd4cudhYIK+fje4i
mgmwo/Sb3U1gnGUQdOMWUz9WhEjf4kGjoVBYNbudBW/hgA9bV3Es1LG69vOMevPy
WCQBH0EgCz1COlo6pF5BRzXyxI7E+cI4AF8RAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUPqBNK5QYPO/h4QowMVR41Yd5BEowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1BxQk5LNVFZUE9faDRR
b3dNVlI0MVlkNUJFby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAbsFWC
lpHY1ICZClY6hp8T41UDTG0c0Wt+qUSJWxDWYbApqU8bd/dj2cAVvlbk2A0jKagD
/avzchlSoIoxw+FlYfj9maSVFRMDHqj1KV1qHkV46pNAcNw1m9IzfgacHYm3x/xU
3yQVCMDd/GWwPnGrcbm6mu3IaJcJ/YR+UAGXKzLA7mfP978AswaLHsyUyf48iiNq
9moKEKQyjUOMqnoGA8nNIMxjEmfT01lyHkoXKvfv7LPIFf0rg4VJypWDLO5RK44s
Db6tGs4RZQgQq4ZtkHwVA+DmliPrECJT2fs88qlg2KMM0TzfAD6jfIxeUqqLFmXZ
f28d4EJCKp4fGTNk
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:02:29 2025 by rpki-client