Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QMJvkh6LxEeApTcKap3n-GeBEdQ.roa
File: QMJvkh6LxEeApTcKap3n-GeBEdQ.roa (raw, json)
Hash identifier: k5CgocHsPIPZAeDsWn9cP7U0xF2lX3zxH7QfhTc5fv0=
Subject key identifier: 40:C2:6F:92:1E:8B:C4:47:80:A5:37:0A:6A:9D:E7:F8:67:81:11:D4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 64C0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QMJvkh6LxEeApTcKap3n-GeBEdQ.roa
Signing time: Mon 26 May 2025 18:11:09 +0000
ROA not before: Mon 26 May 2025 18:11:09 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25792 (0x64c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 26 18:11:09 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=40C26F921E8BC44780A5370A6A9DE7F8678111D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:30:b1:06:0b:69:c2:2a:65:65:a0:04:1f:46:
4c:d0:9b:38:b0:db:3c:e8:d8:13:24:88:83:8e:80:
88:37:75:ed:a8:f7:0b:27:37:38:c0:34:e5:49:dc:
94:ad:a9:93:ee:e9:23:61:06:ad:aa:0f:41:6c:44:
b7:6c:ff:2b:9f:e6:06:d9:fd:eb:9f:68:30:57:3e:
6c:9e:e8:67:23:63:65:2c:3e:0f:8c:51:e0:a2:f1:
25:28:8e:65:80:2f:e4:fb:cf:de:b1:79:99:bc:4d:
bc:28:47:23:f6:1c:a2:16:5e:8f:55:f9:8f:57:a7:
8a:61:0b:fd:1e:7e:e4:03:3f:8d:2b:5c:b2:0a:98:
af:e1:a7:b2:5a:19:8e:c5:a6:f1:10:4d:87:22:60:
9c:9b:5f:1e:ae:18:58:4b:96:80:7a:49:8e:4e:16:
79:95:5c:eb:82:f2:b9:83:8d:94:3f:ff:65:4f:fa:
02:b2:40:75:57:26:29:24:22:bf:e1:58:ea:ed:8c:
63:67:4b:21:88:1e:38:05:40:c1:58:26:68:0a:ed:
03:7f:9e:e7:a9:78:9f:6f:c3:46:bc:70:88:3e:1c:
fd:4e:d3:b5:a3:6b:a2:f6:27:1b:cb:b1:3c:47:49:
cf:2d:c1:df:d8:a1:b4:6d:d0:c3:bc:43:d1:6a:db:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C2:6F:92:1E:8B:C4:47:80:A5:37:0A:6A:9D:E7:F8:67:81:11:D4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QMJvkh6LxEeApTcKap3n-GeBEdQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
33:fb:86:69:7e:94:a1:54:11:b3:df:5d:67:3d:12:e8:a2:86:
73:00:56:db:c0:04:04:13:8c:a9:c9:46:f3:c3:f0:da:89:a1:
54:09:3f:cd:a5:3c:4a:41:d5:07:bf:9e:57:29:98:37:b8:cc:
13:05:4f:11:18:15:47:31:2a:83:66:bb:15:79:47:7b:1c:39:
45:53:00:1d:01:a7:d1:64:0d:79:b2:45:e4:10:d6:df:2d:9b:
3d:96:60:c9:a3:23:53:d1:a7:be:68:30:1c:ad:d7:bb:ec:98:
04:46:27:50:01:6e:ad:b7:5d:19:02:a7:0d:e1:49:23:4f:6b:
60:f2:87:0e:70:59:e9:6a:58:53:6d:d2:66:0e:6b:58:3d:af:
71:d1:8a:a0:dc:0f:5b:31:a3:f3:5c:51:9d:ae:e5:81:f5:2c:
9d:31:11:7c:d0:32:9e:db:f9:6f:fd:d8:c5:c4:17:91:f2:27:
39:3f:51:19:ec:ea:50:d2:6d:c9:28:5a:b8:d8:6c:3a:db:55:
51:42:70:5c:31:7f:e2:37:ea:fa:d2:e2:b9:0c:b8:7c:01:14:
94:99:71:0e:0a:24:76:2a:51:cb:af:c3:d8:87:ab:97:49:80:
e8:26:75:ec:c6:f1:18:3b:f4:5c:1b:2d:ff:aa:25:b5:da:c2:
b9:86:46:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:00:22 2025 by rpki-client