Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Vg-l3Vq3kQX_C1vLmCSr3rZbiH4.roa
File: Vg-l3Vq3kQX_C1vLmCSr3rZbiH4.roa (raw, json)
Hash identifier: yhy83ZjGYVUHrQ6aAHBU7mBurZdiNYR6mVxVy7hAK7w=
Subject key identifier: 56:0F:A5:DD:5A:B7:91:05:FF:0B:5B:CB:98:24:AB:DE:B6:5B:88:7E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6354
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Vg-l3Vq3kQX_C1vLmCSr3rZbiH4.roa
Signing time: Thu 22 May 2025 23:13:11 +0000
ROA not before: Thu 22 May 2025 23:13:11 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25428 (0x6354)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 22 23:13:11 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=560FA5DD5AB79105FF0B5BCB9824ABDEB65B887E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:b4:49:8e:42:08:67:9d:a1:bd:ac:5e:64:
7f:9f:43:a4:7f:1c:85:a2:62:ff:72:df:8d:92:55:
57:af:59:1e:c3:af:23:66:74:9e:ac:a4:a6:9d:ea:
bd:5c:a1:4b:18:d2:b6:1b:95:7b:74:4a:c1:0e:03:
6c:46:40:f9:0a:a3:de:65:b1:7c:43:b7:ba:f4:76:
41:39:be:dc:1b:60:01:f3:a8:e5:29:45:92:89:4d:
e3:9a:2c:93:29:7c:f6:48:2f:d1:ed:dd:ba:51:74:
17:ea:99:34:10:0e:43:6c:bc:0b:a2:e5:18:ca:f1:
64:b1:99:27:e8:e8:62:aa:03:c2:a3:b7:c8:00:c5:
cf:ca:69:83:06:5a:48:89:c6:d8:1b:3d:55:a2:12:
3f:68:a9:fc:a2:9c:7c:24:b1:b7:85:26:88:22:10:
8d:d0:23:83:08:98:62:83:fa:d3:99:af:55:09:94:
0f:7d:1f:a6:78:07:8b:d5:47:d6:b1:13:4c:16:f5:
87:0f:7e:14:c4:47:50:ba:c9:38:4d:3f:51:02:2c:
88:16:97:e8:17:ae:16:4c:da:f7:e9:e8:0e:19:87:
c2:37:2d:b8:2e:01:08:70:c0:b4:ef:2b:c2:c0:c9:
54:a8:bd:48:54:5c:01:17:44:61:44:e9:bc:a9:be:
bc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0F:A5:DD:5A:B7:91:05:FF:0B:5B:CB:98:24:AB:DE:B6:5B:88:7E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Vg-l3Vq3kQX_C1vLmCSr3rZbiH4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
58:22:47:1f:08:4d:c8:b7:db:9e:13:b7:f8:d7:08:c2:03:e5:
2d:e5:db:88:71:aa:da:df:00:af:a3:fd:b8:95:53:b7:82:df:
69:0d:02:2e:e3:aa:25:ed:cd:a4:8f:67:20:7f:87:f8:9e:0c:
64:97:a4:75:cf:91:c0:1c:cf:c7:32:50:ad:ef:32:6d:00:bc:
e6:55:6e:d4:46:17:50:96:62:3b:fb:9d:c0:27:2a:0d:65:64:
4c:bf:ef:a1:82:93:8c:ad:d8:1d:0d:57:72:ee:f4:92:a5:db:
9d:ec:60:72:3f:6d:6e:16:ce:73:01:03:70:f5:a7:d5:6c:24:
71:13:68:09:7f:21:61:c2:cc:b6:bc:17:50:fa:4c:de:8b:03:
e1:00:a5:9d:e5:cf:8d:6a:82:b7:55:9c:f7:f5:43:9e:65:50:
f8:00:74:95:3f:8d:c7:62:c3:00:dd:97:7c:b1:01:0f:41:35:
fa:57:3c:89:f4:a2:9f:76:9a:89:2e:b1:fb:d1:76:08:68:ae:
10:a5:1f:a1:27:a1:e7:f9:60:b7:e0:9e:bb:4b:42:89:91:ec:
0e:64:4b:6e:5f:d1:9f:4f:b8:f2:8b:42:bb:92:86:85:75:cc:
5d:e8:3d:e0:12:ed:27:97:3f:b2:9d:0a:41:fc:e3:5f:0c:13:
23:e7:36:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:56:41 2025 by rpki-client