Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VlOxhLlySb0ystk1TVG9M2pBl_k.roa
File: VlOxhLlySb0ystk1TVG9M2pBl_k.roa (raw, json)
Hash identifier: S2FtB5XYqWJWAAHJgf4KK1AvrYAmTHGlFKOLAWKFCCE=
Subject key identifier: 56:53:B1:84:B9:72:49:BD:32:B2:D9:35:4D:51:BD:33:6A:41:97:F9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6174
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VlOxhLlySb0ystk1TVG9M2pBl_k.roa
Signing time: Sat 17 May 2025 23:10:34 +0000
ROA not before: Sat 17 May 2025 23:10:34 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24948 (0x6174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 17 23:10:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5653B184B97249BD32B2D9354D51BD336A4197F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:a4:72:5a:e4:57:c2:8a:82:c9:02:18:56:
cb:09:55:a1:a5:75:33:58:5c:6d:0e:f9:bf:19:14:
fc:c9:c6:87:02:7c:ed:fe:aa:17:91:07:02:3b:42:
e0:14:ca:c9:a5:de:ce:56:b8:93:4e:91:59:6b:27:
80:96:9c:98:15:10:97:bf:d4:7d:e2:da:ef:4f:e7:
f7:73:5d:8b:b6:97:1d:2b:68:1a:73:9e:f1:97:10:
33:73:4f:d4:5a:a9:fa:f9:b2:23:4d:b3:62:f0:97:
7a:b5:6c:a5:ca:8b:e0:91:46:f0:42:68:ab:86:c5:
03:81:96:9e:83:1a:7d:d6:37:21:4d:d9:f0:89:34:
09:bc:61:3b:4b:03:6c:74:2d:b3:e0:03:bd:31:c7:
93:a2:ae:d7:de:e9:47:98:ff:32:22:c6:03:a0:f4:
19:af:86:d4:38:02:d3:b4:fd:7f:af:e9:13:2c:d5:
c7:99:83:4c:b4:51:6d:62:36:a4:2c:1d:16:f7:c1:
ba:5c:a7:93:cc:a5:e0:26:01:4c:f5:5c:36:6c:23:
c0:7f:4b:27:55:89:de:f9:43:d5:cf:80:ab:45:5d:
c7:30:66:ed:6b:96:ac:0f:e8:75:63:a7:31:81:23:
9f:b1:95:80:f2:b8:2e:66:d4:77:00:09:ed:39:59:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:53:B1:84:B9:72:49:BD:32:B2:D9:35:4D:51:BD:33:6A:41:97:F9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VlOxhLlySb0ystk1TVG9M2pBl_k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
22:66:c8:f6:88:58:17:e5:94:b0:7b:31:87:a7:96:ed:0e:f1:
11:56:4e:92:dc:f5:2b:9d:9e:d8:e3:b9:af:34:b6:7c:f5:06:
1f:46:02:54:93:9c:32:07:c5:e7:a3:07:da:73:14:f1:85:57:
7b:3c:d7:0a:19:15:57:53:33:eb:f1:5f:32:0f:bb:51:a2:22:
14:44:99:74:3b:53:f8:46:70:64:e3:de:d6:dd:36:a2:d5:5c:
40:d2:f7:0e:ad:6e:5c:62:e5:a8:5e:4f:ba:d5:4a:c7:25:e2:
29:55:4c:2c:3a:b9:5c:ad:ea:64:7d:ef:31:3b:01:f2:a5:5b:
64:a7:3b:bd:1a:2e:de:36:45:70:47:41:e4:47:e3:5d:5a:42:
51:6c:6d:02:ab:47:eb:e7:39:1a:36:e4:75:19:b0:64:d7:93:
ac:14:41:5b:be:00:09:1a:12:31:8c:7b:7e:dd:de:46:5b:0e:
76:75:6d:7f:92:c8:00:02:d7:ad:5f:3b:ed:62:9e:af:cb:5a:
98:df:82:f1:a0:5b:97:f1:54:3e:e6:6f:75:14:92:c7:04:d1:
b6:32:7c:29:a6:50:89:18:f0:75:46:b4:23:8d:73:2e:26:0c:
bf:38:40:69:2c:d8:2d:d2:38:78:5e:39:84:d6:d6:94:21:e7:
b6:a6:db:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:01:51 2025 by rpki-client