Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/X1b0NJdYCoqaYNXfqJuT_3bbMhc.roa
File: X1b0NJdYCoqaYNXfqJuT_3bbMhc.roa (raw, json)
Hash identifier: eaD6vqjVGL0f99zoLQnTKnGBC/ZGauNyFHGNWQZkuWI=
Subject key identifier: 5F:56:F4:34:97:58:0A:8A:9A:60:D5:DF:A8:9B:93:FF:76:DB:32:17
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 65E0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/X1b0NJdYCoqaYNXfqJuT_3bbMhc.roa
Signing time: Thu 29 May 2025 18:11:26 +0000
ROA not before: Thu 29 May 2025 18:11:26 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26080 (0x65e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 29 18:11:26 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5F56F43497580A8A9A60D5DFA89B93FF76DB3217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:30:ac:74:67:d4:53:2c:ff:40:53:33:2f:22:
27:d7:9e:72:83:67:1b:b8:68:3d:44:69:f1:07:da:
e0:3a:94:12:64:68:5f:07:80:c6:44:cf:83:5f:1b:
32:75:d6:20:2c:1e:92:47:7b:85:50:e0:f7:a5:c5:
b9:ea:c8:e4:0a:b8:0a:eb:11:d3:28:8c:20:d6:94:
a4:9d:37:c6:10:fb:49:20:60:d9:a5:6e:4d:0f:a7:
5e:65:32:6e:fb:34:fc:54:5f:df:29:af:d7:57:d1:
d3:5b:be:54:a2:b1:1e:98:03:f4:d6:0d:c1:c5:67:
ff:04:d1:fb:81:87:d9:0c:10:9c:92:b3:53:27:b2:
40:35:0c:02:25:51:f2:12:2e:53:4d:d2:00:7a:de:
f4:2c:a8:eb:f7:a5:cf:37:46:3e:5f:6f:20:b7:33:
c8:4e:65:61:52:5c:0a:17:42:f9:00:ad:74:17:1d:
d2:5d:ea:1f:21:86:a3:51:9c:9a:5f:a1:ac:33:70:
32:e1:b1:d4:28:a7:a6:7a:ac:74:56:5e:ac:c1:47:
ac:6e:48:93:14:1b:55:6a:12:46:9f:ad:7d:7f:f8:
3c:aa:9e:3f:86:13:86:9e:de:cf:8d:9c:19:b4:4d:
b9:81:a7:17:0b:5f:51:ab:1c:bd:30:2f:45:b4:a0:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:56:F4:34:97:58:0A:8A:9A:60:D5:DF:A8:9B:93:FF:76:DB:32:17
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/X1b0NJdYCoqaYNXfqJuT_3bbMhc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
67:f1:ec:c1:93:a5:c8:8a:8b:54:10:86:3b:68:f8:47:00:ff:
d6:d9:8b:04:f1:f3:5d:3d:21:97:e3:4c:04:b0:cc:cf:22:20:
c0:44:bb:d6:3d:fe:41:37:52:7c:79:81:04:9e:9e:b1:bf:88:
0b:d4:fb:53:ac:15:eb:27:06:66:75:eb:a7:38:78:98:01:f1:
3e:ad:c4:1d:b0:64:d8:cb:72:82:78:0d:c9:9f:9c:c6:22:ef:
db:51:4c:c6:8d:3e:47:53:ad:76:97:44:76:85:bc:8a:73:07:
b6:e0:16:d6:a1:15:63:da:57:47:54:03:72:16:42:4c:af:ae:
2c:33:7e:ed:96:15:29:ec:7a:3f:7e:b9:24:56:14:47:41:9c:
99:66:5d:8e:d3:51:f5:0c:52:c6:70:7a:f0:c9:1a:d8:ef:f3:
66:53:09:70:f7:d5:07:5d:98:0d:d0:81:3b:06:cf:07:f0:e4:
c0:ec:af:df:71:10:89:84:2e:7e:e4:99:b4:33:c8:8d:d0:4f:
10:ae:8d:11:93:ab:6e:0e:8c:fa:24:3b:e3:21:ae:7b:f6:a0:
09:c9:f6:63:b7:bf:72:80:9c:d2:12:1e:7c:70:15:0d:b9:2c:
5d:08:60:0b:56:78:4b:44:07:43:08:f7:c7:1f:7b:f2:51:94:
f7:81:85:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:56:22 2025 by rpki-client