Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/XHZXCQRWrBJUpF8fEtgI89VBy_M.roa
File: XHZXCQRWrBJUpF8fEtgI89VBy_M.roa (raw, json)
Hash identifier: zx1JxGEiN7NikRqI2VW20XHZ8y+e7nlX0l2IZKzluVs=
Subject key identifier: 5C:76:57:09:04:56:AC:12:54:A4:5F:1F:12:D8:08:F3:D5:41:CB:F3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 736E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XHZXCQRWrBJUpF8fEtgI89VBy_M.roa
Signing time: Sat 05 Jul 2025 03:15:29 +0000
ROA not before: Sat 05 Jul 2025 03:15:29 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29550 (0x736e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 5 03:15:29 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5C7657090456AC1254A45F1F12D808F3D541CBF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:f0:b4:71:ac:ce:61:44:16:1e:8b:25:81:
13:99:94:c8:93:ee:c1:97:6d:39:44:57:44:cd:d2:
ec:7d:c5:de:ce:fe:f2:b3:e5:78:92:aa:b8:f0:dc:
8f:82:3a:d5:72:9e:12:23:87:de:12:31:b6:9b:ea:
0b:c3:43:24:b2:fa:40:67:c9:00:0a:37:f3:46:07:
3f:97:1e:2a:4d:c1:59:84:0d:91:de:99:e3:3e:d3:
b7:f7:bc:76:e7:4a:f1:43:e5:98:dc:3c:53:c8:8a:
67:92:f5:5b:db:b4:c0:b7:55:4c:e1:d5:d6:da:9f:
8c:71:5a:0d:76:85:f8:d0:3d:e4:76:23:25:47:d3:
79:5e:00:69:aa:fb:d2:21:c0:98:f3:73:0e:b4:fe:
8a:c6:b6:ef:6b:f1:79:b9:e2:2b:d1:d2:9d:82:a4:
63:31:29:05:cf:d3:24:c3:eb:c0:03:1e:a7:64:4c:
88:80:71:f1:c3:e2:5f:0d:59:ea:71:ba:84:14:35:
24:7d:ad:82:91:a3:1c:fe:d3:06:21:d3:19:9b:04:
1d:e9:3a:2f:0a:03:78:b6:d8:ec:4a:e1:37:cf:9d:
4e:70:44:bb:7c:51:ca:6e:b0:fe:b2:9b:4a:9e:1f:
cd:f4:f7:97:30:6d:01:7a:57:67:2d:11:f0:06:95:
2d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:76:57:09:04:56:AC:12:54:A4:5F:1F:12:D8:08:F3:D5:41:CB:F3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XHZXCQRWrBJUpF8fEtgI89VBy_M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
75:dc:58:31:fc:85:de:3f:dd:b7:ec:d9:a5:23:8f:be:3f:f7:
06:83:38:b3:b9:f7:61:e8:b9:7c:d3:de:5f:b7:73:d3:08:1d:
46:4d:d5:6a:38:b9:92:80:62:3c:08:41:b4:45:b1:94:3c:ad:
a0:22:59:77:d1:9e:b3:6f:c3:3e:b8:fd:55:2a:07:5f:eb:93:
9d:f7:cd:f9:df:57:7e:b7:aa:e5:e1:0d:1f:d1:41:bf:95:df:
56:a7:cc:8d:02:18:2d:1e:c5:b0:55:1f:32:54:0a:42:c6:30:
cb:70:44:44:4c:ac:3f:c6:b9:d4:06:f1:75:16:fd:d9:c9:ce:
15:9c:78:60:59:4a:0f:cd:6e:e0:e4:06:01:a1:0d:06:ce:db:
aa:a2:18:8e:04:0b:fc:8b:51:d8:7f:43:50:a7:1b:ed:e0:7e:
26:f8:87:d4:23:b3:39:eb:6f:7d:55:27:22:97:9c:ae:67:e5:
f8:61:0d:fa:79:78:0d:eb:8e:e1:be:51:61:d2:c3:31:bc:6f:
88:54:44:d9:b9:27:34:95:2e:3f:76:60:5e:65:dd:d3:c6:5c:
ae:28:78:26:cc:38:c9:98:39:8d:36:ba:00:bd:e0:3f:39:28:
c5:09:d9:c9:43:e2:03:95:82:39:8f:49:36:cb:8f:8b:69:a6:
6f:9d:a7:ad
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICc24wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MDUw
MzE1MjlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDVDNzY1NzA5MDQ1NkFD
MTI1NEE0NUYxRjEyRDgwOEYzRDU0MUNCRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBhvC0cazOYUQWHoslgROZlMiT7sGXbTlEV0TN0ux9xd7O/vKz
5XiSqrjw3I+COtVynhIjh94SMbab6gvDQySy+kBnyQAKN/NGBz+XHipNwVmEDZHe
meM+07f3vHbnSvFD5ZjcPFPIimeS9VvbtMC3VUzh1dban4xxWg12hfjQPeR2IyVH
03leAGmq+9IhwJjzcw60/orGtu9r8Xm54ivR0p2CpGMxKQXP0yTD68ADHqdkTIiA
cfHD4l8NWepxuoQUNSR9rYKRoxz+0wYh0xmbBB3pOi8KA3i22OxK4TfPnU5wRLt8
UcpusP6ym0qeH83095cwbQF6V2ctEfAGlS0fAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUXHZXCQRWrBJUpF8fEtgI89VBy/MwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1hIWlhDUVJXckJKVXBG
OGZFdGdJODlWQnlfTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQB13Fgx
/IXeP9237NmlI4++P/cGgzizufdh6Ll8095ft3PTCB1GTdVqOLmSgGI8CEG0RbGU
PK2gIll30Z6zb8M+uP1VKgdf65Od983531d+t6rl4Q0f0UG/ld9Wp8yNAhgtHsWw
VR8yVApCxjDLcERETKw/xrnUBvF1Fv3Zyc4VnHhgWUoPzW7g5AYBoQ0GztuqohiO
BAv8i1HYf0NQpxvt4H4m+IfUI7M56299VScil5yuZ+X4YQ36eXgN647hvlFh0sMx
vG+IVETZuSc0lS4/dmBeZd3TxlyuKHgmzDjJmDmNNroAveA/OSjFCdnJQ+IDlYI5
j0k2y4+LaaZvnaet
-----END CERTIFICATE-----
Generated at Sun Jul 20 19:05:43 2025 by rpki-client