Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_WUMSW5J6PKIt3ebTZt-b8_00WA.roa
File: _WUMSW5J6PKIt3ebTZt-b8_00WA.roa (raw, json)
Hash identifier: DxdvWuzMzfQF7TgS65I6c4wt35RTVYCX9NowO1bfazY=
Subject key identifier: FD:65:0C:49:6E:49:E8:F2:88:B7:77:9B:4D:9B:7E:6F:CF:F4:D1:60
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 61FA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_WUMSW5J6PKIt3ebTZt-b8_00WA.roa
Signing time: Mon 19 May 2025 08:43:54 +0000
ROA not before: Mon 19 May 2025 08:43:54 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25082 (0x61fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 19 08:43:54 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=FD650C496E49E8F288B7779B4D9B7E6FCFF4D160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:b0:c0:33:98:1a:d7:42:4a:49:e3:89:03:
d8:77:97:c9:a0:28:d7:ca:12:4e:9d:fb:74:b8:96:
7e:d9:ff:78:8e:de:d8:70:c8:a8:12:25:ca:2e:33:
84:3a:51:5d:0e:d4:eb:4f:ee:30:59:56:ae:bd:22:
3b:b2:13:4a:72:20:d4:08:ef:fd:2b:0c:73:dc:23:
01:cc:d4:61:78:04:fd:e6:07:06:a9:44:b1:7a:4b:
7c:64:0b:b8:b2:00:b3:c5:af:82:33:1a:ca:e3:e0:
ca:bf:ae:b6:8a:f8:6a:8d:e0:d1:41:6c:53:32:12:
17:e2:df:1f:8a:64:b4:3c:28:2d:64:76:eb:af:84:
1b:2a:63:28:77:a3:de:0d:3a:16:5e:65:be:20:9c:
e9:ae:07:a5:a2:ef:d9:f8:48:cc:92:a5:23:78:b0:
3c:96:54:5d:00:34:84:6f:5b:b3:f5:f3:01:ab:63:
69:da:11:2e:a4:58:e0:56:c0:2e:2d:dd:c2:3b:12:
13:f6:ea:f5:dc:24:4e:8e:99:28:dc:a7:d2:dc:d2:
0f:91:3f:57:0b:bf:ee:45:2e:05:bc:bb:ae:82:05:
b2:72:2f:c6:f7:c5:69:ac:f4:8b:66:18:e6:4a:60:
bc:01:2e:84:15:a7:9a:91:c9:73:28:ce:b4:e9:1f:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:65:0C:49:6E:49:E8:F2:88:B7:77:9B:4D:9B:7E:6F:CF:F4:D1:60
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_WUMSW5J6PKIt3ebTZt-b8_00WA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
33:2f:38:9c:df:4e:a9:25:40:73:a1:ef:16:2b:00:e3:7b:33:
35:92:a3:aa:1d:9b:18:0e:cf:0a:af:4d:76:a1:9f:90:7d:a8:
c0:a0:dc:c1:1a:a5:dc:d3:12:93:46:29:46:26:98:ca:ad:3f:
00:38:d7:96:15:7d:2b:ef:34:72:1b:70:f7:57:bf:bc:cb:f6:
ab:c7:bc:b3:ed:af:b4:87:d6:9d:15:37:26:6d:ff:03:3e:1b:
a9:c0:84:b0:d4:6a:e6:52:6a:3c:dc:f7:c6:05:ef:de:7a:e9:
01:e2:f4:02:ea:8e:a9:79:b9:ed:82:af:7f:1c:e4:9d:5b:13:
cc:3d:52:b9:7d:81:30:81:87:de:a6:4e:0e:88:db:33:da:95:
81:95:80:40:d3:62:b5:dd:8f:f9:af:e4:12:83:a0:cb:85:d1:
a9:eb:7d:63:6d:64:ec:dc:6b:a8:bf:38:c6:21:d2:18:2b:d1:
91:5d:b7:1e:48:40:37:6e:fb:93:c7:44:44:f7:a4:a9:79:ad:
46:12:b1:9a:80:7e:47:95:72:fd:9d:e8:83:78:c5:0e:84:43:
eb:a4:84:2f:51:f1:33:01:77:58:cf:20:d1:19:f1:1b:bd:17:
2b:be:93:e9:15:7b:9b:fe:62:01:2b:89:73:bb:27:ad:dc:f0:
a0:d9:18:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:59:41 2025 by rpki-client