Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/bKx2Rn34gTB4K8NB0cDj2Q0u5L4.roa
File: bKx2Rn34gTB4K8NB0cDj2Q0u5L4.roa (raw, json)
Hash identifier: uJGEKDx3A+ajNvqTO2aNS40UCpiNxe7zIB6k/pJ/Xx8=
Subject key identifier: 6C:AC:76:46:7D:F8:81:30:78:2B:C3:41:D1:C0:E3:D9:0D:2E:E4:BE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6606
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bKx2Rn34gTB4K8NB0cDj2Q0u5L4.roa
Signing time: Fri 30 May 2025 03:41:18 +0000
ROA not before: Fri 30 May 2025 03:41:18 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26118 (0x6606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 30 03:41:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6CAC76467DF88130782BC341D1C0E3D90D2EE4BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:86:cc:1d:00:d2:91:7f:3b:38:6c:71:6a:
23:15:61:24:e2:99:d5:96:0a:54:e8:81:97:2d:ad:
5f:45:e8:c6:27:4e:a9:9d:cd:a1:f5:f5:24:f3:aa:
be:04:23:bf:f3:71:4d:d6:29:c4:08:01:e6:69:9f:
21:ee:de:37:e9:3d:85:4e:70:06:a5:16:a9:94:33:
f8:52:f3:18:b0:58:61:2c:97:6d:4d:23:0b:b1:39:
26:7f:cb:53:6b:ae:ae:f3:69:82:b5:07:fa:b7:dd:
6a:d1:b3:95:df:54:af:72:41:1e:b0:1c:cd:43:6f:
23:8c:39:39:47:20:aa:45:1d:05:fd:8b:50:2c:b7:
40:30:43:a4:65:67:67:27:03:77:e9:59:f6:de:aa:
0a:9c:a7:df:eb:1f:49:b9:ef:63:59:ef:e5:b8:d1:
0c:d9:41:25:6f:f2:fd:fb:a8:4d:2a:d3:ee:c5:5d:
01:60:85:11:e7:7c:1e:d2:80:3f:80:f7:f4:83:98:
75:6f:af:9a:98:73:3e:c6:d4:85:90:29:95:1d:fb:
9a:50:25:8b:04:cc:1b:86:a5:d0:b2:21:c4:35:40:
f4:5b:54:94:10:42:3f:12:b9:ae:c3:b3:c6:a4:8e:
8c:84:2b:30:da:a6:9b:5a:db:af:23:e5:63:44:d8:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AC:76:46:7D:F8:81:30:78:2B:C3:41:D1:C0:E3:D9:0D:2E:E4:BE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bKx2Rn34gTB4K8NB0cDj2Q0u5L4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
2d:68:61:97:cb:88:b8:ca:b3:61:07:3e:73:a6:d8:b1:2b:c4:
40:a1:d2:df:d7:49:3b:6a:8a:bc:ea:57:79:1d:b2:64:a6:af:
dd:71:db:e2:84:41:99:86:66:8f:2c:c4:aa:ad:b0:36:31:e9:
3b:46:16:a2:6c:b1:80:2e:65:29:2d:cb:ba:32:a0:44:bb:d3:
81:70:48:5f:45:d3:53:0d:7b:a5:d0:47:62:32:ad:47:c1:88:
3b:cc:be:01:df:41:97:0d:a8:99:64:f0:f3:c8:4b:aa:a7:bb:
8e:a3:36:17:12:8d:ce:4e:d2:2b:45:ee:f8:99:4c:9d:76:59:
02:93:6a:94:af:07:4d:b0:6c:73:1b:8e:cc:a3:3e:db:33:db:
25:0e:1b:23:cb:ca:8d:5a:37:df:dd:10:82:9e:ab:1b:f4:d3:
c4:e6:1b:fc:e9:ce:73:d1:83:e4:dd:42:19:d5:5c:53:51:4b:
10:15:ac:20:0b:c9:ea:a5:0e:bb:48:9d:76:09:cf:dd:4c:85:
53:53:d1:19:ff:86:28:ab:d5:37:67:12:35:a8:e2:77:68:f4:
7f:ae:44:c0:25:5f:47:49:02:5e:b2:28:3f:a4:05:f6:11:b1:
98:7b:35:09:c1:65:0e:79:aa:67:95:e0:a5:c0:11:b0:b5:61:
0c:7a:69:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:19:32 2025 by rpki-client