Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/bmv2ynN2Huti79WZ8Xxis10APK4.roa
File: bmv2ynN2Huti79WZ8Xxis10APK4.roa (raw, json)
Hash identifier: aQGoe1QThgPiCEno0KQ2kyLx3cB9nxrTKxxqbFKrTAg=
Subject key identifier: 6E:6B:F6:CA:73:76:1E:EB:62:EF:D5:99:F1:7C:62:B3:5D:00:3C:AE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 649A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bmv2ynN2Huti79WZ8Xxis10APK4.roa
Signing time: Mon 26 May 2025 08:41:04 +0000
ROA not before: Mon 26 May 2025 08:41:04 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25754 (0x649a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 26 08:41:04 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6E6BF6CA73761EEB62EFD599F17C62B35D003CAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:05:a6:f6:04:3d:ac:08:62:85:ec:3a:46:16:
e8:c7:ea:5d:57:42:58:a2:a0:2a:7e:c8:f0:de:49:
23:ad:b4:78:ed:e5:ba:d2:a2:d8:d5:14:38:8e:f6:
42:cd:a8:c3:57:a4:6f:e1:e8:f8:3d:ba:28:d4:aa:
46:55:0b:cc:d8:47:cb:08:8f:17:2f:8d:4a:82:6f:
06:36:56:12:ef:da:fd:53:4f:c2:fd:0e:50:76:3d:
5c:0d:3a:3c:0a:92:a1:fc:bd:09:9f:94:25:03:d4:
04:61:95:74:c8:a0:57:b0:22:9b:58:80:13:f3:e3:
7e:48:0b:b2:f9:19:13:78:1b:29:a9:0e:95:b9:11:
87:ff:91:27:3d:c5:b0:51:7f:6c:a9:94:27:7b:bb:
09:75:3b:c3:2b:ef:ad:06:21:30:ba:b3:a6:3f:14:
3c:23:fd:fb:93:ea:e1:ce:86:75:71:3f:36:d0:31:
27:ea:5a:45:55:7a:ca:59:bd:f2:9e:d8:bc:70:5e:
53:be:21:f7:9c:4f:09:c8:e0:b5:a2:9a:70:64:42:
8f:22:09:5c:5e:2c:6f:af:f5:14:9d:11:bf:85:98:
1b:ad:c3:cc:c3:d0:d7:96:6e:79:15:31:99:0e:c0:
6b:27:6c:db:bb:da:4d:9b:d7:c3:dd:ad:6d:e3:76:
07:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6B:F6:CA:73:76:1E:EB:62:EF:D5:99:F1:7C:62:B3:5D:00:3C:AE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bmv2ynN2Huti79WZ8Xxis10APK4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
88:41:71:e9:d8:59:1f:13:fd:73:1b:0c:7f:ba:46:57:d9:8a:
16:ad:39:4b:f7:5d:91:0b:b5:2a:c2:cb:14:b1:ec:16:ab:7a:
1b:69:5a:39:07:40:f3:87:58:02:f5:90:36:4b:76:6d:a8:b7:
e6:71:01:00:6b:0a:7d:56:2f:cd:a4:92:a4:4e:01:05:86:76:
8f:60:18:e0:53:87:16:8f:26:9a:cb:42:c0:d0:a8:dc:0e:58:
a9:f4:20:23:ce:8f:ab:c5:79:0d:3b:d5:8e:b8:cb:af:59:5f:
96:ee:1a:14:c9:c3:ad:b5:e3:dc:69:37:ce:d6:e4:5f:1f:1e:
69:9c:44:21:c1:1e:81:52:e2:a3:83:b0:8e:a0:dc:bb:d5:be:
96:f7:aa:d9:2d:b1:ca:63:f7:67:3f:e4:70:98:a6:4b:9b:ec:
f1:c7:d1:23:45:31:e6:71:7b:04:5d:00:7e:b2:11:b3:17:5c:
e8:44:0e:85:ca:f0:62:60:42:3b:cf:0b:01:69:d4:55:35:93:
40:d8:75:05:6b:db:7c:83:02:da:07:4c:e6:21:d7:a5:ab:e3:
ac:69:27:69:fe:73:2c:ed:27:7a:5d:9b:cb:f5:c3:b4:f8:b5:
c2:43:55:80:7f:da:94:38:08:04:94:f1:5a:79:bc:22:b4:41:
fa:45:1f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:23:09 2025 by rpki-client