Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dlky50Ae87mA6zzwYMpolDEv378.roa
File: dlky50Ae87mA6zzwYMpolDEv378.roa (raw, json)
Hash identifier: liKarL6GLgCVDvQfoL8FplwU2LH1dk/N1uAgiJgXX84=
Subject key identifier: 76:59:32:E7:40:1E:F3:B9:80:EB:3C:F0:60:CA:68:94:31:2F:DF:BF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 66E0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dlky50Ae87mA6zzwYMpolDEv378.roa
Signing time: Sun 01 Jun 2025 10:11:36 +0000
ROA not before: Sun 01 Jun 2025 10:11:36 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26336 (0x66e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 1 10:11:36 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=765932E7401EF3B980EB3CF060CA6894312FDFBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:b1:18:36:96:21:ce:49:53:5f:6e:9e:0a:
75:c7:2e:27:14:cc:5f:e8:64:a8:87:8a:89:9a:01:
ea:2d:54:4d:5c:b4:7b:a8:62:8f:42:35:4a:56:1a:
34:bd:9c:8c:dd:1b:30:6d:e5:48:d4:02:56:9c:59:
32:0a:6c:0a:91:26:c9:80:2f:c0:3f:87:26:ae:91:
8d:d8:e9:08:ec:86:b0:fe:d9:40:bd:c2:3c:07:02:
4e:81:9f:46:99:31:af:63:4b:4d:0a:cc:84:d9:c9:
9c:7e:72:19:9d:20:c5:9d:b9:16:85:a7:f0:ad:e5:
40:b5:01:e4:8d:90:67:06:e7:c7:60:b5:4a:e5:5e:
b7:d1:90:d3:7b:83:6e:17:3a:c5:19:85:9e:b3:fe:
47:e9:0c:98:e1:0a:28:50:78:b7:1b:5a:2c:ee:f8:
81:ea:01:ed:8f:07:87:9e:88:aa:29:1c:c0:be:75:
84:fa:fb:49:46:52:77:81:0f:9b:35:b9:e4:56:51:
e3:ef:61:46:35:87:2d:90:b6:52:e4:c1:ca:4f:69:
64:23:1f:5f:a5:b8:f6:c8:cd:a7:52:c7:3c:ca:f9:
1b:9b:63:b5:72:9d:85:2c:3b:ad:40:72:5b:04:2b:
f7:19:50:62:5f:cf:09:81:86:d0:f7:92:c5:6f:34:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:59:32:E7:40:1E:F3:B9:80:EB:3C:F0:60:CA:68:94:31:2F:DF:BF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dlky50Ae87mA6zzwYMpolDEv378.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1d:bc:63:23:1a:09:81:58:b8:5e:d4:89:07:1c:91:0e:bb:57:
e5:85:f6:d2:c1:56:36:21:68:ce:b9:4c:90:21:26:b8:89:fa:
d4:fa:31:bf:28:f2:33:cb:cf:14:54:5d:27:4a:d8:26:72:0e:
41:02:56:de:59:2f:8e:8e:e0:9b:3c:e4:98:d1:1e:ee:dc:7b:
47:d0:00:bf:68:99:bd:72:bc:64:fd:db:c1:06:e0:62:0c:62:
05:bc:23:8d:1c:58:06:a3:c1:0b:55:7c:24:8e:6a:42:7a:8d:
cd:87:06:c5:3c:11:01:15:d5:1d:ec:c2:d1:20:4d:c4:2e:95:
82:a1:4e:c4:50:9f:a7:53:21:2d:61:08:a4:c0:4a:4e:51:0a:
2a:d2:39:5d:8a:57:77:b8:8f:45:16:54:ad:52:0f:c0:9f:c8:
a3:14:41:56:e4:4a:2d:6c:58:4c:31:d2:fb:5d:2d:55:33:b9:
b1:80:65:84:51:52:74:50:2e:9e:7f:89:b0:ea:f1:0f:14:52:
6b:69:0b:5a:37:96:e3:f7:5f:1c:0b:fc:b7:67:1c:58:cd:20:
ef:11:64:27:c5:fc:32:45:a4:4c:83:77:49:e1:f7:1f:be:5d:
8c:45:c1:10:e3:13:a5:8e:f2:77:15:c8:69:a7:6f:93:4a:01:
c4:d8:0a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:20:23 2025 by rpki-client