Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eU8XgOo-wW9b2tmVyqcuqJN-TCE.roa
File: eU8XgOo-wW9b2tmVyqcuqJN-TCE.roa (raw, json)
Hash identifier: ebBJcrJAu8bovfBE+nIPEArskZRgywFTJNFKw5RqrJs=
Subject key identifier: 79:4F:17:80:EA:3E:C1:6F:5B:DA:D9:95:CA:A7:2E:A8:93:7E:4C:21
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 62EC
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eU8XgOo-wW9b2tmVyqcuqJN-TCE.roa
Signing time: Wed 21 May 2025 21:10:41 +0000
ROA not before: Wed 21 May 2025 21:10:41 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25324 (0x62ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 21 21:10:41 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=794F1780EA3EC16F5BDAD995CAA72EA8937E4C21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:b7:d8:d8:02:8a:cf:9b:33:04:df:52:84:
93:86:d3:88:98:29:4a:bf:48:8e:26:32:67:eb:8f:
01:0f:08:9b:f8:f4:65:a7:8b:4f:04:c1:d6:45:eb:
25:92:12:c0:bf:8d:6a:d3:19:96:34:8d:da:0a:79:
b0:6a:ec:e1:cb:dc:5c:54:79:b0:60:92:29:a9:98:
c7:50:98:0c:09:f0:cc:44:d8:c5:14:78:bf:34:44:
57:b7:0c:ed:0d:eb:4f:5e:14:b0:00:84:53:35:d9:
29:42:67:ff:e6:ab:b3:64:5d:9b:1e:bd:60:90:76:
b4:78:54:5f:fa:7a:fb:cb:49:31:e9:89:c3:c8:ab:
f6:19:6f:a6:94:d4:6f:5c:fe:bd:20:66:44:87:9d:
79:ef:ae:19:49:83:54:56:5d:2e:25:8b:fc:8a:bd:
ae:49:16:ae:27:8b:75:91:e7:17:32:73:8b:99:7d:
73:ca:e5:da:ca:3d:48:e3:af:93:7e:d0:6a:d3:f1:
ee:61:76:b2:79:8c:a3:5f:f0:15:d1:50:c2:70:5d:
b8:54:94:3e:97:84:09:30:f9:d7:b3:44:8e:ea:28:
8f:96:fc:83:f5:8d:61:bf:7b:af:b7:5c:6e:2b:69:
f1:5c:a9:63:23:9b:9a:d9:d5:2c:03:6a:1b:81:00:
0d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4F:17:80:EA:3E:C1:6F:5B:DA:D9:95:CA:A7:2E:A8:93:7E:4C:21
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eU8XgOo-wW9b2tmVyqcuqJN-TCE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
38:38:cb:be:6a:28:42:0d:6e:51:e0:fc:29:e1:d2:da:a3:94:
88:fe:af:55:f9:b6:0e:4a:0e:02:23:35:b6:c5:ce:b5:4c:87:
a2:d1:2f:7a:91:07:db:7f:a5:68:b8:4f:f4:89:e7:01:6f:05:
f8:09:20:08:bc:b8:c5:9e:da:b8:e5:e9:d5:8c:8c:82:6d:c1:
b9:b6:c8:5f:33:30:57:37:1b:0e:6d:95:f7:a9:10:6c:ff:3a:
51:51:08:73:62:72:ce:c3:90:ee:57:6c:71:c8:33:eb:57:04:
ad:ed:14:95:80:1c:90:d2:1e:10:14:20:af:f7:ee:34:d7:e3:
9b:e3:33:f1:43:b9:21:7f:ab:c0:74:3b:8f:09:87:c8:25:ac:
23:a1:82:25:88:90:7e:09:b3:0f:ad:1d:b1:b2:46:8b:9e:65:
77:42:4a:72:98:5e:e1:44:6e:ab:52:cd:ea:33:3c:bc:b3:16:
21:a1:38:52:50:81:5a:d8:0a:54:84:a0:43:38:1c:bf:ac:46:
0e:63:8a:46:03:a0:16:8d:d0:9d:65:b8:dc:ae:47:c6:61:85:
20:0d:da:13:c2:b5:2a:c2:79:00:86:b5:56:6d:30:5d:15:4f:
6b:89:0a:fa:5f:4a:11:58:ea:75:a9:f8:48:4d:ae:0e:34:09:
02:4b:4d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:25:28 2025 by rpki-client