Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/f9ymlrLmWrWqGJQdkeAn3hOzc0I.roa
File: f9ymlrLmWrWqGJQdkeAn3hOzc0I.roa (raw, json)
Hash identifier: 3j9alZ8zfYQdE108VCWLGBdfKe6ccqTEJd77Nrs+qf8=
Subject key identifier: 7F:DC:A6:96:B2:E6:5A:B5:AA:18:94:1D:91:E0:27:DE:13:B3:73:42
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 65A8
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/f9ymlrLmWrWqGJQdkeAn3hOzc0I.roa
Signing time: Thu 29 May 2025 04:11:26 +0000
ROA not before: Thu 29 May 2025 04:11:26 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26024 (0x65a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 29 04:11:26 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7FDCA696B2E65AB5AA18941D91E027DE13B37342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:45:ca:5c:70:62:b4:34:e9:2e:d2:7a:61:
9b:76:9f:31:32:3c:74:c5:12:7b:61:a3:8f:db:35:
93:fd:57:d7:b4:54:76:52:0b:86:e2:db:fa:df:18:
17:c0:63:53:4e:b7:f4:1d:89:7d:95:7a:f0:54:11:
cc:8f:dc:ce:92:0b:2e:ef:44:45:f4:c7:04:40:18:
92:b6:bc:ca:41:1e:e5:d4:91:03:67:ee:1b:ed:90:
e4:ec:77:1d:61:07:e2:81:08:3c:be:84:d7:43:3e:
a7:bb:5a:6a:a0:67:24:b8:6a:d4:34:11:b7:b8:9d:
25:4f:e5:f3:f5:f3:8a:0a:c2:d3:a7:a9:5f:36:9e:
59:52:0d:d9:2d:bd:a8:67:4e:f9:6e:c7:4c:e7:b7:
af:b4:4b:d8:e3:28:07:a5:7b:90:aa:45:92:55:c4:
52:9d:4a:55:66:1b:e7:63:c3:f7:74:e9:8e:8c:01:
e2:8d:20:70:7a:7c:e0:5c:74:29:e2:cc:cb:ec:cd:
04:27:42:c2:56:16:92:d7:63:e3:29:53:b6:d9:66:
50:c4:de:f2:04:39:21:da:2c:0b:b2:db:9a:7d:57:
2c:44:61:a9:a4:28:a8:ee:6a:57:c0:6b:8f:3d:43:
4f:a3:23:01:b0:da:31:0d:28:99:88:06:7a:26:ea:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DC:A6:96:B2:E6:5A:B5:AA:18:94:1D:91:E0:27:DE:13:B3:73:42
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/f9ymlrLmWrWqGJQdkeAn3hOzc0I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
9a:75:7e:bf:b9:3a:4b:b5:1c:94:84:ab:ae:21:73:57:56:51:
e1:6f:dc:dd:cd:59:c9:ac:f3:bb:e9:fc:04:a6:f5:8f:67:8b:
49:a4:2f:f6:6a:e8:5b:9f:f7:08:cb:95:5f:9c:ca:62:41:81:
93:8c:82:94:02:2a:60:f6:28:6c:68:75:74:03:7f:ec:78:21:
08:49:8c:fe:48:18:d7:0b:c9:6b:3d:b2:15:d0:d1:89:dd:db:
ae:c9:e4:b9:73:06:81:7b:10:30:05:11:dc:b9:64:9b:6b:cc:
13:96:c5:86:06:f7:17:49:78:4f:20:de:03:b0:5c:e6:5f:8a:
ba:95:19:9b:9f:ef:b1:cb:1c:c7:4e:ed:08:22:0d:95:76:c6:
ad:28:bd:65:56:58:35:19:27:ad:dc:18:23:d9:2d:06:58:e8:
16:bb:23:fe:e5:3b:f0:73:4a:30:e7:01:e8:06:3e:03:dc:f5:
17:96:0c:29:28:84:23:71:75:f8:a4:5d:5f:fa:e7:6c:97:ff:
15:ae:4f:61:c6:23:87:e2:cc:49:1a:29:12:30:73:0d:72:6d:
68:be:96:02:0a:d4:32:96:22:36:d7:25:c2:46:8e:bb:f6:4a:
d9:d9:22:46:4b:9a:e0:d4:ee:8b:1d:5b:57:3c:43:91:9b:db:
d2:71:9c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:28:22 2025 by rpki-client