Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/h16BgBVKU5q7WmkC4TdF7FPP6W4.roa
File: h16BgBVKU5q7WmkC4TdF7FPP6W4.roa (raw, json)
Hash identifier: x0ZXqDlUi/jc6RwBy4vB2X0mUUzql9GOaEAoCl1xwDY=
Subject key identifier: 87:5E:81:80:15:4A:53:9A:BB:5A:69:02:E1:37:45:EC:53:CF:E9:6E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 64A2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/h16BgBVKU5q7WmkC4TdF7FPP6W4.roa
Signing time: Mon 26 May 2025 10:41:04 +0000
ROA not before: Mon 26 May 2025 10:41:04 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25762 (0x64a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 26 10:41:04 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=875E8180154A539ABB5A6902E13745EC53CFE96E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:e6:8b:92:31:94:83:c7:ec:93:7b:c5:d2:
23:30:48:8f:06:e8:6d:30:14:87:95:a9:c6:7b:e2:
76:46:34:d0:42:34:bf:56:8b:86:3b:4e:22:32:51:
4b:58:10:11:e4:06:f8:24:61:5f:8c:dc:3a:2e:73:
85:92:dc:e6:fa:75:5f:06:57:bc:71:5d:fb:17:41:
90:6a:fd:ce:50:16:ae:1d:51:03:16:7a:43:be:ab:
87:ba:2e:b4:3e:58:20:83:3b:e3:4c:af:3c:1c:c1:
13:4c:10:43:43:44:81:5f:93:58:0b:b8:8a:14:3d:
d2:f9:31:25:57:e3:78:5e:3f:4c:a8:dd:d5:6f:89:
39:5a:04:14:f5:23:22:df:d7:f9:3e:70:4b:2e:08:
43:c6:c8:0f:5d:e4:bf:6d:59:3d:03:cd:0c:60:4c:
97:1f:15:4d:8a:81:cf:73:55:0a:89:53:74:14:c3:
e6:95:d4:f9:9b:44:c2:a6:9f:0c:6d:b9:9e:0f:84:
15:4e:c2:31:18:5e:ca:59:53:ff:d5:30:8e:f0:20:
ff:c7:79:97:09:67:60:f2:a2:71:3e:9a:09:87:85:
34:31:8d:e2:2f:da:e4:26:5d:17:82:e6:a1:e8:6e:
ea:53:db:c5:65:02:b8:ee:d6:ab:f1:62:aa:f4:11:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5E:81:80:15:4A:53:9A:BB:5A:69:02:E1:37:45:EC:53:CF:E9:6E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/h16BgBVKU5q7WmkC4TdF7FPP6W4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
94:8e:c2:18:63:10:bd:12:39:45:09:a3:bb:ea:eb:07:01:68:
2b:52:a7:2b:97:06:04:67:a5:54:3d:ec:54:7d:99:37:b0:46:
82:e8:ba:55:1a:b6:93:87:29:aa:8a:e6:22:65:c7:e7:c1:cf:
fb:9c:9d:8e:54:73:7c:d1:e3:c9:f4:6b:74:cf:cd:1b:c2:ba:
80:0f:ab:08:08:d8:4b:3f:84:06:99:be:20:be:24:59:07:2f:
9f:ba:86:8b:06:85:d7:ad:45:c0:30:3a:c5:d0:a6:42:29:4e:
d3:1b:fe:e2:eb:c2:d4:1c:d3:c3:81:d1:a4:fb:9d:fb:80:d2:
4c:68:0e:1f:78:39:05:b4:43:c7:02:45:9e:22:c7:c1:c8:79:
0d:cc:d7:11:cf:51:a8:60:55:05:e4:c4:fb:9d:5b:5b:ab:c0:
45:44:53:cd:18:fd:53:a9:b7:da:a4:89:f1:64:f3:79:a6:75:
f6:86:cd:66:ce:85:32:0b:01:f2:9b:35:1e:ce:c9:79:08:22:
fa:8d:63:eb:97:88:75:5f:6e:8a:aa:8f:a3:6f:64:b9:44:8c:
59:b5:da:e4:99:87:c4:f3:a3:60:07:72:08:1a:b3:4c:9f:a2:
6e:5e:bb:b1:b8:48:9d:ad:77:34:83:75:64:56:0e:6a:7a:a8:
d2:93:1b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:00:30 2025 by rpki-client