Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/h7DjtzvteoPgXjJ4XE6yGsRTA6k.roa
File: h7DjtzvteoPgXjJ4XE6yGsRTA6k.roa (raw, json)
Hash identifier: aaRhzz/JHMLlufKBF3O4f3wlOIpNf8dW5KBS7dXUEcQ=
Subject key identifier: 87:B0:E3:B7:3B:ED:7A:83:E0:5E:32:78:5C:4E:B2:1A:C4:53:03:A9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6394
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/h7DjtzvteoPgXjJ4XE6yGsRTA6k.roa
Signing time: Fri 23 May 2025 15:10:55 +0000
ROA not before: Fri 23 May 2025 15:10:55 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25492 (0x6394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 23 15:10:55 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=87B0E3B73BED7A83E05E32785C4EB21AC45303A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:f3:e1:44:6e:1f:86:4f:1a:ad:8b:8d:51:
c4:1a:9a:59:e4:21:f1:f9:c7:46:60:93:d7:d4:33:
af:46:4c:87:a4:1f:07:3a:6e:ef:a8:1b:36:a1:06:
fa:43:8f:7e:1a:a5:83:65:af:12:13:0b:e0:2e:f7:
48:12:6c:02:c7:ba:0c:30:be:36:36:07:56:dd:1b:
02:26:41:7e:48:e1:5b:77:63:b3:d9:97:ae:58:cc:
7e:18:92:2b:5a:6c:06:12:a8:4c:c0:ed:34:d6:27:
55:ff:2f:1c:bd:4c:d7:32:5d:72:52:a8:8c:94:68:
7d:ce:79:66:a3:b6:0f:71:05:fa:d2:52:b1:ad:77:
69:8d:2c:88:72:d4:06:a3:3b:b3:62:5c:21:9b:b0:
ed:7c:e7:f5:72:db:75:2c:98:ab:73:72:2c:e5:8d:
1b:30:29:5c:0a:62:da:ad:3e:40:f4:71:e9:a2:28:
8c:25:b1:00:38:2c:2d:2a:ce:80:54:d5:75:64:52:
20:b1:4d:a6:1f:3c:2a:cf:00:7f:2b:f6:36:2b:dd:
77:21:eb:38:62:cf:7c:1b:1c:bc:1f:b8:aa:d6:d2:
60:db:4f:14:b1:c0:13:1f:c7:2e:fd:5e:b7:5f:5c:
ec:08:45:32:36:c6:46:30:8a:f6:01:d3:57:27:b6:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B0:E3:B7:3B:ED:7A:83:E0:5E:32:78:5C:4E:B2:1A:C4:53:03:A9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/h7DjtzvteoPgXjJ4XE6yGsRTA6k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
19:01:fb:f9:8e:a6:d5:13:64:59:7b:48:b6:db:93:20:d0:42:
91:23:7f:3d:c3:9b:db:cd:0b:69:7f:47:d3:14:c2:62:73:90:
6a:86:94:ff:f3:6a:7d:ed:8a:99:36:70:81:eb:ea:25:2c:fb:
92:10:56:6b:01:25:48:e4:22:e4:84:76:42:84:9e:c5:fe:1e:
5e:a5:5a:91:77:c8:8b:87:cc:fc:3f:73:6a:a3:3f:e8:6f:16:
9b:d0:da:91:42:e2:3f:ff:89:56:f4:80:1b:80:a9:d7:56:20:
21:bd:8b:7b:3a:28:33:66:ed:36:ed:13:59:84:6b:73:15:67:
57:7f:5b:55:46:e0:f1:31:dd:e5:a3:cb:bf:04:45:74:c7:cd:
6b:67:ab:1b:32:5a:e2:2a:c0:c1:1a:a8:99:5e:1d:ff:f3:62:
e1:d6:07:4c:61:78:69:53:1f:78:4e:cf:4f:81:41:99:d1:82:
3c:8d:55:de:6c:b6:fc:e4:e7:68:e3:00:e2:aa:eb:e0:e0:47:
f6:1a:55:90:6c:0c:8a:02:ce:30:b7:cb:6e:65:a3:7e:f3:3f:
20:0c:18:24:d3:62:80:90:a1:cd:a0:96:05:40:6f:ac:54:0f:
7b:eb:ed:f1:ff:08:a5:fa:5e:31:a2:2b:3f:f3:5c:8f:8c:60:
71:f8:64:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:00:32 2025 by rpki-client