Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jBjnRiNpp076Mn2ar_iTaPLvo0M.roa
File: jBjnRiNpp076Mn2ar_iTaPLvo0M.roa (raw, json)
Hash identifier: fXZSIv8QIru4bafzUhF1LuGJIOO+ETHZiNRh0GGzEKY=
Subject key identifier: 8C:18:E7:46:23:69:A7:4E:FA:32:7D:9A:AF:F8:93:68:F2:EF:A3:43
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6586
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jBjnRiNpp076Mn2ar_iTaPLvo0M.roa
Signing time: Wed 28 May 2025 19:43:57 +0000
ROA not before: Wed 28 May 2025 19:43:57 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25990 (0x6586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 28 19:43:57 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8C18E7462369A74EFA327D9AAFF89368F2EFA343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:7a:cd:c3:db:35:42:eb:11:ac:ac:d4:bd:
46:c8:cf:49:1f:92:91:24:05:5a:a2:ad:db:70:04:
39:09:3e:f4:b3:17:38:64:ff:f2:87:c8:61:23:91:
8a:9d:6b:cb:98:79:1a:6d:08:0a:81:6b:2f:97:22:
f8:c5:c2:92:be:b5:d9:9b:38:f7:3d:51:a6:26:53:
23:54:29:87:0f:a6:8e:8a:d1:ae:d1:d0:95:6f:15:
59:67:06:1b:eb:35:4b:5e:94:fb:d5:c0:30:73:98:
88:ae:7c:11:19:50:9a:c9:0f:54:4d:95:50:db:d5:
b2:77:6d:02:b1:c1:1c:0d:12:85:4e:d5:24:ce:ad:
a0:64:e4:fa:0c:b4:8b:b0:c7:13:04:8a:31:76:4e:
5f:76:4f:9d:6b:85:df:9a:5a:d2:78:19:1e:ad:cd:
6f:5d:27:ae:b5:37:2e:ec:2f:21:10:bb:5e:7b:b0:
7f:32:11:e7:47:b1:cd:c6:2c:ab:e7:22:9c:21:6e:
63:f2:54:ef:c5:88:c7:9c:e6:3f:97:06:0f:47:0d:
ef:b0:26:46:9f:1c:e5:ba:98:3b:2b:a7:92:94:18:
52:ff:03:f0:61:a0:33:93:30:b2:31:2a:96:90:82:
93:09:64:e6:a6:f0:8c:8c:64:1b:06:97:af:7b:b4:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:E7:46:23:69:A7:4E:FA:32:7D:9A:AF:F8:93:68:F2:EF:A3:43
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jBjnRiNpp076Mn2ar_iTaPLvo0M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
46:a9:ad:41:f2:09:0c:59:99:1a:7a:84:fb:f3:25:49:7f:b1:
38:4e:7e:d6:cb:ea:4b:8d:33:38:ae:da:a6:1a:ad:53:4e:27:
1f:98:8a:2d:45:26:84:1b:d6:85:04:90:c1:51:bd:1b:f1:1b:
45:7d:cd:33:1d:63:95:0a:89:24:32:a3:f1:87:8d:88:41:5b:
01:df:97:46:aa:ca:31:b7:e9:86:70:cd:e5:8d:fb:6e:29:a6:
35:43:0b:9e:ac:72:53:04:02:9b:b6:4f:6e:41:f3:02:30:c1:
b1:50:e3:7a:08:82:5e:7c:37:21:6b:74:ce:4a:ff:11:b3:c5:
fa:18:cb:de:b2:8c:aa:06:0d:19:ca:15:92:cf:3c:dd:47:82:
d5:b1:06:24:91:64:86:73:55:09:78:dc:dc:74:13:e0:3a:3e:
57:7d:e3:c1:bd:80:7e:48:83:14:b9:92:4f:bd:4c:d8:47:6e:
93:f8:a7:59:bb:c6:e5:68:02:8f:51:05:ea:58:b7:1a:d0:09:
53:c6:6e:78:c9:c1:e5:42:0d:c6:fa:a4:1f:77:06:cd:7c:2a:
3c:61:58:aa:41:29:a0:7b:c1:a4:44:e8:a9:db:40:3c:7a:73:
63:26:22:c9:b5:9d:af:c0:c0:38:39:29:1a:ba:29:99:6d:3d:
e4:84:8c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:57:43 2025 by rpki-client