Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jj5cJFVqJ7jnOCgnhjF9Xc8RVhM.roa
File: jj5cJFVqJ7jnOCgnhjF9Xc8RVhM.roa (raw, json)
Hash identifier: UCi+1su+ytj+cmLK3T1V+u03K1+Fk0f2d/hSlFedEXg=
Subject key identifier: 8E:3E:5C:24:55:6A:27:B8:E7:38:28:27:86:31:7D:5D:CF:11:56:13
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6F30
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jj5cJFVqJ7jnOCgnhjF9Xc8RVhM.roa
Signing time: Tue 24 Jun 2025 01:44:21 +0000
ROA not before: Tue 24 Jun 2025 01:44:21 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28464 (0x6f30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 24 01:44:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8E3E5C24556A27B8E738282786317D5DCF115613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:2b:f4:78:a3:2b:19:c8:5c:b6:28:96:05:
2e:bc:c1:17:25:a3:4f:f0:a5:8d:57:e7:ae:26:af:
43:77:2e:34:30:2c:2f:40:24:b0:ac:3b:0f:fc:ed:
85:a4:d9:dc:4d:ef:0f:3d:c0:f6:3c:1d:93:24:12:
7a:28:07:a9:63:9f:3d:25:2d:81:fa:68:db:64:b1:
84:8c:38:78:e2:fc:74:dc:6a:1c:ca:55:f3:5c:72:
ab:8d:28:64:44:b7:8f:06:f7:19:44:41:f7:b0:e9:
ce:67:1b:f5:47:36:83:37:6f:06:01:4e:84:2d:ff:
76:1b:b0:09:f1:cd:25:c4:06:43:aa:c1:cb:e4:dd:
fe:19:ba:64:47:4e:0c:12:56:59:80:d6:db:f1:84:
92:f7:e8:50:12:9a:5f:6b:8c:78:38:2f:61:88:8a:
42:7c:13:74:44:cb:4f:19:ae:64:28:e4:ee:d5:91:
d6:cd:c6:55:e0:eb:f6:76:ef:13:73:36:40:3c:c0:
04:40:a0:5b:02:1b:2e:bc:0f:bd:7c:53:bc:99:a5:
f2:6b:8e:e5:30:c5:2c:13:4b:bd:46:2d:f2:34:39:
95:72:d1:50:84:13:d5:d8:0d:c6:da:88:06:86:0a:
c6:6f:2e:02:9c:92:dc:7b:92:86:0c:20:7f:d7:dc:
24:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3E:5C:24:55:6A:27:B8:E7:38:28:27:86:31:7D:5D:CF:11:56:13
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jj5cJFVqJ7jnOCgnhjF9Xc8RVhM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
5e:58:3e:9a:02:c1:d6:13:8b:95:2b:dd:bb:fe:83:62:af:df:
9c:49:d6:26:43:c0:5e:a2:82:30:de:8e:64:58:ef:62:90:72:
16:59:29:2b:55:70:3d:e1:a4:a7:7b:3f:59:33:eb:03:94:af:
d1:bd:8e:f1:58:73:d7:b6:a5:83:b8:44:9c:48:f1:af:6f:24:
9c:40:13:32:5e:36:87:26:10:4d:0a:68:06:41:cf:1f:e6:d5:
77:5a:d0:87:86:2d:ff:80:0d:91:6b:27:8f:eb:1e:82:01:bd:
33:06:b1:1c:ea:39:e0:3d:07:34:b1:89:48:3b:15:b7:58:c0:
b9:41:64:a8:d1:d8:2f:11:41:f2:a1:3d:88:eb:d1:a7:15:64:
7e:d4:9c:5c:d5:3a:ea:00:44:ef:50:f4:2d:76:34:c6:c6:21:
bb:f0:78:67:7a:1c:a7:f5:e6:a3:8c:44:74:a9:d0:4f:f9:2e:
86:5a:19:4f:64:9e:3b:f6:6b:3c:b7:e9:71:43:2a:39:c1:30:
e9:af:8d:c6:62:dc:1d:b4:55:9f:08:74:78:0f:22:0b:b8:ce:
9b:73:60:ec:4b:e4:52:dd:1f:aa:19:1e:33:67:91:37:fb:58:
1e:97:85:cd:d5:8f:a1:a1:c3:86:35:80:da:63:29:9c:09:fa:
eb:b0:5b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:04:59 2025 by rpki-client