Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jqnE5-5rL1GHsipSxJqM-Cnlbf8.roa
File: jqnE5-5rL1GHsipSxJqM-Cnlbf8.roa (raw, json)
Hash identifier: NWdzvIP7WY6jmifAJw/CtkTbNyRSNBLx3Bigar0V6HQ=
Subject key identifier: 8E:A9:C4:E7:EE:6B:2F:51:87:B2:2A:52:C4:9A:8C:F8:29:E5:6D:FF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 652A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jqnE5-5rL1GHsipSxJqM-Cnlbf8.roa
Signing time: Tue 27 May 2025 20:41:12 +0000
ROA not before: Tue 27 May 2025 20:41:12 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25898 (0x652a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 27 20:41:12 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8EA9C4E7EE6B2F5187B22A52C49A8CF829E56DFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:4a:ce:7c:09:3e:95:37:7d:b7:89:84:15:
f7:ea:1a:56:4d:92:a4:a7:a2:e3:31:87:d9:6c:a7:
1b:17:3c:0a:07:94:6b:cd:c8:ef:a9:31:37:21:4d:
0d:dd:6e:ec:db:8e:a5:4c:61:fd:94:20:55:27:66:
60:a8:a8:79:fb:c7:20:b3:54:76:83:f8:1b:5a:d2:
98:1a:b8:b9:a8:1d:36:2d:f7:94:d7:03:e6:9d:8e:
26:b2:dd:9e:27:c2:a9:6c:4f:5c:fd:cb:80:08:a1:
07:22:dc:32:84:f3:8f:33:4e:31:19:e7:c0:31:f4:
5d:6f:34:9a:68:94:08:49:90:90:72:3d:fe:8a:25:
3d:5c:05:d9:7e:89:2e:f0:60:59:74:be:ca:8a:57:
d8:34:5f:bb:60:34:6e:05:25:b1:f9:34:76:cc:2a:
ff:5f:cb:6b:44:25:12:c4:07:b1:3b:b0:0a:77:c0:
de:0f:9f:b6:7b:0d:ad:74:17:e1:88:fb:ef:36:72:
2c:74:41:cb:e7:c4:df:bf:32:04:7d:f4:1d:20:35:
b9:80:ed:6a:28:47:89:fa:17:90:20:b0:ba:a8:08:
ca:d0:5e:6d:f5:01:d6:f6:88:49:7f:b5:c0:63:19:
bc:d8:3a:6c:e3:1c:27:a3:20:a6:71:69:5c:d8:bb:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A9:C4:E7:EE:6B:2F:51:87:B2:2A:52:C4:9A:8C:F8:29:E5:6D:FF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jqnE5-5rL1GHsipSxJqM-Cnlbf8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
8d:2c:c6:0c:eb:2e:4c:68:50:0e:a4:18:bd:94:c5:ea:fe:a8:
63:dd:13:cc:a8:cf:e8:7c:1e:73:ff:94:ec:e4:d5:db:f6:72:
a8:93:9e:f4:bd:9d:9d:4d:02:92:2a:df:84:24:8d:c6:84:72:
aa:ca:b2:0e:06:cc:37:aa:66:d7:c0:51:a1:fe:77:7e:c4:c8:
44:39:d8:bd:f8:2a:53:23:48:00:9a:45:04:b6:23:5c:83:27:
f3:ca:63:19:43:96:f6:9f:9d:82:0e:a3:94:ce:5c:95:ce:35:
61:44:45:64:d4:a8:3d:fa:26:ce:fc:18:af:43:f6:6f:08:2a:
e7:4f:40:dc:1e:6c:9e:a5:ed:44:ee:bf:f1:32:ab:0a:57:b1:
da:18:9e:31:ca:35:45:a8:65:f0:3b:68:97:6f:80:72:cf:60:
e4:b7:02:04:0a:9d:8a:a3:21:8c:30:2d:8b:d6:04:6e:53:e2:
d7:f3:cb:19:df:c2:27:06:af:89:5f:eb:0b:ab:20:4e:66:28:
58:ac:50:cd:f9:c7:62:81:d1:ad:cb:77:5a:41:bc:83:5d:53:
c3:cd:c9:c4:7c:3f:74:52:ef:93:53:f5:4c:1d:76:d6:ae:68:
8b:54:24:76:97:78:a8:d8:51:84:41:07:34:fa:9b:a3:af:0c:
63:da:be:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:59:44 2025 by rpki-client