Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lAeoyqaAtkqPn-pPp0TogbduG8I.roa
File: lAeoyqaAtkqPn-pPp0TogbduG8I.roa (raw, json)
Hash identifier: 766QQxsaNvO7nKW+fEAtyt7JzX5En4rZZBPtUkpDq00=
Subject key identifier: 94:07:A8:CA:A6:80:B6:4A:8F:9F:EA:4F:A7:44:E8:81:B7:6E:1B:C2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 66A6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lAeoyqaAtkqPn-pPp0TogbduG8I.roa
Signing time: Sat 31 May 2025 19:44:07 +0000
ROA not before: Sat 31 May 2025 19:44:07 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26278 (0x66a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 31 19:44:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9407A8CAA680B64A8F9FEA4FA744E881B76E1BC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c0:eb:a4:31:74:0f:71:2a:50:5a:a5:9b:fb:
fc:90:52:d4:5f:a3:4e:08:9f:14:21:be:da:1f:5c:
1f:5a:f3:a2:99:1d:5f:4f:f2:dc:88:4d:a7:11:77:
2f:46:47:56:9a:a7:9f:78:c6:6d:60:ac:76:f0:62:
28:58:f7:dd:39:0f:c0:89:62:9f:da:ca:77:a3:34:
53:76:94:60:88:74:c1:65:1d:31:1b:b2:ed:5c:9f:
e2:d3:c7:9a:4d:eb:1f:11:fe:b5:db:5e:82:6c:63:
16:1c:d2:94:2a:25:7d:c5:48:c9:6d:c2:bb:4f:1e:
e2:cf:9d:8b:6d:2f:4b:42:07:97:73:f5:0b:97:c9:
96:8a:77:75:cb:5a:cf:fe:2a:20:29:74:a3:01:7a:
16:24:1b:7e:96:95:81:8e:54:8b:cb:e0:45:c9:dd:
75:55:6f:3c:af:ed:c2:0d:d7:89:e1:9b:9e:62:b6:
7f:d7:2d:2e:d7:4d:5a:ad:c8:d5:18:cf:99:bd:5d:
63:37:2a:ce:a2:0b:0d:cb:ca:5c:78:a8:08:3b:a0:
97:ed:da:10:0e:dd:2d:3b:4f:4d:11:7d:53:59:67:
fa:b9:9e:80:b9:58:3a:39:34:6d:53:00:38:81:c4:
96:92:e3:43:8b:45:6e:10:fe:03:8a:82:a8:0f:13:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:07:A8:CA:A6:80:B6:4A:8F:9F:EA:4F:A7:44:E8:81:B7:6E:1B:C2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lAeoyqaAtkqPn-pPp0TogbduG8I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
07:ae:cf:37:a2:ab:6d:e0:c5:ed:00:9b:ad:d5:8e:73:77:01:
9b:1c:fd:6c:42:ba:e5:17:9d:92:d2:c9:41:42:3f:7e:af:90:
b6:85:76:74:2d:29:8b:3b:7d:1d:64:0e:2b:66:95:82:26:66:
86:cc:29:83:5d:9f:bd:a4:9c:49:1b:c9:1d:bc:51:d9:c4:4a:
1d:ec:c0:7d:2f:4b:7d:8a:78:c5:90:0b:18:f5:62:5c:52:50:
05:39:bc:e5:d6:a4:99:c6:05:14:fe:6d:37:a9:f4:c1:91:c9:
3e:e8:64:66:14:d4:f2:3a:f0:c5:25:fb:61:6f:ac:7e:b8:f8:
70:10:de:89:c1:94:48:9a:3b:7d:6e:14:33:da:a6:3f:2e:e4:
55:77:bf:76:15:48:47:28:a2:e6:30:b0:7d:ef:d2:4d:cb:f6:
8f:d5:57:58:17:f3:25:f2:f2:fa:76:ed:63:f5:a3:e6:1a:ef:
23:fc:b5:f1:00:0f:57:2c:4c:f5:44:dd:c2:93:2c:f7:c6:24:
68:c5:93:89:7a:1d:95:2b:d7:61:a9:6e:9f:c0:7a:37:fc:0e:
f5:52:fc:7b:2c:6d:a7:38:00:64:3f:3a:db:84:c7:08:82:ad:
df:64:b6:3e:e7:c5:74:d9:cd:f6:df:ee:72:32:8c:38:d1:93:
ce:f5:85:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:58:30 2025 by rpki-client