Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nMiqM7wmM-aCOKnlC4g2wHpgQ0U.roa
File: nMiqM7wmM-aCOKnlC4g2wHpgQ0U.roa (raw, json)
Hash identifier: LLsuC4BT/Y44xv3EAxEbUxSAgwstc8sqgmzuwxljPyU=
Subject key identifier: 9C:C8:AA:33:BC:26:33:E6:82:38:A9:E5:0B:88:36:C0:7A:60:43:45
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6398
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nMiqM7wmM-aCOKnlC4g2wHpgQ0U.roa
Signing time: Fri 23 May 2025 16:11:19 +0000
ROA not before: Fri 23 May 2025 16:11:19 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25496 (0x6398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 23 16:11:19 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9CC8AA33BC2633E68238A9E50B8836C07A604345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:3c:e8:51:d0:05:2d:be:7e:42:18:b7:cb:
b1:5b:f6:d3:6e:d7:23:8f:d3:f7:54:b0:a0:4b:4e:
f3:57:4f:b5:7d:eb:3f:05:e7:63:58:19:f8:30:e2:
43:b5:36:4b:6e:00:49:9c:e7:74:6b:75:c4:fa:8e:
55:d0:df:80:d3:96:ee:f2:a2:60:0f:71:c0:39:49:
36:8c:9d:b7:00:f6:d3:aa:bb:a7:aa:3a:06:16:71:
c5:9c:21:b7:57:74:71:44:e3:68:37:a6:a9:5a:b5:
65:3f:7f:42:8a:ca:8e:c0:a0:34:8e:b2:65:f6:0a:
57:24:94:fe:13:da:49:d1:2b:18:41:b6:68:79:11:
8b:b4:c0:d7:2c:cc:2b:50:52:8b:c5:2b:65:25:6c:
ac:4b:97:9d:f4:a0:36:6b:8c:36:75:d7:6c:d9:70:
07:3b:e5:ca:6a:0b:5a:c9:54:c6:aa:92:b8:ee:02:
06:85:3f:83:1f:7b:96:68:62:f2:bd:1a:09:e5:5c:
90:3a:04:06:09:8d:e3:90:df:7e:27:08:5d:ae:42:
4f:e7:86:66:ff:a2:3c:80:1d:c2:ba:2e:40:ff:bb:
cd:61:41:26:85:0a:c0:78:7a:1a:39:3b:9e:a7:4b:
8d:b8:0f:5b:30:df:b9:15:41:1a:e5:8c:f6:20:39:
9e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C8:AA:33:BC:26:33:E6:82:38:A9:E5:0B:88:36:C0:7A:60:43:45
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nMiqM7wmM-aCOKnlC4g2wHpgQ0U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
aa:cd:29:ed:cf:1b:1f:76:36:04:68:1a:6c:15:3d:88:55:0a:
1e:0c:fa:ac:39:72:89:fa:17:41:33:29:b5:66:ba:41:cd:e6:
d6:0a:90:c8:71:29:6a:13:98:14:74:f0:ce:d1:fe:a2:ba:59:
57:78:31:f2:a4:0b:f3:b5:b3:31:a0:f5:bf:29:e6:ed:c6:de:
74:4e:76:8a:4d:14:22:0b:73:b8:a1:dd:b1:ea:ea:7e:5c:e8:
5b:b2:35:48:cd:ec:6d:28:9e:a5:ac:b7:d5:8e:ab:35:68:55:
e1:9a:f3:09:67:26:e6:e5:c1:20:06:73:11:a9:95:e5:d3:63:
f7:a5:67:db:e2:38:f2:be:08:46:9c:45:a4:8d:f8:c2:13:c3:
4e:12:76:13:e0:57:6f:3f:d1:a2:09:7c:f0:d8:d6:b0:47:60:
7e:5b:5e:84:26:7c:80:6b:98:46:83:d7:87:b0:4c:5d:d2:c1:
83:fb:cd:87:94:15:2d:79:79:9b:38:9f:07:70:10:57:02:5d:
cb:62:f1:45:c4:f9:74:64:fd:f6:7a:a2:ea:c3:a5:26:2e:d5:
4d:6c:10:31:3a:34:69:ea:44:0b:fe:2d:8b:18:f5:c4:7d:12:
8c:ce:10:ca:0d:b6:5f:18:5e:3b:bc:d7:aa:c1:86:99:b6:b5:
b6:97:2a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:27:45 2025 by rpki-client