Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nSPGZXSZufY-Z-qQVdYFEEnU3Mc.roa
File: nSPGZXSZufY-Z-qQVdYFEEnU3Mc.roa (raw, json)
Hash identifier: O+HosZcMvAPBcxKbh4G/Crhk1ztQpxCqbHX3nbhJnEY=
Subject key identifier: 9D:23:C6:65:74:99:B9:F6:3E:67:EA:90:55:D6:05:10:49:D4:DC:C7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6486
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nSPGZXSZufY-Z-qQVdYFEEnU3Mc.roa
Signing time: Mon 26 May 2025 03:41:05 +0000
ROA not before: Mon 26 May 2025 03:41:05 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25734 (0x6486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 26 03:41:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9D23C6657499B9F63E67EA9055D6051049D4DCC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:f7:7c:9b:8a:1d:08:2f:ba:80:32:a1:6d:
d9:30:5c:fc:ba:a6:f4:5c:d3:e8:7d:ea:3a:08:13:
7c:b2:7c:0a:bd:de:ad:bd:7a:bb:10:8d:09:cd:1f:
30:9d:2e:7f:db:82:f1:95:64:b1:ed:c3:a1:d7:86:
b9:32:6f:a3:0c:f8:ca:ea:12:d6:89:22:10:d7:5b:
e4:4c:82:ba:e4:05:bc:de:a8:2c:c1:01:a0:a6:cb:
94:a7:cf:44:76:01:69:97:ea:1f:b6:6d:c6:01:2b:
31:75:ba:4a:66:ca:cc:86:30:f3:50:d3:66:de:54:
54:6e:07:d4:ec:9e:a2:77:1c:7f:c7:d7:f7:74:3e:
1b:5f:be:49:20:d0:e2:85:ed:17:b2:3c:41:e8:66:
9c:d9:0d:ab:0e:10:05:3c:ac:9c:67:ba:de:d8:ac:
fe:ad:60:b2:89:26:46:8d:89:c5:64:b3:60:1e:33:
b6:b7:54:df:3d:2c:9e:3c:0a:88:80:25:33:f1:ae:
98:69:27:a8:96:48:b5:05:de:7e:8e:95:d2:39:4c:
43:1d:d9:09:60:19:05:44:2f:aa:cb:cb:83:b3:e8:
e9:84:f2:c8:ef:6b:93:58:ac:27:01:73:dd:39:82:
8f:d1:de:81:0b:82:9f:9e:dd:ce:4c:be:0c:c9:2c:
cb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:23:C6:65:74:99:B9:F6:3E:67:EA:90:55:D6:05:10:49:D4:DC:C7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nSPGZXSZufY-Z-qQVdYFEEnU3Mc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
58:dd:f2:f9:7b:3f:12:ff:a5:9c:06:4f:64:67:dd:1c:3c:23:
eb:c3:5a:80:3e:87:39:21:28:2a:aa:d8:d6:66:87:64:ec:18:
6d:df:b1:d0:5f:11:99:3c:bc:36:f5:4a:c8:d0:94:bd:e3:b4:
9d:35:02:41:87:e5:a1:67:58:9d:cf:49:54:b2:c4:2f:6d:6a:
db:2b:06:15:0b:90:17:0c:be:73:91:22:6e:a7:b6:22:12:4e:
4b:60:ad:12:5a:b4:e8:49:72:30:17:da:04:59:2e:fb:83:a0:
21:0f:c8:c0:ca:bc:8f:36:28:8b:b1:3c:0d:f3:c3:e0:ac:98:
55:23:aa:e0:73:c1:7b:ca:93:d4:0c:ea:09:44:21:d0:9d:2d:
ae:c4:26:6e:3a:d4:cd:4c:b7:f9:cd:fa:33:14:5b:ac:7f:74:
12:dd:d4:09:fc:9b:64:72:e2:3c:bb:4d:be:ff:78:9f:4d:ae:
e6:29:59:0a:12:1e:1d:48:c2:aa:3a:a0:7f:fe:e6:74:62:a1:
38:54:88:37:65:b4:96:e7:e9:aa:40:24:31:2f:40:82:f7:17:
2c:01:54:31:5d:f5:1b:28:c4:b2:16:3e:a1:1c:99:e2:6c:f7:
2b:a4:e2:af:29:6f:80:7e:d6:e5:f2:14:29:70:1f:f9:12:8f:
75:47:60:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:01:46 2025 by rpki-client