Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oKf3VWtHPejIFq-ZGWEEfbdp3yA.roa
File: oKf3VWtHPejIFq-ZGWEEfbdp3yA.roa (raw, json)
Hash identifier: Z0OAp54UoAHf0lxt4n8EetJ4ULQc4SD7DWmKWvBg8rk=
Subject key identifier: A0:A7:F7:55:6B:47:3D:E8:C8:16:AF:99:19:61:04:7D:B7:69:DF:20
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 64F2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oKf3VWtHPejIFq-ZGWEEfbdp3yA.roa
Signing time: Tue 27 May 2025 06:41:13 +0000
ROA not before: Tue 27 May 2025 06:41:13 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25842 (0x64f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 27 06:41:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A0A7F7556B473DE8C816AF991961047DB769DF20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:94:29:78:01:ef:28:b0:89:7c:95:23:d7:9a:
12:12:9b:ee:bd:df:1b:bf:71:f8:a5:2a:13:c3:95:
d7:c3:1b:ce:ec:4b:3b:b5:a8:1e:3e:fa:da:fc:3b:
ba:3e:49:fe:c9:0b:99:51:d3:fc:4b:fd:8a:62:90:
a2:39:7a:90:7f:c0:27:71:d8:6c:a5:d4:17:78:ec:
8b:03:2f:ac:0c:20:51:04:21:9d:3a:75:1d:33:a9:
3d:20:fb:4b:67:c2:e5:f7:46:ec:6c:e3:89:fe:ee:
2e:e5:ff:c1:c4:43:65:64:37:e2:05:48:a2:05:94:
5b:eb:74:de:f3:83:8e:a2:3a:ec:94:d3:06:ea:ce:
1b:a2:3c:38:ae:35:76:bf:76:64:dc:2b:22:2d:86:
ad:8a:dd:4a:94:e3:b7:de:b7:a1:4d:40:b0:76:6e:
3d:70:43:b3:9d:e9:93:6e:b3:ee:61:10:5e:53:ea:
55:6e:72:fc:3f:ad:ad:66:00:9b:ae:4c:57:ae:e4:
23:c5:d7:0d:53:1e:b5:dc:bd:93:23:a9:67:28:a9:
ab:08:ec:be:07:1e:f5:df:88:c2:23:c0:33:85:1f:
59:ac:bf:4d:5f:77:f4:34:13:d9:0a:f0:15:cf:75:
81:e2:13:34:30:0a:09:97:88:09:4f:b6:fe:87:e7:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A7:F7:55:6B:47:3D:E8:C8:16:AF:99:19:61:04:7D:B7:69:DF:20
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oKf3VWtHPejIFq-ZGWEEfbdp3yA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
76:20:c6:e0:49:70:76:f7:2a:26:87:71:92:fa:93:0f:2d:6f:
7a:bc:b2:f7:d1:5a:4e:a6:c8:2f:78:5d:0e:06:34:6f:de:ea:
36:92:57:dd:55:a9:2f:18:9c:0b:b7:a2:f1:7d:18:99:30:ce:
dd:6f:78:71:c0:bf:45:92:aa:18:15:e3:d0:1e:1e:2d:04:cf:
e7:f9:8f:13:7a:c3:f0:30:55:04:f0:5f:3f:b9:d5:62:db:59:
d8:ae:4a:0f:43:67:e2:81:af:cb:38:6e:cf:dd:ef:0d:b0:30:
09:a8:90:43:98:8f:72:f1:14:46:13:42:19:6e:44:e5:cd:72:
4d:3c:19:f3:dd:83:3c:ef:89:f2:be:db:39:ce:3a:16:9d:42:
60:99:2b:e3:be:56:93:fd:3b:13:73:dd:9b:71:00:22:3a:80:
f4:77:0a:bb:8a:a4:2e:01:97:a6:18:f1:8b:e0:93:8a:b0:c1:
8f:8c:a2:49:31:04:d3:5f:f5:db:91:fb:b0:bb:db:73:cf:35:
e5:04:6b:7d:da:47:b4:48:05:b7:9e:ca:47:a9:42:ab:4b:22:
5a:fa:75:43:f1:be:04:3d:54:e3:09:05:88:cd:6b:65:9a:3b:
2a:a1:6b:2d:31:47:c7:f8:5f:54:eb:86:b5:a9:98:f8:b8:8f:
f5:25:bc:d2
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICZPIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1Mjcw
NjQxMTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEEwQTdGNzU1NkI0NzNE
RThDODE2QUY5OTE5NjEwNDdEQjc2OURGMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQlCl4Ae8osIl8lSPXmhISm+693xu/cfilKhPDldfDG87sSzu1
qB4++tr8O7o+Sf7JC5lR0/xL/YpikKI5epB/wCdx2Gyl1Bd47IsDL6wMIFEEIZ06
dR0zqT0g+0tnwuX3Ruxs44n+7i7l/8HEQ2VkN+IFSKIFlFvrdN7zg46iOuyU0wbq
zhuiPDiuNXa/dmTcKyIthq2K3UqU47fet6FNQLB2bj1wQ7Od6ZNus+5hEF5T6lVu
cvw/ra1mAJuuTFeu5CPF1w1THrXcvZMjqWcoqasI7L4HHvXfiMIjwDOFH1msv01f
d/Q0E9kK8BXPdYHiEzQwCgmXiAlPtv6H5zQ1AgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUoKf3VWtHPejIFq+ZGWEEfbdp3yAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L29LZjNWV3RIUGVqSUZx
LVpHV0VFZmJkcDN5QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQB2IMbg
SXB29yomh3GS+pMPLW96vLL30VpOpsgveF0OBjRv3uo2klfdVakvGJwLt6LxfRiZ
MM7db3hxwL9FkqoYFePQHh4tBM/n+Y8TesPwMFUE8F8/udVi21nYrkoPQ2figa/L
OG7P3e8NsDAJqJBDmI9y8RRGE0IZbkTlzXJNPBnz3YM874nyvts5zjoWnUJgmSvj
vlaT/TsTc92bcQAiOoD0dwq7iqQuAZemGPGL4JOKsMGPjKJJMQTTX/Xbkfuwu9tz
zzXlBGt92ke0SAW3nspHqUKrSyJa+nVD8b4EPVTjCQWIzWtlmjsqoWstMUfH+F9U
64a1qZj4uI/1JbzS
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:17:48 2025 by rpki-client