Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ro15Sy8ADdNTxmnaWZwHTGfQePQ.roa
File: ro15Sy8ADdNTxmnaWZwHTGfQePQ.roa (raw, json)
Hash identifier: M/+5Cax/YQvq42SrWeiPTsO8WnPJXHzjYH2CsPbtb8s=
Subject key identifier: AE:8D:79:4B:2F:00:0D:D3:53:C6:69:DA:59:9C:07:4C:67:D0:78:F4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 63E0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ro15Sy8ADdNTxmnaWZwHTGfQePQ.roa
Signing time: Sat 24 May 2025 10:11:58 +0000
ROA not before: Sat 24 May 2025 10:11:58 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25568 (0x63e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 24 10:11:58 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=AE8D794B2F000DD353C669DA599C074C67D078F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:44:c0:62:f1:80:3f:c6:6d:23:4e:84:65:ba:
be:f6:46:2e:87:57:4d:52:87:a4:a3:bd:39:dd:3b:
eb:7e:7a:f0:b2:bb:bf:7d:03:7e:7a:da:3b:64:4c:
a6:f5:95:01:d8:1d:22:f4:0e:3f:c2:1f:21:09:a2:
60:44:82:3d:f0:98:fe:1f:1e:e3:20:08:b0:86:9f:
fd:99:57:c6:fc:d1:23:05:f5:9d:db:4c:04:56:dd:
51:ea:ce:cf:b5:60:7a:ff:03:60:a9:24:4c:a4:3e:
7f:53:5c:b3:58:8a:c4:22:4b:5c:b2:ca:03:aa:56:
b4:bd:f7:83:5f:9c:4d:2d:6b:0f:6c:84:be:d2:da:
d6:ed:3e:47:2a:15:5b:c7:64:63:af:cd:9b:8b:73:
be:fc:36:b3:2f:03:ff:fd:19:60:1f:53:a5:0f:20:
a8:fa:dc:ac:a3:b2:b2:62:27:8a:c2:eb:81:7c:9d:
1b:32:a9:d1:3b:73:71:c0:75:ff:02:ca:14:e3:58:
aa:8f:ad:a1:f7:48:f9:fe:cf:d9:6d:35:3c:52:06:
2b:7b:16:c4:80:95:99:44:bb:71:c6:f4:da:89:be:
70:6a:ce:bb:4a:3d:da:96:7a:ec:c3:fe:c9:66:e0:
a1:b7:6a:f7:d4:b0:72:7e:ab:9e:98:6f:d8:43:2b:
55:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8D:79:4B:2F:00:0D:D3:53:C6:69:DA:59:9C:07:4C:67:D0:78:F4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ro15Sy8ADdNTxmnaWZwHTGfQePQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
87:2c:55:89:de:52:17:98:71:ed:e4:51:f3:2b:4a:55:aa:d5:
b1:6d:1c:88:43:6d:8e:e5:34:c0:30:1a:9f:c1:1c:ac:1d:b1:
93:94:ca:b3:46:8c:93:6a:39:28:81:08:9b:bf:1b:c2:50:19:
2c:64:23:7a:5c:44:44:3c:c7:ae:c7:27:7a:2f:39:87:86:fb:
99:76:2a:23:e8:7b:3b:7f:3d:e4:e3:3e:ea:61:30:4e:70:16:
0e:5c:3c:15:4c:7f:69:1a:ce:c8:72:6c:fa:6f:52:f6:4b:61:
d3:4a:23:79:16:47:59:15:c9:9a:fc:81:43:08:5e:7c:6c:b5:
c4:3a:f5:3e:90:65:5f:9e:a7:4f:4a:0b:86:ed:cd:ef:2d:df:
a4:02:f9:48:f2:f7:17:fc:ea:1d:89:0f:d1:da:37:4d:c1:5b:
55:41:cc:aa:4e:b5:b3:68:2d:71:45:39:cb:13:79:4f:33:72:
c0:84:a0:37:07:63:50:91:35:a6:e0:09:06:84:cf:22:99:ab:
1c:7c:28:ce:86:21:13:96:85:6c:4b:fa:96:a8:0c:f5:2e:b5:
11:f0:d7:d4:d4:e4:91:b6:5d:a6:a3:5f:75:63:cc:c0:72:ec:
22:62:49:e6:7f:f5:3d:75:42:f1:dd:52:08:78:62:ad:bb:bd:
ba:f9:12:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:19:56 2025 by rpki-client