Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/rq45mCuzGvywOwMDCmJdUXFTWSY.roa
File: rq45mCuzGvywOwMDCmJdUXFTWSY.roa (raw, json)
Hash identifier: AEuD9GUKepqhm8NKsnzsuTDKosA9ob9KapJxQn12W8w=
Subject key identifier: AE:AE:39:98:2B:B3:1A:FC:B0:3B:03:03:0A:62:5D:51:71:53:59:26
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 767A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rq45mCuzGvywOwMDCmJdUXFTWSY.roa
Signing time: Sun 13 Jul 2025 06:41:40 +0000
ROA not before: Sun 13 Jul 2025 06:41:40 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30330 (0x767a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 13 06:41:40 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=AEAE39982BB31AFCB03B03030A625D5171535926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a2:20:6d:6e:fa:44:3e:62:96:b1:55:26:ad:
f7:b3:48:90:68:9e:d6:98:77:ff:13:8d:06:0d:9e:
46:28:e2:dc:e1:cd:1f:56:c4:a5:cc:da:7c:d7:3d:
f7:d7:ce:73:4c:5f:28:50:a3:cd:ea:57:e7:43:d3:
37:fa:38:2b:fc:b1:9a:df:fe:e4:e8:7b:39:0d:8d:
fd:e6:d4:64:ff:2e:23:dd:28:aa:fc:40:f9:39:56:
08:ec:a2:ef:6c:75:c4:39:32:f3:97:e3:7d:37:7b:
6d:e1:a8:5c:3c:f5:5f:99:59:c3:a0:97:24:a6:11:
89:36:6d:1e:29:02:cb:3f:84:99:b8:17:7f:69:68:
ce:52:15:dc:1d:bf:ef:b1:87:00:e4:7e:2f:7b:bb:
ff:c0:39:f2:8f:1f:bb:2b:2f:03:31:76:84:94:38:
52:d6:9b:3e:77:67:be:16:4d:cb:dc:c3:55:c0:9e:
1f:26:b3:f4:d0:2c:d9:a7:78:fb:58:22:9d:33:81:
8d:7a:58:69:2f:43:9a:e0:38:5d:f2:b2:7b:4e:36:
88:57:9d:47:30:50:f9:f8:5f:7e:51:73:f6:c6:d4:
50:ac:b8:38:02:3c:4f:32:de:e4:c9:45:c2:75:0a:
8d:bf:23:4b:a6:14:3d:a8:d7:b2:6d:22:31:d5:c8:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AE:39:98:2B:B3:1A:FC:B0:3B:03:03:0A:62:5D:51:71:53:59:26
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rq45mCuzGvywOwMDCmJdUXFTWSY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
90:a3:9f:9f:8b:31:18:18:28:e5:bd:4f:0f:77:73:26:5a:ad:
0a:5f:15:48:38:04:04:98:b8:20:dc:f3:f2:12:e2:b3:de:e1:
c6:a9:9d:f1:4f:8d:30:ca:06:7f:3c:da:09:68:52:5a:6f:05:
3c:19:9c:f3:06:f2:cf:06:51:7b:cd:c7:a9:6c:45:38:5c:f0:
af:71:7f:2d:9f:10:ee:b0:5d:82:e9:47:73:b2:3d:7e:d3:c3:
9e:91:1e:46:07:43:03:c9:33:f7:8b:1d:56:f7:c2:33:7f:57:
27:ca:6b:bf:c8:3e:11:60:d6:e7:65:eb:05:d4:60:5d:e4:2d:
5a:5f:1a:bb:46:44:7a:78:7b:f0:6f:76:10:6e:bf:f4:90:6c:
b9:f6:41:c0:15:af:93:c3:9f:92:eb:b7:84:40:e4:83:cb:d2:
ba:e7:25:ac:8f:60:1d:7a:e5:90:14:04:c7:8f:a0:44:97:56:
38:b6:39:79:df:96:81:9c:ac:9f:fc:45:45:86:3f:3b:48:b5:
97:8a:cf:01:2c:e4:6b:96:0a:c6:32:61:83:ec:1f:12:2a:7c:
7c:eb:15:cb:04:fb:b5:97:23:61:00:6f:a8:22:98:20:e7:6c:
94:3b:6e:de:eb:f7:03:10:37:8b:3f:8d:88:4a:a5:0b:58:ed:
ca:8f:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:04:57 2025 by rpki-client