Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/rudlDO5QYM5AdB-ye6ib_CYlwnY.roa
File: rudlDO5QYM5AdB-ye6ib_CYlwnY.roa (raw, json)
Hash identifier: EBynf4++i35iQtOj7nMR7/Q1dro8AWwY070gly/9n90=
Subject key identifier: AE:E7:65:0C:EE:50:60:CE:40:74:1F:B2:7B:A8:9B:FC:26:25:C2:76
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 63EC
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rudlDO5QYM5AdB-ye6ib_CYlwnY.roa
Signing time: Sat 24 May 2025 13:10:58 +0000
ROA not before: Sat 24 May 2025 13:10:58 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25580 (0x63ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 24 13:10:58 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=AEE7650CEE5060CE40741FB27BA89BFC2625C276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8b:0f:17:b0:ba:cb:7b:ae:dd:54:bb:6a:1f:
07:af:a5:4a:50:07:65:4d:0a:95:93:7d:f7:9c:2e:
6d:ed:f8:cd:92:c6:86:c3:c3:ca:7f:e2:0f:2d:77:
a1:28:93:3a:0c:24:e5:24:2f:b1:4a:da:35:d6:ea:
4d:b2:89:0c:d4:10:16:1f:58:e2:8a:be:59:4a:86:
f7:06:42:51:fe:71:35:b4:2a:8a:73:72:eb:77:9d:
7b:8d:17:75:97:6e:8b:39:52:c4:ba:59:98:e8:20:
02:42:cc:e0:ac:82:cb:5b:e8:c5:48:72:03:4d:df:
3f:16:f6:f4:9b:28:70:6e:dc:66:73:82:a6:70:1e:
b1:15:2f:df:51:16:9f:de:96:08:eb:6f:af:fd:58:
b7:b3:dc:88:55:da:83:29:7f:a3:3f:3a:b8:ab:d2:
32:17:68:03:1d:b1:ff:84:94:24:a4:f6:bd:44:42:
84:fd:a9:9f:5e:3a:1d:e5:ef:f5:d1:bb:c7:81:4b:
4d:4b:74:1e:f8:df:8b:f0:95:6f:cf:f5:76:27:16:
0c:2f:0c:7d:08:86:98:ca:25:06:0d:ca:09:54:7d:
c0:5c:3d:1e:b0:54:e4:3d:b9:2e:ce:8f:63:d0:b5:
8d:b5:90:06:e0:dd:9a:3f:af:5b:5e:fb:dd:19:ec:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E7:65:0C:EE:50:60:CE:40:74:1F:B2:7B:A8:9B:FC:26:25:C2:76
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rudlDO5QYM5AdB-ye6ib_CYlwnY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
6c:df:3d:6f:8a:8c:5d:c8:00:7e:a1:44:07:30:27:9b:f9:7e:
5c:91:b9:3c:9e:82:76:c5:f2:a9:eb:20:51:b8:35:34:07:ef:
ef:23:21:a1:1b:7e:cf:55:7b:c8:07:17:b6:5b:d7:1e:2d:5e:
3d:a8:ab:3f:1b:34:f8:f4:04:74:73:89:6d:bf:74:dc:b5:46:
44:3d:ae:fd:0e:cb:16:75:28:aa:5d:25:ac:44:82:9c:6b:49:
c4:83:df:f3:20:94:f5:03:b9:62:94:d8:bb:68:94:e9:a4:bf:
9d:47:34:42:28:67:d2:c8:39:05:ff:d6:dd:0a:63:5f:f8:da:
3b:9a:27:5a:a6:9f:6f:8f:77:d8:07:3d:b4:89:4f:fb:f9:84:
7d:03:66:d9:19:d7:3a:5f:7a:ae:c0:fc:ce:27:59:84:9a:1f:
97:e2:4c:b6:6b:e6:6e:76:a3:bf:85:3f:2a:31:04:f8:4b:bb:
66:63:4f:53:d8:29:ee:87:a6:d8:6d:11:dd:00:fb:4d:64:72:
a0:fb:ab:b7:27:67:08:61:92:51:46:76:6a:24:98:cb:fa:08:
9b:59:2d:a7:5e:2f:3a:31:f3:83:1a:81:a4:db:bd:a7:23:0f:
c3:48:12:99:30:1b:c0:5e:cb:b7:a9:ed:6c:b1:32:c6:02:5d:
13:ec:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:54:37 2025 by rpki-client