Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/t1HzCpI7ACkF8Bj4I3APVed-dBI.roa
File: t1HzCpI7ACkF8Bj4I3APVed-dBI.roa (raw, json)
Hash identifier: sbT+CUZ72wEKGjk92DeoOOEDvw5HYZ6/oHFVcXCAwJU=
Subject key identifier: B7:51:F3:0A:92:3B:00:29:05:F0:18:F8:23:70:0F:55:E7:7E:74:12
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6726
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/t1HzCpI7ACkF8Bj4I3APVed-dBI.roa
Signing time: Mon 02 Jun 2025 03:41:35 +0000
ROA not before: Mon 02 Jun 2025 03:41:35 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26406 (0x6726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 2 03:41:35 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B751F30A923B002905F018F823700F55E77E7412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:1f:c2:00:6f:be:67:11:da:d1:4d:87:01:
0d:ea:32:64:69:50:80:e3:b7:d2:b1:0f:49:75:fb:
2a:58:a8:dd:ef:dd:76:4f:59:7b:af:34:6a:05:1a:
b2:af:34:ca:ca:87:3d:17:5c:95:7c:38:9c:14:58:
ad:89:0c:61:e4:8e:67:1d:62:23:60:ec:23:6d:be:
fc:fe:55:13:c5:1f:4a:b9:d1:9d:ea:35:16:8d:55:
89:13:2e:6c:95:67:d1:a2:33:89:7f:2d:96:41:a0:
42:d8:02:4e:d9:32:7e:ab:9a:8a:34:e6:16:41:c3:
37:d3:8a:94:f9:34:72:ce:ee:36:4f:0f:bc:9f:ef:
a6:6e:1c:0f:30:fc:f9:73:b0:cc:c0:81:6b:25:8d:
3e:c4:bc:df:98:03:e4:28:ac:eb:a6:8d:52:74:59:
e9:b1:93:4c:e2:bc:43:bb:0b:11:0f:82:fe:22:ff:
cf:da:df:90:81:78:72:3e:d0:0c:8b:0f:cf:62:df:
f9:29:da:0a:5c:8a:58:f0:09:66:d5:3c:52:ab:cd:
94:71:4e:25:1f:09:88:ee:74:fd:76:bb:4c:41:d0:
14:0c:1d:a9:a2:65:a0:48:0e:68:38:fe:83:ce:76:
b5:18:37:b2:c7:17:17:4a:87:1b:23:7d:27:e0:93:
2f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:51:F3:0A:92:3B:00:29:05:F0:18:F8:23:70:0F:55:E7:7E:74:12
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/t1HzCpI7ACkF8Bj4I3APVed-dBI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
9b:21:4e:90:d3:04:19:58:c1:d7:96:22:77:69:e8:82:48:af:
76:29:32:bf:e7:4e:ff:4e:67:5a:b2:ae:02:4a:d6:cb:ab:42:
fb:ec:6e:4f:8d:e0:cc:f0:49:14:96:f0:76:6c:5d:72:dc:b5:
5b:d6:68:8e:ab:7a:72:b9:fe:5b:85:33:29:84:41:85:a5:a1:
5d:fb:3b:a3:8a:8b:77:b1:4f:92:32:43:b0:00:ab:f6:fa:07:
c9:40:bc:2d:97:00:5e:00:82:06:00:dd:7d:07:31:85:f3:2b:
e6:ad:75:20:98:d6:77:cd:3a:aa:9d:ac:fa:1c:85:7c:ef:3d:
e1:20:de:df:95:c9:11:ae:d8:f7:fa:b2:1b:4b:66:bd:46:c6:
d2:e1:9d:83:b5:37:2f:a4:d1:86:ab:4e:ae:82:c0:b3:73:0b:
7f:2a:c4:0e:11:99:49:c6:9f:ee:f6:a5:93:2a:6c:a6:1e:a7:
c4:81:1d:bc:52:3a:65:38:08:86:f5:98:75:e0:4c:16:5e:d7:
b3:2d:ef:22:e1:24:7f:33:ec:56:1e:43:29:7b:1d:6d:37:67:
b5:52:5a:ad:ac:6b:e8:4b:b5:0e:90:33:f6:bb:62:48:47:c9:
ca:4d:17:09:97:5b:54:0a:bd:17:24:1d:8a:78:80:b1:25:8d:
01:81:7c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:58:42 2025 by rpki-client