Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yLfAvGA4pEM4DU1J2i2nYt7VOKo.roa
File: yLfAvGA4pEM4DU1J2i2nYt7VOKo.roa (raw, json)
Hash identifier: OvN0YhI96pzPCBjmOBy9inC5Km+jlhgweyyoBmFP1e0=
Subject key identifier: C8:B7:C0:BC:60:38:A4:43:38:0D:4D:49:DA:2D:A7:62:DE:D5:38:AA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6508
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yLfAvGA4pEM4DU1J2i2nYt7VOKo.roa
Signing time: Tue 27 May 2025 12:12:31 +0000
ROA not before: Tue 27 May 2025 12:12:31 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25864 (0x6508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 27 12:12:31 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C8B7C0BC6038A443380D4D49DA2DA762DED538AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:b2:ac:9b:43:44:ae:83:2e:99:5e:29:bc:
b6:08:b7:5b:3b:4e:9e:f8:50:65:9d:4d:c0:fc:00:
ce:46:ef:a3:3c:29:1b:99:a0:30:5d:14:4d:a1:5e:
5c:9e:9d:23:07:0a:8a:a7:fb:b3:43:8d:fd:e4:e0:
5b:e1:e5:a0:d4:d3:48:2c:5e:2c:29:19:09:7b:53:
4e:6c:c1:e5:b3:90:e2:b5:c8:b0:4d:80:5c:22:38:
d6:18:4b:ad:aa:c8:1c:05:82:cf:fe:3f:28:cf:fe:
89:c2:09:ff:e7:fe:96:b0:94:ec:6c:2e:af:68:4c:
e1:91:9b:94:c9:87:5d:d2:70:df:5b:b2:fa:9d:18:
b8:89:cc:8b:b8:52:a4:f4:63:74:aa:4d:60:f9:db:
e8:1a:76:f8:46:a8:d0:af:6c:82:14:b4:ee:fe:a8:
87:b6:f5:aa:80:06:b6:42:9f:63:89:d6:02:e8:ac:
6c:6a:be:d7:1a:03:b2:80:d2:9e:86:31:20:71:26:
3e:b5:4c:91:87:40:32:4b:d6:b0:11:a1:25:3f:7a:
b8:00:38:e4:c1:16:95:89:7f:8a:db:74:f5:35:c1:
9e:43:22:ed:e2:63:d4:a8:51:1b:63:4e:17:94:01:
a4:4c:25:b2:16:95:ed:31:69:77:a9:0c:32:5d:27:
70:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B7:C0:BC:60:38:A4:43:38:0D:4D:49:DA:2D:A7:62:DE:D5:38:AA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yLfAvGA4pEM4DU1J2i2nYt7VOKo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
ba:72:c4:67:f7:ba:fd:85:61:59:81:24:eb:18:55:25:44:ce:
1c:e8:ec:dc:6c:53:b1:c9:61:16:ee:f3:00:1a:7c:1e:33:f5:
82:80:4c:fd:41:1e:ec:aa:9d:fd:60:ac:71:76:9e:b8:f6:8d:
cf:77:0b:02:93:a7:1a:49:86:72:5c:27:e7:a8:9f:10:3f:05:
a1:d0:62:44:bb:c7:24:c6:84:93:66:a5:f3:dc:fc:76:64:77:
ef:68:da:b4:d7:8c:e9:b0:c6:0e:ec:d8:c2:ef:ee:96:57:09:
a5:fd:c8:6e:30:28:63:e9:70:e0:c7:c3:54:81:74:9c:9c:3c:
d1:c4:5f:a6:81:47:4d:bd:84:37:94:c2:08:0b:03:db:96:06:
00:d9:33:34:da:e5:1f:ba:21:e3:4c:02:96:50:00:1f:e5:24:
26:d8:e9:fc:f0:22:84:ef:85:ad:2d:14:b9:4e:6d:39:59:57:
a8:6a:e8:72:12:3b:cf:71:67:62:1a:fd:9f:ac:e0:6d:0e:ed:
a9:84:ed:b0:f0:e6:cd:26:20:cb:15:c2:0b:69:27:cf:75:59:
b1:14:48:03:72:77:cc:b8:02:6e:77:89:48:ae:0e:96:a1:a0:
79:d6:4e:f8:dc:b5:58:77:ed:e4:41:81:cf:f7:5a:0b:10:35:
5d:4e:60:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:04:40 2025 by rpki-client