Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-Dc_Pc9JTcS3Rj5tiW8gjcGSGeo.roa
File: -Dc_Pc9JTcS3Rj5tiW8gjcGSGeo.roa (raw, json)
Hash identifier: XqxALZvQmn9RNJGjDqS9uaXjuyZjWcE26dNT3R7RCtU=
Subject key identifier: F8:37:3F:3D:CF:49:4D:C4:B7:46:3E:6D:89:6F:20:8D:C1:92:19:EA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5FC2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-Dc_Pc9JTcS3Rj5tiW8gjcGSGeo.roa
Signing time: Tue 13 May 2025 10:40:14 +0000
ROA not before: Tue 13 May 2025 10:40:14 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24514 (0x5fc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 10:40:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F8373F3DCF494DC4B7463E6D896F208DC19219EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:0c:1c:5e:bf:e5:1e:e2:a1:9b:09:6e:b8:
09:dd:81:1f:79:26:78:35:95:e8:ad:2f:6c:6e:69:
a6:53:9f:62:a0:8b:26:61:90:ea:b6:f7:59:bf:14:
46:cb:0f:27:f1:a4:be:ae:e0:b4:98:e2:65:55:c1:
f6:52:ed:52:a4:88:b7:17:4c:e3:7c:2c:0e:5e:5d:
1f:1b:dd:9a:ad:e9:3b:6d:88:16:c4:25:fa:b1:ef:
ed:92:5c:04:ad:4e:c4:dc:28:fc:23:79:ed:60:16:
7c:5b:e7:9b:a3:3f:81:bc:a0:47:c1:d9:cc:2f:c5:
02:ac:54:f7:33:46:fb:86:91:68:6b:18:d2:2e:69:
75:eb:2d:6c:3f:a9:57:82:40:83:fd:f8:b8:42:57:
e9:c0:fe:35:62:f6:08:85:6a:02:87:87:04:35:61:
30:a5:1d:2b:1d:c1:b8:a7:0c:b1:6c:95:a1:16:f3:
6c:79:36:f8:ba:03:06:fd:33:b6:f5:70:7b:1b:fa:
c2:d6:32:3f:11:9d:22:63:f2:33:db:9b:76:6e:dd:
83:54:ca:2f:a9:32:e1:eb:83:d6:ee:47:42:80:41:
fd:48:55:93:33:2d:da:6b:b7:b0:d2:d2:88:aa:85:
c2:5b:ee:2d:71:34:a4:52:9a:41:e9:56:92:72:ed:
ee:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:37:3F:3D:CF:49:4D:C4:B7:46:3E:6D:89:6F:20:8D:C1:92:19:EA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-Dc_Pc9JTcS3Rj5tiW8gjcGSGeo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a7:74:52:02:26:7c:9f:d6:06:92:29:33:3f:0e:b6:7e:f8:56:
b6:35:c0:24:a2:89:89:0d:83:e1:c8:35:17:d4:6c:d0:25:a9:
3b:59:42:72:a7:da:62:2b:64:19:1c:ab:49:c4:f8:3b:47:5b:
19:75:88:de:a6:64:04:54:bb:c0:6f:35:8c:35:a3:55:99:55:
56:ac:bd:f4:fb:ea:3a:43:49:0c:56:40:06:67:71:3b:1a:03:
da:38:4b:4e:52:6f:71:fc:b1:cb:d0:f5:cb:2f:a8:aa:e8:f6:
d3:49:4f:80:31:b8:e9:02:29:95:3b:72:d7:b0:6b:12:38:d0:
d1:9e:b0:de:83:0b:79:df:cd:46:9d:c9:6f:11:d5:58:10:82:
0d:88:c5:29:c8:e6:9a:6a:68:c4:db:aa:91:55:e4:63:e8:98:
75:e6:92:f7:f0:4a:5c:82:c9:ee:41:ba:b2:38:a7:de:49:37:
81:c7:2c:7c:d6:4b:c5:cd:58:00:e4:cf:fd:dd:0b:52:54:81:
65:be:26:53:84:f0:1a:67:03:d7:3c:c8:c6:e8:1c:1c:4d:1c:
07:84:f5:db:cb:25:04:6a:3f:05:d9:68:8f:b9:c7:b3:1c:7d:
54:76:e9:ef:41:49:e5:32:9d:2d:e3:61:0f:de:23:62:18:40:
78:e1:04:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:14:45 2025 by rpki-client