Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1mE0W7KUFSDqs54g8lRMJF7dC_I.roa
File: 1mE0W7KUFSDqs54g8lRMJF7dC_I.roa (raw, json)
Hash identifier: CTNqDWNY1pOy9ig1RpY5WZRWcDd7S8MLpwN+LZ9tVj8=
Subject key identifier: D6:61:34:5B:B2:94:15:20:EA:B3:9E:20:F2:54:4C:24:5E:DD:0B:F2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6100
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1mE0W7KUFSDqs54g8lRMJF7dC_I.roa
Signing time: Fri 16 May 2025 18:10:34 +0000
ROA not before: Fri 16 May 2025 18:10:34 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24832 (0x6100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 16 18:10:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D661345BB2941520EAB39E20F2544C245EDD0BF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:0c:59:58:a0:1c:8e:62:42:0c:67:d7:7e:
33:e1:9b:f3:e4:af:bc:be:d4:1f:60:1c:d4:8d:9b:
bb:f2:41:c7:fd:03:df:ec:56:bd:c6:e0:a3:e9:1a:
61:02:f6:b4:46:b5:01:a3:d3:e0:89:4c:98:99:54:
93:ee:be:b5:cb:ab:db:1c:ed:24:f9:d6:32:f2:c5:
00:7e:c1:c8:91:97:14:27:33:5b:c1:79:7e:33:bc:
f4:7d:76:78:b2:ea:05:c4:78:0f:99:8b:02:0e:98:
71:23:ca:dd:5d:36:46:4a:a5:fd:b9:c8:bb:2e:2d:
6e:15:07:a7:9c:80:2e:c8:e6:d4:84:67:85:ae:cd:
29:9f:26:91:44:d2:d5:66:b3:5d:4b:76:3b:86:37:
b6:c1:ba:cc:2e:50:82:d4:8f:fc:ae:41:66:06:49:
f4:32:f5:5a:28:f0:48:ff:a8:11:e6:17:68:f1:33:
20:fb:7a:5d:1c:7e:19:00:00:89:7c:dc:59:97:27:
2c:06:db:a3:a0:73:24:47:2a:eb:bb:88:c9:ae:8b:
92:dc:ed:f5:e1:b2:e2:f2:f3:35:c3:f6:4e:b3:36:
8b:4b:d8:ba:c5:66:5b:72:5f:a3:a3:c7:ea:8b:a8:
e1:90:30:20:f9:5b:17:89:76:97:d6:d9:4a:4d:a2:
db:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:61:34:5B:B2:94:15:20:EA:B3:9E:20:F2:54:4C:24:5E:DD:0B:F2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1mE0W7KUFSDqs54g8lRMJF7dC_I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
41:ce:71:b3:49:26:ed:62:9d:ca:2b:70:9a:83:80:f4:1a:5b:
b4:10:67:18:8b:f9:22:7e:13:78:b9:31:3a:21:3e:bd:d5:0c:
c1:5b:95:bb:9d:a1:98:8e:c8:08:49:d8:c9:54:79:ad:1e:3a:
48:db:7a:d0:bf:66:db:89:8d:ac:8f:75:2b:a7:36:97:62:e7:
8e:75:43:a1:0f:c2:0f:69:0d:f2:83:10:b6:dd:ea:f2:f4:88:
38:38:18:bd:61:4c:cd:39:46:e1:fc:ba:a9:4f:b5:d1:5e:7c:
ff:ce:99:3c:3e:94:4c:1c:9b:83:49:1a:3e:8d:ac:86:d5:f2:
3d:0b:7f:a9:f8:ec:1d:07:0a:dd:ef:38:8e:fc:c5:1b:43:59:
b3:2c:73:45:50:eb:b3:3b:9a:bb:15:4d:49:ac:83:40:97:3d:
7b:52:ee:ab:a4:4d:df:e4:bf:a2:bd:99:f3:4b:08:89:8c:61:
e7:99:4c:9a:17:4b:09:39:bd:50:3b:79:dc:7b:14:df:f8:55:
d4:5a:a1:b4:42:b2:1f:a3:29:e5:6f:2b:19:2a:c0:ab:31:ed:
16:42:61:05:0c:13:f0:5d:2c:fc:22:df:a4:2e:28:44:86:e7:
89:75:1c:86:1e:6a:89:6e:3a:84:19:b8:82:21:08:a4:e8:53:
77:0d:49:ab
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICYQAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MTYx
ODEwMzRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQ2NjEzNDVCQjI5NDE1
MjBFQUIzOUUyMEYyNTQ0QzI0NUVERDBCRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMKgxZWKAcjmJCDGfXfjPhm/Pkr7y+1B9gHNSNm7vyQcf9A9/s
Vr3G4KPpGmEC9rRGtQGj0+CJTJiZVJPuvrXLq9sc7ST51jLyxQB+wciRlxQnM1vB
eX4zvPR9dniy6gXEeA+ZiwIOmHEjyt1dNkZKpf25yLsuLW4VB6ecgC7I5tSEZ4Wu
zSmfJpFE0tVms11LdjuGN7bBuswuUILUj/yuQWYGSfQy9Voo8Ej/qBHmF2jxMyD7
el0cfhkAAIl83FmXJywG26OgcyRHKuu7iMmui5Lc7fXhsuLy8zXD9k6zNotL2LrF
ZltyX6Ojx+qLqOGQMCD5WxeJdpfW2UpNottXAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQU1mE0W7KUFSDqs54g8lRMJF7dC/IwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzFtRTBXN0tVRlNEcXM1
NGc4bFJNSkY3ZENfSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBBznGz
SSbtYp3KK3Cag4D0Glu0EGcYi/kifhN4uTE6IT691QzBW5W7naGYjsgISdjJVHmt
HjpI23rQv2bbiY2sj3UrpzaXYueOdUOhD8IPaQ3ygxC23ery9Ig4OBi9YUzNOUbh
/LqpT7XRXnz/zpk8PpRMHJuDSRo+jayG1fI9C3+p+OwdBwrd7ziO/MUbQ1mzLHNF
UOuzO5q7FU1JrINAlz17Uu6rpE3f5L+ivZnzSwiJjGHnmUyaF0sJOb1QO3ncexTf
+FXUWqG0QrIfoynlbysZKsCrMe0WQmEFDBPwXSz8It+kLihEhueJdRyGHmqJbjqE
GbiCIQik6FN3DUmr
-----END CERTIFICATE-----
Generated at Sun May 18 05:56:39 2025 by rpki-client