Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/EDTK1je4Ae0ldoYSt6PNk1cDwU0.roa
File: EDTK1je4Ae0ldoYSt6PNk1cDwU0.roa (raw, json)
Hash identifier: 40qWmU++Yog6ZKlYipK9slvOz66+/yDMcV/liA42tQ0=
Subject key identifier: 10:34:CA:D6:37:B8:01:ED:25:76:86:12:B7:A3:CD:93:57:03:C1:4D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 602C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EDTK1je4Ae0ldoYSt6PNk1cDwU0.roa
Signing time: Wed 14 May 2025 13:10:25 +0000
ROA not before: Wed 14 May 2025 13:10:25 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24620 (0x602c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 13:10:25 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1034CAD637B801ED25768612B7A3CD935703C14D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:94:96:fe:24:3b:d0:14:ce:e3:72:29:56:
78:63:39:29:76:65:56:ca:ae:e2:af:81:d2:39:1d:
24:90:4a:33:6f:ff:3f:c4:95:ff:a7:0b:76:4d:3c:
c5:75:f6:fb:41:9f:97:67:c9:3d:b1:c2:d1:9f:e8:
7e:e6:a2:0c:84:de:e2:41:8d:5e:c8:cb:b5:c7:a7:
17:d2:8e:2b:b6:b3:b7:ee:60:ee:7a:88:cb:a4:d9:
75:da:a2:fb:ae:1f:ae:bf:30:6c:12:6a:3d:18:23:
7c:86:be:fc:87:93:59:95:31:d9:69:a5:c1:08:ae:
92:f6:5e:64:2d:6d:c0:68:51:34:eb:88:f7:e0:36:
6e:87:7a:62:30:69:dc:69:ce:77:58:d6:e2:8f:55:
f8:24:68:04:42:0a:c1:8e:56:9b:4b:4e:c5:f8:39:
72:16:b6:f9:27:68:df:30:b5:fe:f8:27:2b:c7:c5:
32:cb:1d:3c:b9:90:01:3a:0a:51:d2:6e:48:eb:46:
cc:f6:39:a1:0a:da:cd:17:5a:3a:d8:01:97:fa:01:
7a:42:ef:94:45:76:32:00:b6:42:05:56:33:56:af:
39:a1:60:f6:bd:f3:f8:3a:78:d0:63:f3:65:7e:f0:
5d:f8:99:c0:9a:94:2f:85:3d:8c:29:ec:1a:6f:5e:
c4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:34:CA:D6:37:B8:01:ED:25:76:86:12:B7:A3:CD:93:57:03:C1:4D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EDTK1je4Ae0ldoYSt6PNk1cDwU0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
28:58:a7:ad:36:42:20:00:1e:b2:0a:a1:19:df:35:d3:ad:38:
2f:d0:c8:23:fa:57:e7:3b:5d:2b:94:c3:7c:7c:7a:cc:6f:80:
11:97:5e:31:91:9f:d6:2a:07:58:1b:63:5c:af:ba:d0:ec:49:
03:67:21:e7:c9:46:eb:15:df:9b:33:d8:b0:69:6f:f6:54:c2:
ee:64:b3:ef:ed:3f:f1:2d:9f:34:cf:73:d8:ab:f8:b3:7d:50:
39:37:f7:2f:e0:6f:81:c3:b4:2c:dc:37:1a:7c:6c:35:a1:b9:
b4:d7:52:b9:ab:3e:aa:ed:31:4e:56:cc:74:64:ba:e8:2a:c4:
a5:c4:eb:aa:a0:47:67:76:1e:60:59:0b:d5:e3:1b:e8:39:b9:
30:c4:52:16:8c:d2:5d:31:95:88:33:60:34:9c:d4:98:35:58:
c3:bf:9c:b7:4c:20:19:2b:8f:b0:5b:91:d9:17:cb:b4:e1:f3:
f4:3d:b9:f3:a6:57:d1:b1:4d:ba:29:97:9b:6f:5a:e1:33:8e:
69:22:a2:1b:cc:a9:ba:fd:5c:a8:45:8e:82:b4:16:dc:b5:c2:
fb:13:97:77:4a:ec:18:e6:8a:1f:be:55:3c:61:05:2a:ca:cc:
33:01:7a:b6:44:dc:95:b9:8b:95:a0:39:72:b3:85:2a:62:ac:
a0:0d:0e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:46:59 2025 by rpki-client