Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/S8k9PiQQfX4pGdZ3vCQc8Kx3G6I.roa
File: S8k9PiQQfX4pGdZ3vCQc8Kx3G6I.roa (raw, json)
Hash identifier: U0eDChCQOiousTE3KapYoV736YuqG8Eqol2uOWGx9XQ=
Subject key identifier: 4B:C9:3D:3E:24:10:7D:7E:29:19:D6:77:BC:24:1C:F0:AC:77:1B:A2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7F9D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/S8k9PiQQfX4pGdZ3vCQc8Kx3G6I.roa
Signing time: Wed 06 Aug 2025 07:33:17 +0000
ROA not before: Wed 06 Aug 2025 07:33:17 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.246.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32669 (0x7f9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Aug 6 07:33:17 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4BC93D3E24107D7E2919D677BC241CF0AC771BA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:30:c2:b6:6b:df:4a:19:7d:bf:40:dc:44:
26:d9:f8:6c:5a:1f:c6:1f:62:6f:54:86:da:6b:f0:
c7:bc:f9:26:b8:88:59:2e:d1:94:09:69:30:52:3b:
bc:a6:fd:6d:04:26:ae:ac:cd:66:bb:38:ec:c3:ba:
dc:f0:6b:4b:9f:7a:20:0c:03:8b:89:b1:29:94:9a:
e0:34:d3:35:80:72:bb:9e:2a:dc:38:9f:27:b2:49:
9e:c4:8b:c2:5b:12:9a:70:64:4f:f2:2d:0f:16:c2:
3d:7b:06:7c:5b:2d:01:38:3c:c6:04:da:70:d8:c1:
6d:9e:2f:29:fe:43:43:2b:dd:9b:78:76:05:33:9d:
0d:36:60:92:58:e4:e2:84:a0:20:8c:6e:e9:28:44:
cc:aa:e3:4c:bf:97:d3:d2:59:71:c4:de:3a:19:b2:
35:56:4f:30:9c:a4:84:96:a5:93:d6:e2:03:87:e6:
61:f1:db:e3:7c:09:00:18:70:4b:da:71:7e:1e:26:
d7:39:86:ce:de:0c:ad:5e:c1:5b:cd:3c:3d:d8:31:
92:60:4f:97:6c:5e:26:d6:2f:7e:4c:9c:29:15:91:
aa:5c:b5:74:93:6a:03:a9:51:54:6a:e8:72:f4:ef:
e7:6b:5f:4f:d2:82:da:c8:13:0a:1c:c6:c8:81:ee:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C9:3D:3E:24:10:7D:7E:29:19:D6:77:BC:24:1C:F0:AC:77:1B:A2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/S8k9PiQQfX4pGdZ3vCQc8Kx3G6I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.246.88.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:0a:9f:f8:19:79:6d:67:43:73:76:00:b5:32:32:b7:31:79:
3a:8b:2d:8c:72:74:9a:46:c0:1f:68:1b:ca:95:25:73:1b:11:
eb:c0:31:0a:8d:a1:10:cb:4f:fe:9d:17:24:6c:b3:f4:c3:ae:
8b:d6:c4:c4:e0:7e:cf:e6:63:e2:51:85:f0:54:d7:58:a5:96:
34:50:d4:8e:3c:e6:f2:71:b8:3c:76:3a:2a:5f:ef:b6:25:79:
f0:24:f8:16:77:12:03:29:0a:68:89:06:78:e6:66:28:e7:5e:
af:dc:2e:b9:30:6b:20:ca:0b:8e:27:1d:1d:21:e7:c9:ec:c5:
7a:8f:b0:74:a4:aa:8e:22:48:cf:94:e7:48:62:f9:e1:43:45:
81:1b:5e:ab:e9:89:78:94:fd:49:10:8f:e1:e9:7a:70:40:6b:
8e:3c:e5:fb:e1:cd:af:f3:8c:8c:df:7d:ef:2a:ce:f9:14:39:
52:d4:49:b6:33:bd:52:d7:d6:9e:ca:60:85:88:a1:a7:1a:35:
ea:93:ab:48:d3:21:62:98:23:fa:9f:37:de:77:13:ef:17:b1:
19:d3:08:7c:3b:a6:86:ea:25:15:9d:b7:8d:c1:98:78:62:4b:
a8:35:62:52:86:88:8d:3c:29:d2:0d:9e:08:ac:88:97:f7:e3:
e1:63:9b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:05:00 2025 by rpki-client