Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/upq54jmGZWIn2X9_jcjovm7YOyg.roa
File: upq54jmGZWIn2X9_jcjovm7YOyg.roa (raw, json)
Hash identifier: akBBiUwrkEL0oLOo+LXn2ZImlc7vlhW3Lzpp/7SGZmQ=
Subject key identifier: BA:9A:B9:E2:39:86:65:62:27:D9:7F:7F:8D:C8:E8:BE:6E:D8:3B:28
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 603A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/upq54jmGZWIn2X9_jcjovm7YOyg.roa
Signing time: Wed 14 May 2025 16:40:21 +0000
ROA not before: Wed 14 May 2025 16:40:21 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24634 (0x603a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 16:40:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BA9AB9E23986656227D97F7F8DC8E8BE6ED83B28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:b3:ab:cc:6b:73:6a:31:cc:44:f3:7c:8a:
70:78:a9:dc:67:1c:49:15:76:21:7e:4d:99:2f:39:
51:71:32:a8:4a:e8:b2:32:93:4a:31:4a:ff:19:94:
85:a3:61:7a:65:50:fa:92:1a:58:81:9b:30:03:57:
98:ce:99:29:5d:33:7d:d5:10:c9:82:05:2a:bd:ff:
f0:f2:4b:4f:48:3f:49:f0:46:66:ac:8c:92:c7:9d:
36:f7:ff:6b:d1:cc:9e:48:a6:cc:e5:ae:36:90:ad:
da:fc:63:d5:ac:26:19:de:58:f9:d2:0d:85:54:35:
3c:b4:1c:ee:ed:f7:b6:ae:2b:e9:90:71:22:00:85:
26:58:41:37:87:4e:70:0b:64:6a:0f:29:00:31:0e:
cd:54:92:02:10:67:48:68:2a:3a:04:df:ab:28:2e:
23:7e:98:bc:60:3c:a5:27:8f:ac:fb:e4:1c:fa:07:
0b:08:36:3e:3d:8f:c9:3f:81:43:be:3d:fc:dc:be:
14:5b:09:f5:e5:5b:e8:f8:74:c2:42:d5:48:83:8b:
4e:99:f7:02:09:5f:4d:1b:57:57:50:1f:9f:1b:6c:
be:2a:bc:d5:52:92:6b:56:49:74:25:12:83:65:aa:
99:d6:a3:02:a3:e9:36:eb:aa:11:9a:8d:17:65:03:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9A:B9:E2:39:86:65:62:27:D9:7F:7F:8D:C8:E8:BE:6E:D8:3B:28
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/upq54jmGZWIn2X9_jcjovm7YOyg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
10:03:62:9b:a9:7d:49:99:bd:04:46:81:40:32:0c:6d:64:26:
fb:9c:54:56:14:14:ab:41:58:89:76:43:21:44:5c:52:b3:a0:
8e:2b:ba:76:66:c2:fe:0f:b4:f4:a4:f4:26:66:2c:bd:58:a9:
ef:62:92:57:36:17:3f:76:3c:35:ad:48:25:ae:d3:ec:c0:aa:
56:89:47:0b:8c:4a:e5:a8:d0:a5:87:e5:78:16:97:6d:4a:ec:
84:ff:cb:fd:3d:49:71:dd:2d:75:bf:e0:19:0e:b8:fa:92:87:
82:17:bd:8a:48:c0:21:b5:fd:63:1e:b3:40:aa:77:d2:8a:46:
d7:b7:95:44:51:f3:88:4b:c1:35:e1:a9:a1:d4:3a:ef:ca:ed:
09:39:03:30:55:d2:5c:d9:85:5f:b9:bc:d5:85:69:69:6c:61:
47:62:73:ba:78:10:c0:41:93:9b:ff:f4:b6:71:0b:aa:5f:f7:
c4:3e:ac:75:48:9e:d9:4c:49:4c:43:43:7e:8b:2a:af:cb:ca:
af:0b:cf:b2:6a:08:fc:5e:55:3f:34:5c:6c:82:f1:39:35:63:
29:40:64:cf:00:3b:ff:07:eb:e2:74:1f:7a:8e:9f:1c:89:41:
d6:89:f8:72:07:a5:9e:dc:9a:5f:b6:06:7a:03:bc:dc:46:27:
20:44:33:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:48:21 2025 by rpki-client