Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/v82sXzqXWGvwyp9VVLxRJ9s9LtE.roa
File: v82sXzqXWGvwyp9VVLxRJ9s9LtE.roa (raw, json)
Hash identifier: WfzNegS9Vgl+HLnGVbWlfgg/zP77dXzGyIcTJz3Kyro=
Subject key identifier: BF:CD:AC:5F:3A:97:58:6B:F0:CA:9F:55:54:BC:51:27:DB:3D:2E:D1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5F86
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/v82sXzqXWGvwyp9VVLxRJ9s9LtE.roa
Signing time: Mon 12 May 2025 19:41:21 +0000
ROA not before: Mon 12 May 2025 19:41:21 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24454 (0x5f86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 19:41:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BFCDAC5F3A97586BF0CA9F5554BC5127DB3D2ED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:e1:9c:55:c6:ef:3f:0f:56:1b:76:71:ff:
79:48:a0:e6:cb:79:95:8c:87:3e:2c:7c:88:ec:18:
0f:63:d1:cc:a5:10:7c:1f:b0:35:53:03:38:7a:cf:
66:1f:4d:6d:0d:c6:22:20:cb:4a:ed:99:ce:1a:90:
aa:62:c1:f0:1f:e4:c5:e1:fd:11:a2:b4:88:8e:f6:
17:36:3f:c8:08:13:b4:d6:1e:6b:c6:8d:82:44:57:
42:2f:7f:68:9a:82:b7:e7:98:9c:43:5e:39:22:fe:
ea:9a:59:a9:6e:1f:2a:aa:bb:07:b0:05:99:c6:87:
a6:29:ac:c1:42:c8:14:66:46:02:d8:1c:5b:b5:aa:
ce:7e:9f:86:90:b3:e9:ac:9e:a2:a0:31:45:ae:ed:
ee:ca:76:0e:87:1b:8b:2f:77:de:87:86:a9:b7:cc:
ec:72:0b:c4:a5:19:5e:e9:02:6b:ae:1f:31:36:30:
cb:88:2f:c8:5b:90:c8:80:a3:76:da:ab:c7:96:61:
71:23:41:80:07:de:b4:3d:fa:33:0f:27:f6:3b:2c:
31:eb:3d:c7:3a:f7:84:8f:8e:ef:68:8b:2f:17:98:
0f:38:2e:42:81:22:8f:13:84:a5:02:12:47:d8:63:
44:c7:0e:ca:29:79:e6:ed:db:ca:31:00:7b:b8:39:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CD:AC:5F:3A:97:58:6B:F0:CA:9F:55:54:BC:51:27:DB:3D:2E:D1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/v82sXzqXWGvwyp9VVLxRJ9s9LtE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
29:6d:e5:91:e4:94:13:21:6e:cf:0e:b2:70:ec:34:5a:ac:25:
e0:27:d4:b6:45:51:77:93:bb:4b:0f:cc:fd:b6:4e:76:8c:5a:
41:c2:b4:0f:a8:cb:cb:ff:37:b4:8a:24:00:fe:e4:dc:f1:ee:
31:26:4e:ff:8f:2c:d1:b2:33:e0:3a:4c:4c:07:37:bf:86:b7:
8e:6c:b1:c1:c8:36:12:df:d6:a6:13:d7:20:91:b9:d2:3f:9f:
e9:84:70:bb:90:bb:a8:63:b1:7f:f3:1b:a6:ed:f7:79:85:59:
83:6d:25:79:59:3c:05:eb:54:bd:69:d0:ef:3b:09:47:9b:b1:
b9:7c:fb:06:9a:97:cd:e8:9c:3d:1e:31:e1:75:5f:66:63:1d:
00:1b:f5:71:94:87:dd:f7:77:fe:54:16:4b:6e:1d:40:a6:fd:
db:20:98:f3:37:bb:0b:9d:ba:17:28:ec:a6:3b:f8:cd:81:8b:
b2:72:c2:7e:97:fa:d4:39:bf:e9:56:44:56:67:cb:60:0f:0f:
54:1e:1b:09:ad:34:f1:ab:8e:6c:0f:c8:1a:71:2f:58:c9:e3:
f8:f8:1b:92:86:27:9b:f6:77:7a:72:37:d4:e6:4c:e2:f1:c0:
e2:69:0f:33:6e:99:7e:67:aa:87:45:db:56:19:b6:5b:48:b4:
cd:3b:b3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 15:31:21 2025 by rpki-client