Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6JJ5SCVECgbcSrONrpPfPz0hguw.roa
File: 6JJ5SCVECgbcSrONrpPfPz0hguw.roa (raw, json)
Hash identifier: UQy04TlCyKcpKv0oL+BEo5C+Yr0wSVL9aFrwipQNeoc=
Subject key identifier: E8:92:79:48:25:44:0A:06:DC:4A:B3:8D:AE:93:DF:3F:3D:21:82:EC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 69F8
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6JJ5SCVECgbcSrONrpPfPz0hguw.roa
Signing time: Mon 09 Jun 2025 16:12:03 +0000
ROA not before: Mon 09 Jun 2025 16:12:03 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27128 (0x69f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 9 16:12:03 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E892794825440A06DC4AB38DAE93DF3F3D2182EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:26:87:89:d8:5d:b0:13:99:19:75:08:c8:
9a:32:b4:45:c3:78:66:27:c3:3c:d7:4b:ad:13:8b:
a4:7d:a0:ad:e8:69:91:29:c0:5c:50:4c:db:4f:ca:
48:30:f5:48:db:b7:f5:47:dc:6c:1f:1a:52:16:7e:
53:d0:70:9f:64:ad:2e:36:da:bd:47:07:45:54:c7:
1b:c9:8d:4f:7e:d9:a6:30:37:85:4a:2f:6f:a4:5f:
75:9a:27:8c:25:c7:25:93:48:8a:9f:95:0c:64:30:
df:ae:cf:ac:1a:66:f7:66:a2:27:98:d9:3f:48:be:
8f:8d:d6:c8:8d:06:d1:1b:34:42:dc:93:84:a5:c1:
f8:f8:38:4a:54:3c:60:e0:c2:68:12:3e:dd:d1:44:
35:42:a8:34:cd:9d:b0:e5:ee:ba:5b:51:68:d3:e7:
5f:55:82:36:ac:c1:69:31:3b:33:b6:f9:d4:e3:4d:
27:17:a1:4e:49:a3:68:47:d5:04:5c:cf:34:11:09:
5b:7a:e8:ec:0a:5f:4b:35:c5:84:cb:2e:f3:96:6f:
e4:5d:65:f1:a3:86:fd:2f:e7:62:45:d5:a0:e3:56:
90:bf:db:2c:34:b6:35:7b:89:e3:a0:0e:52:6f:4a:
15:6d:8b:3e:8d:ad:6b:8f:d1:45:c7:8e:97:ca:fb:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:92:79:48:25:44:0A:06:DC:4A:B3:8D:AE:93:DF:3F:3D:21:82:EC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6JJ5SCVECgbcSrONrpPfPz0hguw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a5:e0:bb:54:81:f6:fb:4b:22:ab:18:87:e8:f0:08:d8:bb:64:
03:60:52:e2:7b:81:e1:e0:4e:68:b0:e5:03:ce:20:81:c7:66:
d8:b6:6b:74:2d:e9:8c:54:99:2f:bc:73:a8:df:48:91:68:3c:
ba:6d:9c:19:fb:67:07:a5:42:ec:a7:dc:04:7a:a4:80:bd:13:
f8:f4:80:a9:66:36:01:87:99:55:59:0b:ba:98:cf:5b:41:5a:
1e:35:1d:c8:bc:83:36:1e:5e:55:84:7c:26:60:47:07:5e:1a:
b4:e7:ca:cd:3d:1f:e2:5f:38:f0:6f:98:f2:99:b7:be:ae:12:
5b:85:7e:41:12:18:cc:d5:1e:40:90:8b:5f:c3:9e:24:68:5f:
99:d4:8b:7d:c4:66:2d:41:df:3c:5a:6f:cb:8b:a4:57:c2:64:
71:58:18:e9:5e:0a:eb:59:37:5e:c3:10:95:64:56:b4:73:d0:
1e:60:32:5e:43:2f:c4:de:44:6f:1d:49:8b:75:07:b6:00:b8:
3a:dc:8d:3f:c8:f6:f9:e9:18:fa:06:fa:6b:08:ef:c5:ab:9a:
82:11:6c:ea:7f:73:12:9a:05:67:f2:65:f1:de:c8:59:7c:be:
04:36:17:ed:8a:b6:f1:34:b8:ad:15:19:a5:27:1d:ee:52:f8:
be:f0:36:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:32:30 2025 by rpki-client