Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9M_VHTvXKHvU_i_r3zsrILFAGCM.roa
File: 9M_VHTvXKHvU_i_r3zsrILFAGCM.roa (raw, json)
Hash identifier: i/TQiTmAw8Kz4FJeHWS/2cB39RwKwjQlXTV85tXkU8s=
Subject key identifier: F4:CF:D5:1D:3B:D7:28:7B:D4:FE:2F:EB:DF:3B:2B:20:B1:40:18:23
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 64C6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9M_VHTvXKHvU_i_r3zsrILFAGCM.roa
Signing time: Mon 26 May 2025 19:41:06 +0000
ROA not before: Mon 26 May 2025 19:41:06 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25798 (0x64c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 26 19:41:06 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F4CFD51D3BD7287BD4FE2FEBDF3B2B20B1401823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:f9:90:61:4d:28:82:08:a2:fc:5a:a4:a1:
3a:12:9e:df:9c:e6:5c:58:96:82:52:d4:fb:88:5f:
82:02:55:9e:ec:66:51:ad:d3:02:97:99:57:d7:39:
ea:28:d2:5e:68:cc:e3:d4:52:56:5d:8f:7d:fe:84:
1a:06:6c:7c:26:ad:1a:b8:90:7e:46:91:d0:bd:cc:
d5:75:5b:e2:04:2a:4d:7e:7b:a4:7e:87:25:07:ae:
ca:c0:b3:f2:c6:f7:a1:ec:91:02:16:b7:86:73:56:
8e:ee:0b:d7:39:44:db:c0:b0:89:75:c7:b8:ca:33:
f0:fd:a3:5d:f2:bb:21:20:67:01:3f:a4:9c:c5:cd:
5e:c3:e0:f4:eb:b4:7a:10:cd:f8:2d:0a:1e:68:4d:
f0:4c:2b:c6:da:14:37:9e:82:27:76:85:df:c7:c4:
00:43:4d:08:1d:7d:3b:d8:69:59:3c:18:06:81:65:
1c:93:45:78:76:8a:5b:96:a8:15:c1:92:a4:e9:b4:
68:8d:67:d8:73:59:6c:4d:88:de:6f:01:ad:cd:29:
1f:4f:1a:13:7a:94:e1:91:17:ff:84:4a:40:a2:03:
76:c3:97:2c:07:f5:61:c1:76:8e:e3:28:43:31:bd:
d6:f3:e4:95:f7:66:3c:df:7d:89:fe:22:02:1c:4f:
00:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CF:D5:1D:3B:D7:28:7B:D4:FE:2F:EB:DF:3B:2B:20:B1:40:18:23
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9M_VHTvXKHvU_i_r3zsrILFAGCM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
2f:17:88:8c:54:41:51:7e:66:6a:14:aa:b4:ae:7d:52:66:fe:
6d:af:3a:6f:cf:7d:17:e6:2c:08:cc:10:46:4a:98:f5:5c:2d:
ba:df:fb:66:1c:44:c8:81:8b:c7:66:0a:fb:0e:af:b7:70:3a:
a2:0c:d5:8e:36:89:95:1c:af:d2:8e:5b:29:b2:98:6c:e1:8c:
95:85:35:17:5d:14:58:df:cd:35:e5:32:f4:b9:ad:2d:94:56:
d2:7d:e3:61:16:33:f1:9f:77:69:48:77:f4:66:2d:30:54:09:
4d:46:ef:b6:e2:f6:fd:65:dc:e2:04:63:20:ba:04:d7:3b:20:
e9:fb:c8:56:5c:8c:86:b6:42:1a:03:d1:8c:f2:05:9f:63:07:
6c:53:d5:a4:2c:0b:f8:38:0c:2c:09:df:e7:04:e2:06:1f:80:
56:e5:53:a6:9c:4b:76:18:1b:63:cf:b4:16:03:f1:4f:62:3a:
79:45:0f:3c:73:0c:1c:b8:e0:cf:3a:c4:e0:55:4c:25:9f:1a:
70:e0:c5:3b:79:a2:cd:ce:29:1f:7d:ae:62:f1:23:40:6b:83:
82:78:b1:a2:8b:51:fe:97:cc:9b:8e:16:69:8b:f5:a7:f3:9f:
0d:27:e9:52:9c:b0:3c:08:cf:63:19:08:9f:96:c4:24:05:9a:
68:00:21:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:03:03 2025 by rpki-client