Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/DlAY8TKaxezOxyf9HjIBmqifvB0.roa
File: DlAY8TKaxezOxyf9HjIBmqifvB0.roa (raw, json)
Hash identifier: GcqzW1fn+TaNzZF/dPugfkjTgjFb1ke0ss1SvXuFRtw=
Subject key identifier: 0E:50:18:F1:32:9A:C5:EC:CE:C7:27:FD:1E:32:01:9A:A8:9F:BC:1D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 645E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DlAY8TKaxezOxyf9HjIBmqifvB0.roa
Signing time: Sun 25 May 2025 17:41:03 +0000
ROA not before: Sun 25 May 2025 17:41:03 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25694 (0x645e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 25 17:41:03 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0E5018F1329AC5ECCEC727FD1E32019AA89FBC1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:f4:af:0c:86:af:40:04:ff:62:aa:fb:79:
e3:6b:e2:0a:84:8b:15:b7:40:e1:b6:1e:05:aa:1f:
63:51:50:04:28:3c:75:de:a2:a2:92:b9:88:2a:78:
e4:ec:4d:a5:0b:37:0a:7d:64:4e:6e:b2:1f:d1:db:
34:30:a6:77:74:4a:a9:38:d5:ed:36:e5:b7:cc:df:
2a:9f:e2:6d:78:47:28:f9:b5:82:90:22:31:09:f0:
4a:67:22:f7:bb:be:fa:42:8a:25:a1:9c:60:f6:38:
e8:d5:50:28:44:eb:33:80:06:9d:12:67:fa:96:25:
9b:96:fb:95:bd:37:2b:63:26:82:41:02:e4:35:17:
8c:8a:fe:aa:0f:62:b9:43:43:c9:50:46:d8:d6:ba:
5e:cf:a6:e3:e9:9e:80:27:89:d0:5b:1b:98:18:79:
53:d5:f1:58:f7:3b:3f:c6:a6:54:e0:97:23:e4:a3:
e4:ba:5b:b9:e8:01:4f:46:3a:38:c9:78:56:ed:f1:
06:2e:3b:cf:ef:a2:f3:17:ea:66:e9:a6:0c:89:e2:
c0:3a:9a:35:fa:f2:30:97:40:d2:b6:c1:44:ce:bf:
05:3e:fe:e3:2d:99:1e:b2:37:57:ae:7a:a2:2e:b3:
1b:0d:29:0d:9a:88:8b:3a:31:c6:bf:b0:7d:df:79:
9e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:50:18:F1:32:9A:C5:EC:CE:C7:27:FD:1E:32:01:9A:A8:9F:BC:1D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DlAY8TKaxezOxyf9HjIBmqifvB0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
3f:74:49:6f:ce:f2:93:b0:0f:94:32:34:bd:5a:6f:43:d4:77:
cd:8c:45:cd:52:6b:08:67:c1:3b:1b:31:25:5c:e2:a5:fc:f2:
13:1d:ee:1e:fc:40:3f:55:72:25:01:fd:2b:3c:47:f8:8a:b6:
89:10:ff:02:fc:c3:21:48:0c:e7:93:b9:7e:f3:6f:4c:c3:c9:
ce:a7:dc:85:ee:51:0a:d7:8d:bb:59:44:fa:aa:12:2e:c5:0e:
60:50:89:e8:d4:01:66:25:96:c0:e0:0e:bb:55:dd:3e:b8:b2:
6b:3d:0d:98:bf:4f:df:32:e2:f7:9a:ee:c8:1a:9d:d6:cb:48:
52:49:26:62:a9:82:45:2c:d4:96:b5:bb:3d:a3:e5:1e:9c:60:
d8:2b:b5:d4:11:8a:5d:52:80:f2:4f:5e:62:7e:83:9c:fa:b3:
c1:0b:2a:13:49:d2:18:16:13:ea:8e:aa:aa:25:d7:32:5f:4b:
b7:b6:35:09:25:b1:a5:67:ae:d6:02:75:a7:7e:c1:9e:49:b7:
1a:4a:78:c8:c3:25:25:f7:92:69:4f:46:5d:15:a8:ca:d3:66:
bc:4c:15:41:df:08:fa:99:79:51:bb:ba:94:cb:74:b7:d8:33:
d8:94:26:86:26:33:36:e9:f8:aa:e6:ac:5c:57:60:c6:3a:a8:
62:a5:fb:27
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICZF4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjUx
NzQxMDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDBFNTAxOEYxMzI5QUM1
RUNDRUM3MjdGRDFFMzIwMTlBQTg5RkJDMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHkPSvDIavQAT/Yqr7eeNr4gqEixW3QOG2HgWqH2NRUAQoPHXe
oqKSuYgqeOTsTaULNwp9ZE5ush/R2zQwpnd0Sqk41e025bfM3yqf4m14Ryj5tYKQ
IjEJ8EpnIve7vvpCiiWhnGD2OOjVUChE6zOABp0SZ/qWJZuW+5W9NytjJoJBAuQ1
F4yK/qoPYrlDQ8lQRtjWul7PpuPpnoAnidBbG5gYeVPV8Vj3Oz/GplTglyPko+S6
W7noAU9GOjjJeFbt8QYuO8/vovMX6mbppgyJ4sA6mjX68jCXQNK2wUTOvwU+/uMt
mR6yN1eueqIusxsNKQ2aiIs6Mca/sH3feZ59AgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUDlAY8TKaxezOxyf9HjIBmqifvB0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0RsQVk4VEtheGV6T3h5
ZjlIaklCbXFpZnZCMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQA/dElv
zvKTsA+UMjS9Wm9D1HfNjEXNUmsIZ8E7GzElXOKl/PITHe4e/EA/VXIlAf0rPEf4
iraJEP8C/MMhSAznk7l+829Mw8nOp9yF7lEK1427WUT6qhIuxQ5gUIno1AFmJZbA
4A67Vd0+uLJrPQ2Yv0/fMuL3mu7IGp3Wy0hSSSZiqYJFLNSWtbs9o+UenGDYK7XU
EYpdUoDyT15ifoOc+rPBCyoTSdIYFhPqjqqqJdcyX0u3tjUJJbGlZ67WAnWnfsGe
SbcaSnjIwyUl95JpT0ZdFajK02a8TBVB3wj6mXlRu7qUy3S32DPYlCaGJjM26fiq
5qxcV2DGOqhipfsn
-----END CERTIFICATE-----
Generated at Sat Jun 21 05:37:06 2025 by rpki-client