Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/EuRN2721hnC-xZlfEe3vICJmS9c.roa
File: EuRN2721hnC-xZlfEe3vICJmS9c.roa (raw, json)
Hash identifier: FokoTk7kG0AJSZthStn2h9jYX9XxxULpkbUMq8hbkCM=
Subject key identifier: 12:E4:4D:DB:BD:B5:86:70:BE:C5:99:5F:11:ED:EF:20:22:66:4B:D7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6B1C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EuRN2721hnC-xZlfEe3vICJmS9c.roa
Signing time: Thu 12 Jun 2025 17:13:20 +0000
ROA not before: Thu 12 Jun 2025 17:13:20 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27420 (0x6b1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 12 17:13:20 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=12E44DDBBDB58670BEC5995F11EDEF2022664BD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:26:6f:e7:a4:6e:eb:42:77:f2:0a:08:ed:
fa:96:d9:37:ae:7d:40:77:42:3f:8a:20:a8:74:60:
5a:6c:0b:8f:d8:ba:c4:be:6a:f7:38:fe:f8:ed:6e:
9e:12:28:e5:81:46:4a:79:33:13:0e:1c:7d:64:d8:
4d:43:e7:f3:90:c3:4e:e4:f6:2d:87:dd:4a:52:28:
04:ce:6c:5f:f7:56:b3:18:2a:a1:39:10:f4:42:89:
3b:d7:94:78:d1:37:b6:98:0c:89:19:62:0e:60:9a:
59:c0:62:52:82:de:4d:8e:eb:7e:56:be:62:9b:1e:
73:02:d0:f2:dc:e9:26:f8:f2:87:56:c7:2c:a8:6f:
87:27:6e:5c:ba:f2:18:f4:d8:86:2e:8c:45:e2:5c:
21:31:e1:bd:db:5a:04:8a:3f:58:da:49:09:bf:5d:
88:d1:ab:cf:de:8f:90:ed:40:4e:cc:81:f1:aa:05:
dd:31:ad:52:8f:27:99:b8:0b:2a:36:fd:be:5b:c5:
34:35:fb:ab:3c:da:ab:c5:cc:64:fe:bf:20:fc:f1:
dc:fd:d3:0f:3b:97:c1:bd:90:6b:cb:b9:d2:8d:2a:
4c:34:f0:5c:1d:97:45:e7:e6:5f:e2:8c:f1:2a:fc:
77:f8:a5:2c:cf:01:8e:14:35:8b:27:68:0f:17:4f:
a4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E4:4D:DB:BD:B5:86:70:BE:C5:99:5F:11:ED:EF:20:22:66:4B:D7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EuRN2721hnC-xZlfEe3vICJmS9c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
73:40:88:86:a9:d2:4a:48:a5:25:dd:f0:26:1a:cd:2d:b6:92:
9f:50:2b:8e:59:01:58:f7:4d:a0:3f:d4:24:81:60:78:31:37:
c4:d5:de:b3:4a:37:05:8f:6b:f8:2e:34:9e:be:3d:d4:57:54:
30:b0:d1:48:a5:c3:82:b5:25:14:77:a8:79:86:23:66:8d:5f:
00:c0:5c:4a:5d:03:63:13:13:2f:9b:18:6b:ae:71:ae:53:96:
5a:f6:31:10:5c:04:8b:01:b0:4f:bc:a1:9a:b5:9c:84:aa:52:
3c:7b:8a:9a:9f:49:46:c9:b0:f0:a0:cd:a3:24:d9:23:53:74:
ab:2f:4b:47:7e:84:af:08:72:0b:62:e7:9f:1d:14:17:49:56:
43:a9:46:f2:7e:10:75:f4:5c:6f:51:d3:7d:e3:c5:53:aa:e1:
39:19:18:a6:c5:b7:74:e1:cb:dd:3e:5d:0b:96:4d:9a:e0:87:
a0:35:42:ef:10:2b:17:3c:10:ee:1b:fe:78:33:fc:8a:45:cc:
5e:9e:6e:27:63:99:22:6b:ea:8d:6b:03:48:71:9b:5b:22:b4:
86:42:f2:3f:ec:f8:1f:e2:9a:ab:0c:f1:0d:b7:a4:00:81:11:
ed:45:5e:1d:69:b5:ed:51:5f:8c:3f:6e:cf:e0:af:27:f5:a8:
31:6a:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:36:52 2025 by rpki-client