Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Fp2sVBoSxQMsVHoTWBSae_rBlsQ.roa
File: Fp2sVBoSxQMsVHoTWBSae_rBlsQ.roa (raw, json)
Hash identifier: Lfcfwqmlx0xb7Wttj9KNWoqG3dUGrjRonLNuE6ZnK8g=
Subject key identifier: 16:9D:AC:54:1A:12:C5:03:2C:54:7A:13:58:14:9A:7B:FA:C1:96:C4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 635E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Fp2sVBoSxQMsVHoTWBSae_rBlsQ.roa
Signing time: Fri 23 May 2025 01:41:12 +0000
ROA not before: Fri 23 May 2025 01:41:12 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25438 (0x635e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 23 01:41:12 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=169DAC541A12C5032C547A1358149A7BFAC196C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:cd:6f:e7:9f:95:18:77:e7:44:ad:72:24:
17:aa:18:30:d0:3a:92:05:b2:3d:38:56:55:5a:75:
4e:1b:cd:e7:e0:0b:af:ad:f9:7e:43:62:bc:2d:fa:
af:9f:ea:3d:3d:e8:5f:0d:6e:36:fe:ad:72:72:ce:
6e:dd:8c:69:85:49:d8:43:13:f9:45:68:0b:3f:43:
2c:5a:8f:39:b6:85:2c:43:7d:da:59:a7:aa:52:24:
36:e6:ac:87:d6:d6:f8:6c:90:d0:00:93:e6:20:52:
6f:bf:3d:a8:1b:ba:db:18:65:9b:d5:3b:14:a0:b6:
d3:df:fe:7c:e9:07:1c:b6:41:68:e0:66:0d:cf:5e:
c7:a4:21:04:97:c8:f8:4b:c9:bd:9e:9b:ee:d2:fa:
3f:93:69:42:81:69:35:c7:7b:03:98:7b:a4:ed:f2:
13:37:99:ce:5a:dc:85:39:1c:55:e5:9f:5b:67:0c:
a5:c4:8f:59:24:ca:cf:c3:8f:f4:7d:6c:b5:b8:b2:
7e:b6:26:95:19:74:3c:ba:d4:04:75:ba:73:29:64:
f6:f8:b3:01:71:12:78:67:2c:6d:07:d0:ab:ff:33:
97:c3:18:ef:38:6f:3f:07:50:33:98:88:56:26:01:
e4:fc:41:9c:16:1a:65:88:55:6a:58:ae:7d:46:74:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9D:AC:54:1A:12:C5:03:2C:54:7A:13:58:14:9A:7B:FA:C1:96:C4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Fp2sVBoSxQMsVHoTWBSae_rBlsQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
31:48:85:e2:5b:ba:c7:e1:26:ab:4d:51:b8:ec:96:70:9b:1c:
fb:b8:ca:90:c0:57:ee:cb:fa:df:00:5d:3c:83:f0:1f:1a:71:
45:80:93:82:7d:9b:1c:7e:bc:9f:fe:96:33:1a:a3:0d:56:0a:
29:48:7d:e4:6f:55:40:09:0e:24:2c:3b:21:4c:3c:f5:02:22:
60:3a:ec:d6:92:ee:7c:03:0d:4b:3b:84:cf:04:d5:2e:6c:d3:
ef:73:ed:87:5a:92:0e:69:c2:8c:6c:fa:04:dc:e8:90:0f:ce:
f1:74:96:cc:16:ac:4f:df:98:97:2d:a4:a4:17:e5:c4:19:7f:
df:15:74:2d:54:8d:ec:5a:71:41:21:28:bb:0a:cb:cf:b4:76:
a5:77:48:df:ab:93:12:82:e7:4c:5c:74:62:2e:06:b0:5a:a2:
4c:f9:f2:b0:a5:cd:89:44:65:58:6f:1b:fc:98:bb:b9:5f:99:
fa:f9:12:18:5a:54:0e:3b:c3:dd:b1:8c:ef:41:b5:3f:2d:cc:
03:82:b8:9e:ea:91:98:88:bd:8f:36:74:f8:34:5f:a8:ad:b6:
5e:60:e1:4a:47:26:1b:54:0b:b0:ca:7e:06:c2:e5:0e:34:88:
89:70:f8:de:e9:e1:cf:4b:93:66:f5:89:c1:dd:46:34:d3:d1:
d8:f7:eb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:22:10 2025 by rpki-client