Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/G5Fv9LiwalnJa5VMPcSXbWn5NsA.roa
File: G5Fv9LiwalnJa5VMPcSXbWn5NsA.roa (raw, json)
Hash identifier: 4kUudz1/XlHrT9taUPyBI1knpkhTdVATRAv5iqaL8eI=
Subject key identifier: 1B:91:6F:F4:B8:B0:6A:59:C9:6B:95:4C:3D:C4:97:6D:69:F9:36:C0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 677E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/G5Fv9LiwalnJa5VMPcSXbWn5NsA.roa
Signing time: Tue 03 Jun 2025 01:41:54 +0000
ROA not before: Tue 03 Jun 2025 01:41:54 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26494 (0x677e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 3 01:41:54 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1B916FF4B8B06A59C96B954C3DC4976D69F936C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:08:86:02:52:ad:48:bc:1f:65:4f:bc:0c:
1c:6f:42:56:14:58:91:99:92:18:9b:ba:b7:db:72:
bb:c4:f0:31:91:ed:05:fb:d7:95:58:23:58:84:36:
a3:6a:e9:0d:54:20:43:02:44:dd:00:46:f7:99:92:
99:d8:41:0d:c7:31:fe:28:9c:c7:a4:ff:01:96:b2:
74:1c:10:ca:57:1b:60:42:79:cc:b7:91:9f:63:de:
01:dd:6f:cf:28:0e:1b:5c:97:95:d7:d1:38:0f:00:
d5:52:2f:30:a1:c0:02:91:61:fd:23:ba:e0:39:b9:
9f:c4:3b:70:34:b1:54:0c:30:1f:65:99:ed:57:31:
c5:74:f1:65:73:3b:ec:fe:2b:1c:fa:34:eb:c7:db:
cc:d5:7c:ad:0f:55:8e:b1:7d:2f:a6:cb:3f:24:9a:
f0:68:08:70:e7:1f:cf:56:52:2d:41:ca:84:84:92:
83:08:cb:45:f8:dc:3d:ab:75:fd:09:37:ac:2a:59:
3c:5d:52:fc:67:c3:2a:56:4c:67:78:64:99:14:af:
40:7f:a3:6f:b4:c8:13:73:3d:ce:7b:5c:9e:bd:0c:
85:95:dc:2f:5c:48:c5:b2:a9:db:3b:3b:0c:08:50:
a6:0d:9d:8e:74:32:53:ff:40:b5:a9:57:1f:a7:a5:
a6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:91:6F:F4:B8:B0:6A:59:C9:6B:95:4C:3D:C4:97:6D:69:F9:36:C0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/G5Fv9LiwalnJa5VMPcSXbWn5NsA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
52:ad:61:86:0e:8f:bb:18:eb:cd:0e:f7:f9:8b:ab:08:d6:c0:
a2:47:54:16:73:3a:17:c2:09:0e:72:36:f9:ee:64:96:db:b8:
6a:88:bf:5d:b7:3c:ec:19:ec:a1:81:a1:b8:bb:82:8d:fc:c3:
0e:c6:92:8b:17:18:45:88:11:43:20:76:5b:fe:40:47:92:48:
92:8a:67:73:40:55:91:4a:71:b0:ff:bf:79:c1:ce:b1:ec:11:
99:ea:93:e6:4e:b7:91:06:28:45:50:45:cc:46:6b:ee:f4:4c:
dd:ec:92:d4:29:ef:bb:a4:79:af:7b:5f:3a:f5:ff:71:2f:0d:
5f:dc:30:db:6f:b4:4c:61:ae:07:46:37:a1:fb:fe:fe:57:99:
71:45:b4:cd:e0:0a:0f:ae:81:13:40:a1:df:56:33:ed:96:7e:
27:60:da:a7:40:5d:ef:05:88:29:80:cb:4d:88:a2:c9:28:70:
0e:c6:f8:e4:07:d0:a3:65:5e:27:48:dc:02:b9:43:bd:29:03:
eb:34:9a:88:6e:2a:45:dd:d3:d1:6e:e1:df:ba:b9:36:9f:02:
02:13:56:87:36:d0:ef:77:99:57:2d:d5:0a:76:5c:93:2f:bf:
97:60:2d:0d:37:12:14:43:ec:96:95:6b:8b:dc:25:f0:a5:cf:
e2:36:b8:86
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICZ34wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MDMw
MTQxNTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFCOTE2RkY0QjhCMDZB
NTlDOTZCOTU0QzNEQzQ5NzZENjlGOTM2QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6yQiGAlKtSLwfZU+8DBxvQlYUWJGZkhiburfbcrvE8DGR7QX7
15VYI1iENqNq6Q1UIEMCRN0ARveZkpnYQQ3HMf4onMek/wGWsnQcEMpXG2BCecy3
kZ9j3gHdb88oDhtcl5XX0TgPANVSLzChwAKRYf0juuA5uZ/EO3A0sVQMMB9lme1X
McV08WVzO+z+Kxz6NOvH28zVfK0PVY6xfS+myz8kmvBoCHDnH89WUi1ByoSEkoMI
y0X43D2rdf0JN6wqWTxdUvxnwypWTGd4ZJkUr0B/o2+0yBNzPc57XJ69DIWV3C9c
SMWyqds7OwwIUKYNnY50MlP/QLWpVx+npabDAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUG5Fv9LiwalnJa5VMPcSXbWn5NsAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0c1RnY5TGl3YWxuSmE1
Vk1QY1NYYlduNU5zQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBSrWGG
Do+7GOvNDvf5i6sI1sCiR1QWczoXwgkOcjb57mSW27hqiL9dtzzsGeyhgaG4u4KN
/MMOxpKLFxhFiBFDIHZb/kBHkkiSimdzQFWRSnGw/795wc6x7BGZ6pPmTreRBihF
UEXMRmvu9Ezd7JLUKe+7pHmve1869f9xLw1f3DDbb7RMYa4HRjeh+/7+V5lxRbTN
4AoProETQKHfVjPtln4nYNqnQF3vBYgpgMtNiKLJKHAOxvjkB9CjZV4nSNwCuUO9
KQPrNJqIbipF3dPRbuHfurk2nwICE1aHNtDvd5lXLdUKdlyTL7+XYC0NNxIUQ+yW
lWuL3CXwpc/iNriG
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:10:17 2025 by rpki-client