Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ikv4pWih0b3L_1oFnDQMaWug36M.roa
File: Ikv4pWih0b3L_1oFnDQMaWug36M.roa (raw, json)
Hash identifier: OjvYnX/u9qQqSg9sKxn17rZcZYdZG1tHXnnqzT9n/jg=
Subject key identifier: 22:4B:F8:A5:68:A1:D1:BD:CB:FF:5A:05:9C:34:0C:69:6B:A0:DF:A3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 69E0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ikv4pWih0b3L_1oFnDQMaWug36M.roa
Signing time: Mon 09 Jun 2025 10:12:00 +0000
ROA not before: Mon 09 Jun 2025 10:12:00 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27104 (0x69e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 9 10:12:00 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=224BF8A568A1D1BDCBFF5A059C340C696BA0DFA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:a4:99:c4:22:ac:79:b7:63:c7:47:f5:50:
b6:46:4f:ce:b0:13:0f:59:c6:68:66:a6:62:53:c4:
90:c0:31:98:e3:6c:24:b0:1e:83:d9:03:ad:0e:70:
d6:c0:3b:5d:84:c2:00:8f:89:9d:82:9c:40:32:3a:
3d:e7:ba:6e:af:d1:53:99:d2:61:38:d7:6e:72:c4:
c2:e4:ee:47:d3:c7:58:ca:89:02:5a:f6:5a:b6:cb:
49:0b:bf:c3:31:f0:6b:71:ff:55:23:d5:cf:86:af:
a6:69:1e:52:ba:c8:5b:cb:bd:1a:5a:cc:81:2f:18:
a5:f0:8e:4e:d7:0a:1e:23:7e:18:dc:0b:ee:ba:09:
40:95:7a:fe:e2:37:cd:5d:a2:8d:06:0a:57:7c:cc:
e1:42:29:97:8d:2d:41:03:e2:ee:6d:22:64:a6:3b:
29:84:94:d4:49:66:6b:3f:be:0b:f9:1b:2e:e1:16:
cc:99:f8:34:46:a0:d8:f1:52:5c:13:28:19:e3:a5:
b4:bd:b9:84:20:13:a7:d4:de:1a:25:aa:34:fa:c2:
bc:54:a9:a9:ae:dc:e7:71:45:35:f8:13:0c:f8:2d:
ca:50:20:c6:46:c4:06:89:be:6c:6e:2f:be:01:38:
06:84:82:d6:2f:e3:5c:12:44:d7:98:f9:7d:4f:d3:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4B:F8:A5:68:A1:D1:BD:CB:FF:5A:05:9C:34:0C:69:6B:A0:DF:A3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ikv4pWih0b3L_1oFnDQMaWug36M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
22:0a:5e:aa:cf:c8:4e:ee:b4:30:54:63:25:8f:69:94:22:5c:
f5:e6:c8:86:f4:fe:0f:90:a9:cd:ea:26:4b:52:27:a4:90:40:
30:2e:fd:88:c0:79:f3:0d:d0:31:7c:5f:1c:77:80:65:d6:9f:
89:e7:c2:7a:07:10:aa:fb:93:13:a1:11:c6:bd:7b:8a:ea:ba:
0a:78:8d:a2:b4:d4:bc:aa:40:16:a2:2b:70:6c:c0:6c:5a:8a:
ea:76:08:f3:db:8c:92:df:f8:42:4b:09:2c:78:cd:18:ed:4f:
14:c9:02:12:5b:59:e8:5d:ac:48:5d:ea:16:7a:0f:f3:e4:0d:
a6:4d:9f:a6:a9:eb:20:05:52:d2:6a:75:52:f4:4f:02:60:26:
16:71:e3:16:52:ee:77:af:26:1a:13:b7:b0:8a:3f:65:d2:b3:
06:95:9e:98:bf:dc:3f:1d:4c:21:9f:65:47:55:82:b0:28:7a:
85:e2:f0:7b:00:56:ad:5e:7a:1a:de:61:06:4f:a6:63:bf:c4:
17:27:f9:f7:6a:5b:06:61:f4:19:2a:52:37:a0:5f:ba:f6:23:
46:37:9d:cd:a7:42:0e:ae:24:a2:65:00:38:11:89:4a:ac:74:
62:eb:94:de:fd:39:14:4a:e5:d2:a5:f9:3a:f6:56:be:ac:23:
41:b9:cc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 19:45:12 2025 by rpki-client