Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/JOZ9v75UQZKnCJWxZZqruY9Nzv0.roa
File: JOZ9v75UQZKnCJWxZZqruY9Nzv0.roa (raw, json)
Hash identifier: 800FeFK55hvQIJp3revi4eFDkdYxRZcv/j9AEEjYPiI=
Subject key identifier: 24:E6:7D:BF:BE:54:41:92:A7:08:95:B1:65:9A:AB:B9:8F:4D:CE:FD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6778
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JOZ9v75UQZKnCJWxZZqruY9Nzv0.roa
Signing time: Tue 03 Jun 2025 00:11:52 +0000
ROA not before: Tue 03 Jun 2025 00:11:52 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26488 (0x6778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 3 00:11:52 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=24E67DBFBE544192A70895B1659AABB98F4DCEFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:14:21:75:13:ab:11:fb:23:49:91:03:c4:
2b:a7:55:12:f3:cc:c8:9a:c2:05:d7:98:95:ee:15:
97:67:c3:2c:8f:04:c3:8f:37:b8:26:04:83:ce:6c:
da:fb:fd:9b:80:2b:75:87:e2:fa:b0:69:7c:b2:f0:
f4:e7:39:64:da:b1:14:1b:95:19:58:93:b1:eb:27:
e0:8c:51:9c:78:e3:a5:48:8c:a2:10:56:5e:dd:d4:
d8:0b:90:3d:6c:83:32:e7:95:46:92:3c:f8:dd:50:
fe:23:82:c6:a8:a3:a8:bc:73:5d:37:73:6e:09:03:
13:f6:f5:ca:be:50:00:4d:e8:0f:07:a3:41:c1:16:
4d:6a:ee:70:a1:ec:70:5f:0f:33:40:fe:88:1a:27:
43:2d:e7:9a:ae:b6:79:99:32:5e:36:7b:db:84:80:
af:9b:d8:cf:c5:6a:ef:d6:b8:e3:b7:5b:47:d5:8e:
8c:95:08:47:e9:d1:af:3c:0c:14:2b:5b:6d:6d:e0:
6e:35:4e:f2:03:f7:1e:32:73:d7:38:8c:52:de:28:
75:c4:a2:9f:c0:ef:e0:60:b1:52:76:36:55:18:18:
d2:a0:81:c5:8b:0a:9c:76:f9:be:b0:6b:67:df:1e:
22:be:db:4c:6e:fa:1d:27:af:c4:df:d3:37:c8:72:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E6:7D:BF:BE:54:41:92:A7:08:95:B1:65:9A:AB:B9:8F:4D:CE:FD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JOZ9v75UQZKnCJWxZZqruY9Nzv0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
7d:24:a5:ee:08:64:5d:cb:34:a9:c4:fb:a0:0f:a0:99:8b:f4:
0b:82:f7:e1:ea:a4:32:92:a6:2b:88:26:47:4d:3a:67:99:af:
94:eb:9b:fa:19:a6:c6:74:7b:fa:ae:a0:fc:bd:e4:86:d2:2e:
33:fe:45:99:c3:84:38:2a:97:12:bf:33:62:5f:4c:6e:74:23:
82:db:00:2c:d1:c8:10:61:1c:56:0b:ea:24:51:40:e2:d7:01:
a4:8e:b6:90:9e:f7:29:0b:df:5b:ab:73:56:e6:eb:eb:da:c8:
71:cb:88:6d:f5:c0:72:c7:60:cd:82:8f:2a:df:90:0b:10:37:
70:d9:e0:b2:84:76:9c:52:11:2a:2a:e5:7f:33:54:d7:74:52:
1a:7b:08:b5:3a:cb:a0:f5:aa:57:63:74:9b:b1:91:7a:92:4f:
e0:99:af:d1:f6:ba:fc:7f:2c:20:51:7b:93:29:b1:42:8e:b5:
2e:89:90:88:e7:52:c5:a6:14:8f:e4:1a:02:e9:73:35:7f:05:
94:15:29:aa:7c:9e:c6:20:d0:a4:d0:64:37:5d:87:18:9f:8d:
91:04:cc:5a:70:26:8d:3d:0c:eb:cc:0e:c9:e6:c8:dc:03:32:
4e:f7:94:df:e3:d8:d3:d9:56:72:41:7f:9a:d1:36:7c:3e:92:
c8:07:fb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:05 2025 by rpki-client