Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MrGSnH7xxpC_xczuDGyNaYsqv7c.roa
File: MrGSnH7xxpC_xczuDGyNaYsqv7c.roa (raw, json)
Hash identifier: y8Con6xyqW9nuUtClFC76Bsv5JJ7TobfuMC/vbzBjPY=
Subject key identifier: 32:B1:92:9C:7E:F1:C6:90:BF:C5:CC:EE:0C:6C:8D:69:8B:2A:BF:B7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 67F4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MrGSnH7xxpC_xczuDGyNaYsqv7c.roa
Signing time: Wed 04 Jun 2025 07:15:18 +0000
ROA not before: Wed 04 Jun 2025 07:15:18 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26612 (0x67f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 4 07:15:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=32B1929C7EF1C690BFC5CCEE0C6C8D698B2ABFB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:56:d2:12:da:ed:a4:07:fe:a9:92:92:35:
00:3b:0c:c9:a3:0e:49:11:cc:42:bb:bd:60:ab:c8:
e3:71:d2:96:20:a9:76:62:ed:66:31:03:45:3b:d2:
99:6c:80:7c:b5:c8:07:62:58:dc:6b:7b:7e:29:d5:
fd:36:b9:05:46:1c:44:21:80:1c:4a:db:0e:7d:09:
fd:a4:94:4d:92:51:8c:83:38:22:49:cc:f1:6b:2a:
42:f1:84:41:ec:d5:27:9f:9e:53:53:3f:9a:14:91:
b6:61:2a:a1:62:9f:23:77:19:e5:4e:75:58:cd:f3:
0d:c0:3a:82:bf:77:7b:62:3c:19:0a:59:22:d6:6d:
ef:5b:6b:8a:48:35:70:f6:5e:92:20:a8:9d:7c:93:
e1:c2:29:6d:59:35:a5:75:77:9d:df:b8:28:a2:45:
35:a4:d4:ee:db:25:00:fb:c8:ee:64:96:5e:0c:3c:
2f:b8:f3:5d:2f:31:0a:e7:c4:10:e7:4e:fc:3c:a7:
8a:03:e2:3f:ee:b1:10:a9:07:ff:de:7a:91:dd:53:
1a:18:53:93:e7:cf:0f:aa:50:19:2f:ad:70:14:fd:
36:80:cd:ac:cf:1e:7c:e6:69:51:d5:19:11:82:c0:
1d:82:4a:a7:fa:15:d3:26:13:ac:75:ac:44:05:da:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B1:92:9C:7E:F1:C6:90:BF:C5:CC:EE:0C:6C:8D:69:8B:2A:BF:B7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MrGSnH7xxpC_xczuDGyNaYsqv7c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
7f:a3:80:2e:de:6a:1e:c0:54:34:d4:88:56:bc:d5:90:f5:c8:
b3:80:53:4e:7d:d1:0f:32:6a:4c:1a:e0:35:34:99:76:f9:00:
4b:ab:03:5d:b0:2b:f4:c8:25:01:21:57:d3:fd:fd:5a:e9:76:
05:97:c4:b2:27:fc:96:f2:a6:4f:e7:1e:75:ca:82:40:b7:f2:
f6:50:f6:6e:6c:31:5a:7e:a1:04:87:7d:06:d0:18:dd:c7:d6:
32:e7:01:7f:d4:d7:62:e6:72:81:0e:db:59:df:84:f1:b3:22:
3b:a8:1f:bc:46:77:96:b6:9b:d7:92:8f:0d:12:8f:4c:ca:b2:
60:da:d5:01:d0:81:d7:54:d3:a9:b3:bc:1f:58:ed:0a:26:0d:
7a:a4:70:08:d0:6c:1a:48:3b:1d:e8:96:2e:b1:b7:fe:d6:65:
5d:77:cb:06:7f:d2:93:cc:a3:19:1d:aa:02:fc:da:a8:1d:27:
0f:5f:dc:b2:03:29:7d:a3:5e:d8:31:41:91:66:50:1f:db:07:
1d:c9:59:24:01:bf:5c:15:b2:05:79:ee:d4:b9:a2:41:dc:f2:
fb:bc:c8:8f:e0:78:d9:c9:bb:03:17:77:7a:a4:67:18:3e:34:
f9:de:6d:67:51:4c:d2:ce:7d:5f:96:12:02:ff:5c:e5:c2:22:
36:49:07:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:32:09 2025 by rpki-client