Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/N1MJePGYH8TBH9OYc21mxCwvxro.roa
File: N1MJePGYH8TBH9OYc21mxCwvxro.roa (raw, json)
Hash identifier: 0dWglcBE83XeIAF2ZjBSRNqWifs7qofRgwCtoVMbpxk=
Subject key identifier: 37:53:09:78:F1:98:1F:C4:C1:1F:D3:98:73:6D:66:C4:2C:2F:C6:BA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 68C4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/N1MJePGYH8TBH9OYc21mxCwvxro.roa
Signing time: Fri 06 Jun 2025 11:11:54 +0000
ROA not before: Fri 06 Jun 2025 11:11:54 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26820 (0x68c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 6 11:11:54 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=37530978F1981FC4C11FD398736D66C42C2FC6BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:cc:21:8f:5a:19:ec:f9:85:29:ed:1d:a2:
03:66:64:4e:1a:f0:d0:fe:c2:34:cc:d3:ea:18:5e:
87:39:77:af:b7:c7:d8:23:b5:c8:e6:a9:55:b8:bf:
89:eb:50:c2:96:3c:dc:6d:1f:94:fa:0c:15:0a:c2:
3c:ee:a2:02:f6:62:47:59:4a:30:ac:5b:bb:00:23:
69:7a:4b:fe:df:0c:b0:a1:32:21:fc:fc:6a:d3:cc:
3f:bf:89:2d:3d:cc:2a:49:e0:c1:6e:0d:18:e2:cd:
8c:d0:0d:36:78:ba:53:d1:22:d8:76:08:d0:38:7d:
6f:47:2c:e4:71:93:e5:af:1d:6e:0b:a6:fe:d1:c2:
7a:39:0d:f4:dc:5a:61:b0:4c:e2:dc:ec:3a:03:a9:
d1:ff:5e:55:0e:95:80:7f:38:aa:55:fc:2d:1b:5b:
0c:1b:7a:47:f0:24:1a:12:74:78:7c:0a:d6:0d:fa:
aa:8d:ab:63:c6:cc:a1:9d:d0:c4:6f:09:52:e8:28:
89:2b:e2:05:65:5f:6b:e9:7a:ad:60:8e:dd:5c:53:
ec:71:9c:85:c7:8b:6a:73:11:64:ff:ac:89:f5:bc:
22:43:b3:ff:2c:77:2f:06:88:c5:af:68:81:09:24:
37:c8:69:05:64:92:9d:7d:b4:3c:99:22:15:46:09:
54:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:53:09:78:F1:98:1F:C4:C1:1F:D3:98:73:6D:66:C4:2C:2F:C6:BA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/N1MJePGYH8TBH9OYc21mxCwvxro.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
20:e8:b1:33:f0:19:d8:49:27:86:22:6d:39:b1:86:5c:19:f0:
e3:3b:3d:e7:e1:1b:57:c9:30:3b:ce:4e:f1:e0:5b:ef:95:d7:
41:de:6c:40:36:e4:32:e2:47:33:9a:25:ad:41:59:cb:32:4c:
88:da:b9:58:40:43:11:f9:80:68:25:af:08:83:7f:66:be:65:
44:a1:d8:d2:d8:e1:86:57:ee:78:ae:13:c0:72:93:b6:3f:c8:
b8:e8:82:d3:2b:06:d1:bf:8d:36:05:50:64:05:a2:90:ea:e0:
df:d4:07:01:68:72:bf:13:33:ae:eb:45:99:67:93:fa:ea:a8:
03:13:7b:a5:07:78:50:ee:c2:84:ad:b3:4e:03:88:a8:6a:a2:
7b:14:f5:d0:18:e8:c4:6a:ed:e7:a8:e9:c1:08:15:25:62:1d:
81:ad:3f:50:00:1e:de:86:64:c2:35:84:72:10:5c:1d:a8:9d:
c4:62:7d:9f:ad:69:b8:85:36:52:39:a7:eb:b6:cb:59:30:93:
51:47:42:cf:78:70:75:04:f1:46:ce:66:f8:b2:c3:0b:25:82:
de:ef:06:bf:94:84:54:54:da:d0:ba:0c:05:89:17:d8:b8:a6:
73:77:3e:4d:58:bf:8e:5b:63:36:63:dd:2c:bc:48:be:0c:9a:
2f:81:e1:74
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICaMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MDYx
MTExNTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDM3NTMwOTc4RjE5ODFG
QzRDMTFGRDM5ODczNkQ2NkM0MkMyRkM2QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcvcwhj1oZ7PmFKe0dogNmZE4a8ND+wjTM0+oYXoc5d6+3x9gj
tcjmqVW4v4nrUMKWPNxtH5T6DBUKwjzuogL2YkdZSjCsW7sAI2l6S/7fDLChMiH8
/GrTzD+/iS09zCpJ4MFuDRjizYzQDTZ4ulPRIth2CNA4fW9HLORxk+WvHW4Lpv7R
wno5DfTcWmGwTOLc7DoDqdH/XlUOlYB/OKpV/C0bWwwbekfwJBoSdHh8CtYN+qqN
q2PGzKGd0MRvCVLoKIkr4gVlX2vpeq1gjt1cU+xxnIXHi2pzEWT/rIn1vCJDs/8s
dy8GiMWvaIEJJDfIaQVkkp19tDyZIhVGCVSHAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUN1MJePGYH8TBH9OYc21mxCwvxrowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L04xTUplUEdZSDhUQkg5
T1ljMjFteEN3dnhyby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAg6LEz
8BnYSSeGIm05sYZcGfDjOz3n4RtXyTA7zk7x4FvvlddB3mxANuQy4kczmiWtQVnL
MkyI2rlYQEMR+YBoJa8Ig39mvmVEodjS2OGGV+54rhPAcpO2P8i46ILTKwbRv402
BVBkBaKQ6uDf1AcBaHK/EzOu60WZZ5P66qgDE3ulB3hQ7sKErbNOA4ioaqJ7FPXQ
GOjEau3nqOnBCBUlYh2BrT9QAB7ehmTCNYRyEFwdqJ3EYn2frWm4hTZSOafrtstZ
MJNRR0LPeHB1BPFGzmb4ssMLJYLe7wa/lIRUVNrQugwFiRfYuKZzdz5NWL+OW2M2
Y90svEi+DJovgeF0
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:04:01 2025 by rpki-client