Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OTZyhReB4VCQF_IfSeQa3dv5fZc.roa
File: OTZyhReB4VCQF_IfSeQa3dv5fZc.roa (raw, json)
Hash identifier: vZfzB9puUVmbnwFYxO9A3/M/TTE0EB6sNNNBdhj3kh0=
Subject key identifier: 39:36:72:85:17:81:E1:50:90:17:F2:1F:49:E4:1A:DD:DB:F9:7D:97
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6254
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OTZyhReB4VCQF_IfSeQa3dv5fZc.roa
Signing time: Tue 20 May 2025 07:10:34 +0000
ROA not before: Tue 20 May 2025 07:10:34 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25172 (0x6254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 20 07:10:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=393672851781E1509017F21F49E41ADDDBF97D97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:f7:4c:f4:a6:5e:e9:a8:86:70:9c:0b:c9:
1e:9e:72:f4:5b:bf:cd:d2:aa:ee:5b:33:e6:d9:3a:
68:df:3a:4d:9e:45:3d:f2:b8:e6:db:b8:c1:7c:1a:
4f:33:cb:d4:0c:44:32:cc:91:06:41:11:ca:04:de:
65:70:ef:7e:68:62:76:72:a3:4d:9a:e7:06:86:4c:
6f:e1:3f:18:78:6b:ef:85:6d:cf:bf:06:5f:78:2e:
3a:7a:38:0a:3b:37:a9:8d:df:f9:39:fd:01:22:8b:
71:6d:b1:64:48:1c:ae:a0:0d:07:09:24:00:ce:7a:
31:e5:7c:0c:94:e6:f5:c1:6b:ef:56:86:12:d0:f2:
77:f1:b7:70:21:16:45:53:6d:22:bc:a0:f5:dc:0d:
d5:94:45:68:15:99:be:a8:09:1f:c8:b2:af:37:9f:
78:f4:d3:8f:84:a4:9f:f8:7e:f8:fa:34:3f:75:2e:
12:cc:6d:50:c2:49:14:73:2d:a8:28:91:ae:07:0a:
ed:60:61:6a:28:86:cf:a6:27:fe:e4:c8:d6:74:9f:
a1:89:68:44:70:d2:3a:e9:c5:e0:f5:d9:9d:db:f5:
37:13:27:4e:f8:a5:f4:ee:41:56:c0:6a:77:ab:2c:
87:1f:3d:03:6a:46:a5:d2:6c:49:c5:2e:30:4e:82:
f8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:36:72:85:17:81:E1:50:90:17:F2:1F:49:E4:1A:DD:DB:F9:7D:97
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OTZyhReB4VCQF_IfSeQa3dv5fZc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
bc:a7:f6:55:4d:a6:c8:69:c3:2a:ee:73:62:fd:48:5a:65:86:
60:ea:b0:bf:c4:1a:99:78:12:c9:91:31:51:fc:2d:5c:b2:6d:
cd:16:97:eb:8c:63:7d:9f:22:9b:f6:cd:b8:f6:55:f0:1b:c3:
22:94:3d:10:52:a9:25:95:89:72:a7:48:bc:a7:d4:a4:87:d7:
2e:32:82:6f:3b:14:9d:64:3e:df:8e:e1:cf:7e:36:79:7d:ec:
70:50:5e:46:89:5f:ca:0e:19:bc:75:8d:aa:39:87:9a:bf:90:
e3:a4:09:c5:a3:a2:c2:10:67:c2:f2:0c:7d:58:09:45:6f:f1:
72:aa:2a:1e:9a:54:12:38:ef:11:f8:d2:da:52:0f:d9:b9:e6:
69:3c:1d:17:54:ae:26:be:81:54:80:78:97:33:69:95:d9:a2:
98:94:c6:6a:85:a2:d5:60:1e:30:fc:39:1d:ba:fb:08:8b:58:
4e:d6:77:78:5a:98:ec:36:79:95:8e:fe:ab:bb:07:6b:6b:4f:
d3:1a:d1:d6:43:6f:57:43:47:19:d9:31:89:ce:4c:bf:cb:db:
83:2b:70:94:51:ec:ad:7d:d9:73:fb:84:61:45:d6:17:f9:e3:
f7:ad:78:aa:88:11:f0:91:fd:d0:f4:94:94:6c:51:f0:b0:50:
f8:b5:26:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:09:31 2025 by rpki-client