Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RGioF2Xez_UakFPyUvQBatfSiu8.roa
File: RGioF2Xez_UakFPyUvQBatfSiu8.roa (raw, json)
Hash identifier: 55NIzjAgDV+NvU3worBaph5BaR4bOMZdCLVXA+YqSpU=
Subject key identifier: 44:68:A8:17:65:DE:CF:F5:1A:90:53:F2:52:F4:01:6A:D7:D2:8A:EF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6AFE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RGioF2Xez_UakFPyUvQBatfSiu8.roa
Signing time: Thu 12 Jun 2025 09:42:15 +0000
ROA not before: Thu 12 Jun 2025 09:42:15 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27390 (0x6afe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 12 09:42:15 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4468A81765DECFF51A9053F252F4016AD7D28AEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:10:ef:ef:ab:fe:d7:63:18:08:b1:4e:af:
3f:60:47:08:27:2d:88:af:da:2c:b0:bb:43:f4:3f:
ee:8b:3d:c9:e9:45:20:db:9d:fc:a5:68:f3:d5:bd:
64:65:02:68:71:2f:9a:b1:8b:7b:2f:64:7b:78:b5:
da:16:91:4a:29:62:5c:06:ab:52:63:19:46:28:e2:
9b:57:3b:4e:d1:56:ad:53:fd:e2:88:77:a3:9e:79:
29:8e:4f:41:cb:5c:f9:6e:60:ed:3c:7e:72:f4:93:
e2:83:6b:99:45:b4:f1:e8:8a:49:3f:ce:69:16:d6:
d7:e5:ce:4b:fe:dc:e2:f3:a1:3e:48:e0:9d:e9:54:
6b:14:ff:fa:7f:8d:3c:a2:fb:0c:38:78:61:83:fd:
09:4e:26:20:99:ba:22:49:8c:76:e1:c7:e5:eb:10:
aa:c4:9f:13:f5:e8:90:6d:af:e2:3b:18:06:b7:05:
75:db:d7:44:c0:89:63:d4:26:16:39:2b:63:3f:c8:
c2:26:86:97:8a:9d:6e:45:71:7d:22:b8:a1:32:a3:
36:9e:e3:ba:eb:0f:f1:16:21:d2:1a:0b:80:dc:ff:
07:e1:13:b5:ff:c4:96:a3:aa:d9:a1:4d:4f:d3:aa:
e0:06:47:38:42:be:1d:6b:78:eb:ec:88:1d:36:40:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:68:A8:17:65:DE:CF:F5:1A:90:53:F2:52:F4:01:6A:D7:D2:8A:EF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RGioF2Xez_UakFPyUvQBatfSiu8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
8e:76:97:53:ff:6b:bc:c7:23:c3:3a:65:5f:3c:62:be:34:38:
45:9e:d6:07:2c:c7:4e:5d:36:7b:32:93:99:88:39:ad:36:d6:
c2:36:5c:a3:12:ed:63:9e:23:30:a9:82:f8:e5:67:84:84:f6:
92:5c:6f:13:10:cf:08:78:df:e8:4e:89:32:a8:6d:22:cd:91:
23:aa:6b:48:85:11:fb:c6:4e:44:dc:de:2f:f8:69:79:7c:b1:
24:ed:43:f6:c2:66:ea:03:f7:81:42:48:40:9a:e7:50:75:51:
78:4f:f1:36:02:a6:24:f4:24:c7:86:c1:b9:fc:a9:31:17:ef:
6b:d9:9a:34:7f:8a:21:e5:31:af:10:fa:f1:7e:2b:17:59:fc:
4f:0d:eb:d9:9e:31:5d:50:31:5f:14:ff:59:00:4a:da:b7:0a:
28:81:3e:99:5d:3f:bb:40:f7:d9:d0:8f:95:99:a1:36:1b:f5:
21:a7:ce:b6:3c:08:df:9d:e0:1c:19:cf:3b:10:c6:11:f8:f3:
06:40:1f:e2:db:49:1f:0e:f0:6b:bf:7a:3d:09:4c:13:1b:0a:
35:17:3b:e3:2a:d4:00:8c:81:fc:cf:88:4f:b4:50:75:11:d0:
62:a1:46:95:21:7a:ff:fa:3d:1b:a5:a1:38:b8:e6:dd:fd:99:
5d:2c:6c:49
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICav4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MTIw
OTQyMTVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ0NjhBODE3NjVERUNG
RjUxQTkwNTNGMjUyRjQwMTZBRDdEMjhBRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqRRDv76v+12MYCLFOrz9gRwgnLYiv2iywu0P0P+6LPcnpRSDb
nfylaPPVvWRlAmhxL5qxi3svZHt4tdoWkUopYlwGq1JjGUYo4ptXO07RVq1T/eKI
d6OeeSmOT0HLXPluYO08fnL0k+KDa5lFtPHoikk/zmkW1tflzkv+3OLzoT5I4J3p
VGsU//p/jTyi+ww4eGGD/QlOJiCZuiJJjHbhx+XrEKrEnxP16JBtr+I7GAa3BXXb
10TAiWPUJhY5K2M/yMImhpeKnW5FcX0iuKEyozae47rrD/EWIdIaC4Dc/wfhE7X/
xJajqtmhTU/TquAGRzhCvh1reOvsiB02QAzrAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQURGioF2Xez/UakFPyUvQBatfSiu8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1JHaW9GMlhlel9VYWtG
UHlVdlFCYXRmU2l1OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQCOdpdT
/2u8xyPDOmVfPGK+NDhFntYHLMdOXTZ7MpOZiDmtNtbCNlyjEu1jniMwqYL45WeE
hPaSXG8TEM8IeN/oTokyqG0izZEjqmtIhRH7xk5E3N4v+Gl5fLEk7UP2wmbqA/eB
QkhAmudQdVF4T/E2AqYk9CTHhsG5/KkxF+9r2Zo0f4oh5TGvEPrxfisXWfxPDevZ
njFdUDFfFP9ZAEratwoogT6ZXT+7QPfZ0I+VmaE2G/Uhp862PAjfneAcGc87EMYR
+PMGQB/i20kfDvBrv3o9CUwTGwo1FzvjKtQAjIH8z4hPtFB1EdBioUaVIXr/+j0b
paE4uObd/ZldLGxJ
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:35:34 2025 by rpki-client