Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/USeyvmvaIHw0KvFEVXIBTv22ek0.roa
File: USeyvmvaIHw0KvFEVXIBTv22ek0.roa (raw, json)
Hash identifier: mIQ/U8hCL4b5VLeBFplke13QHQWhE/ywrBaXi6yOBek=
Subject key identifier: 51:27:B2:BE:6B:DA:20:7C:34:2A:F1:44:55:72:01:4E:FD:B6:7A:4D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6894
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/USeyvmvaIHw0KvFEVXIBTv22ek0.roa
Signing time: Thu 05 Jun 2025 23:11:42 +0000
ROA not before: Thu 05 Jun 2025 23:11:42 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26772 (0x6894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 5 23:11:42 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5127B2BE6BDA207C342AF1445572014EFDB67A4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7f:67:93:2d:08:10:d2:d2:b3:50:81:99:40:
2d:61:a3:0b:60:98:93:9c:ee:e6:a4:61:8a:07:78:
91:e4:ab:9a:f8:e1:da:1a:f2:80:97:5c:22:e0:eb:
71:62:58:19:dd:fb:fa:41:66:52:45:ac:66:c7:69:
fb:11:2f:9d:a2:ec:7b:8b:1a:05:c8:0a:13:b7:aa:
4c:f3:da:14:12:77:4b:70:32:7a:76:a4:b2:c0:43:
5e:7c:23:75:59:b9:1b:e8:de:4c:d8:36:54:af:a2:
29:f5:ef:9a:aa:74:6c:8c:d4:1b:50:b5:62:6b:a9:
37:0a:a7:21:71:2e:d0:aa:e6:c2:f1:68:8a:ed:ad:
cb:82:0e:4a:da:b1:3d:0d:77:25:57:23:00:74:e6:
42:c7:a6:1c:86:ca:16:56:13:fc:e3:2e:14:ee:f5:
bf:6e:50:41:42:cf:bf:44:a7:57:a0:e6:43:2e:0a:
fb:93:e3:14:6c:b5:e9:9b:29:33:51:bc:2e:f5:a6:
6f:2b:59:b0:a0:6e:50:a1:8f:22:50:36:0c:ed:e5:
89:9c:9e:09:5e:7b:f3:ca:20:41:75:27:64:38:dd:
25:ba:0c:51:9f:be:f1:7e:80:ce:fe:8c:a2:d6:f5:
94:37:c4:66:de:78:a6:75:29:6f:ce:0b:04:59:de:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:27:B2:BE:6B:DA:20:7C:34:2A:F1:44:55:72:01:4E:FD:B6:7A:4D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/USeyvmvaIHw0KvFEVXIBTv22ek0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
0f:4b:3e:ea:37:35:81:bd:fb:20:3d:2e:1f:af:44:94:2c:84:
ac:5c:4f:68:ff:40:4b:c2:1a:fa:75:4a:7e:1d:83:b9:74:6c:
c0:54:c1:f5:6c:6a:4b:f3:70:cd:d4:07:93:ca:b7:f5:1c:3f:
33:61:25:46:97:49:c2:50:0b:cf:b5:9d:11:32:c6:28:75:bd:
6b:4f:4a:87:39:42:ea:4e:ab:cd:9c:e3:02:48:fa:1d:c0:e9:
50:18:05:63:1f:7f:f4:ca:ed:48:9c:a0:fd:bd:4e:16:dd:1b:
ed:74:98:0c:5d:70:c2:71:75:41:a9:95:cb:2d:34:ba:db:49:
48:e5:12:f4:5a:47:c4:4a:94:7c:22:e2:7a:b5:9f:a3:f6:ca:
59:d8:67:d5:e3:14:dc:cb:02:41:b1:e9:74:05:25:88:36:e5:
c4:bb:f1:6f:c3:20:12:1b:fb:6b:d1:4f:74:a8:28:82:ce:66:
63:24:67:78:f9:cb:9c:aa:37:e8:81:6d:1a:25:89:09:42:ff:
ce:14:6d:55:cd:d5:6e:a1:91:fd:31:de:db:3d:e2:ae:cb:7d:
96:ce:48:5c:54:c6:23:38:11:f6:de:eb:a8:ff:96:68:f3:1e:
bd:cd:0f:d8:73:5e:52:4e:67:47:b7:46:ad:22:e0:22:7a:b9:
95:d6:bf:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:54:02 2025 by rpki-client