Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/d-oM1wZEjHzT1klt945ttiuatd0.roa
File: d-oM1wZEjHzT1klt945ttiuatd0.roa (raw, json)
Hash identifier: qUlkU7V7Nxf7uoRuosdZQ0v3JAYXrglXQtz7a1MpjzE=
Subject key identifier: 77:EA:0C:D7:06:44:8C:7C:D3:D6:49:6D:F7:8E:6D:B6:2B:9A:B5:DD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6A7C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/d-oM1wZEjHzT1klt945ttiuatd0.roa
Signing time: Wed 11 Jun 2025 01:12:13 +0000
ROA not before: Wed 11 Jun 2025 01:12:13 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27260 (0x6a7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 11 01:12:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=77EA0CD706448C7CD3D6496DF78E6DB62B9AB5DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:af:63:f5:8c:9f:63:d9:57:4e:0e:70:90:
cf:c2:a5:92:83:6a:5b:74:09:18:e7:b9:82:5c:0d:
1d:df:7c:88:d3:15:d8:01:64:fe:78:42:28:51:5e:
d1:2f:1f:6e:fb:a6:8d:1f:59:6d:c7:80:44:0d:51:
52:c0:81:92:11:f5:7d:99:be:e9:b7:f3:ef:f2:d1:
df:f3:70:39:96:b2:6e:55:04:51:01:bd:41:63:e5:
3f:75:ca:0c:83:79:2e:c5:de:2e:54:0e:dd:8c:34:
a3:f6:ed:3b:7a:8a:ef:e2:01:3f:21:64:c1:6b:fd:
13:e7:6e:ea:0e:e1:a2:ce:e2:d3:39:69:3c:67:a6:
12:4b:fb:3d:cc:d2:f9:a0:a1:6c:e7:ad:d3:6c:23:
18:0d:18:ba:c0:c2:13:fe:7c:5e:fa:f7:f3:d0:66:
ea:ca:0d:53:44:8a:19:6c:30:bd:40:2e:48:b4:8d:
af:ae:dc:36:5d:37:79:cf:b0:1c:c9:af:97:d7:19:
73:6c:40:fd:ce:8a:f4:44:f2:89:8b:91:75:40:6d:
c9:5f:8e:e3:01:bd:c6:1b:ce:2d:1e:af:b7:43:50:
5a:e0:56:32:e0:81:9b:c9:a5:54:8a:f8:2d:27:a2:
c3:9d:49:03:a5:e4:8d:8e:0c:36:13:e4:b6:27:b5:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EA:0C:D7:06:44:8C:7C:D3:D6:49:6D:F7:8E:6D:B6:2B:9A:B5:DD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/d-oM1wZEjHzT1klt945ttiuatd0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
59:0f:15:e6:b6:7c:09:cd:d4:7e:ac:d7:1c:f5:52:e5:3a:e4:
57:a2:d5:86:57:4c:f9:da:74:33:01:87:9d:e3:c1:3f:41:b8:
13:0d:6e:df:fa:61:ee:af:e0:d6:79:0a:f2:29:d1:19:01:90:
0e:88:49:cd:c2:90:a2:05:b9:0d:a7:07:69:5b:d8:e9:a1:0c:
79:65:58:9d:c2:b2:99:66:40:3c:c4:5b:40:c0:7a:ed:64:d3:
48:0c:5d:35:81:ee:8c:69:ed:45:37:95:92:52:8c:d3:86:39:
d1:09:d8:66:d5:cd:72:9d:60:48:ff:64:10:d0:ef:af:2e:21:
70:4e:f4:9a:20:5f:24:dc:61:9e:b2:4a:ef:e9:dd:54:22:41:
75:7d:79:b6:99:db:3b:02:48:d7:82:1c:85:28:2e:33:c7:f3:
cd:40:27:6f:94:af:1c:c9:7f:e8:0f:32:63:c7:86:13:5e:26:
7d:04:c1:62:91:d5:c2:20:c7:b3:32:9a:20:f4:32:f0:02:02:
e5:81:ff:9b:5e:5a:2b:2c:8c:30:2c:80:c1:1b:cc:67:61:6a:
3a:9f:15:16:14:99:10:f5:31:ef:19:7f:2b:15:23:7d:c0:c6:
23:ae:77:52:83:5c:4a:35:63:0a:dd:b6:bf:32:95:65:a2:2c:
d7:6a:f7:f4
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICanwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MTEw
MTEyMTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc3RUEwQ0Q3MDY0NDhD
N0NEM0Q2NDk2REY3OEU2REI2MkI5QUI1REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC42q9j9YyfY9lXTg5wkM/CpZKDalt0CRjnuYJcDR3ffIjTFdgB
ZP54QihRXtEvH277po0fWW3HgEQNUVLAgZIR9X2Zvum38+/y0d/zcDmWsm5VBFEB
vUFj5T91ygyDeS7F3i5UDt2MNKP27Tt6iu/iAT8hZMFr/RPnbuoO4aLO4tM5aTxn
phJL+z3M0vmgoWznrdNsIxgNGLrAwhP+fF769/PQZurKDVNEihlsML1ALki0ja+u
3DZdN3nPsBzJr5fXGXNsQP3OivRE8omLkXVAbclfjuMBvcYbzi0er7dDUFrgVjLg
gZvJpVSK+C0nosOdSQOl5I2ODDYT5LYntfXpAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUd+oM1wZEjHzT1klt945ttiuatd0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2Qtb00xd1pFakh6VDFr
bHQ5NDV0dGl1YXRkMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBZDxXm
tnwJzdR+rNcc9VLlOuRXotWGV0z52nQzAYed48E/QbgTDW7f+mHur+DWeQryKdEZ
AZAOiEnNwpCiBbkNpwdpW9jpoQx5ZVidwrKZZkA8xFtAwHrtZNNIDF01ge6Mae1F
N5WSUozThjnRCdhm1c1ynWBI/2QQ0O+vLiFwTvSaIF8k3GGeskrv6d1UIkF1fXm2
mds7AkjXghyFKC4zx/PNQCdvlK8cyX/oDzJjx4YTXiZ9BMFikdXCIMezMpog9DLw
AgLlgf+bXlorLIwwLIDBG8xnYWo6nxUWFJkQ9THvGX8rFSN9wMYjrndSg1xKNWMK
3ba/MpVloizXavf0
-----END CERTIFICATE-----
Generated at Fri Jun 20 15:11:36 2025 by rpki-client