Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/p3hhidmYs4xTR18IWf7fh_SWee8.roa
File: p3hhidmYs4xTR18IWf7fh_SWee8.roa (raw, json)
Hash identifier: +0If6qDhV3BYSiI8qd4uMQxZiHOA4MKk1DVUHnrcCUY=
Subject key identifier: A7:78:61:89:D9:98:B3:8C:53:47:5F:08:59:FE:DF:87:F4:96:79:EF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6A3E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/p3hhidmYs4xTR18IWf7fh_SWee8.roa
Signing time: Tue 10 Jun 2025 09:42:09 +0000
ROA not before: Tue 10 Jun 2025 09:42:09 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27198 (0x6a3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 10 09:42:09 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A7786189D998B38C53475F0859FEDF87F49679EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:a4:5d:48:3f:a3:f0:ed:82:be:77:08:29:
11:54:aa:49:80:8c:6c:8c:f1:0c:74:39:34:75:d8:
18:eb:95:83:c6:75:64:47:f4:d4:24:61:08:26:90:
c0:e6:8d:c9:92:a6:00:38:50:33:52:86:6f:26:b4:
5b:89:c5:ee:98:e6:60:01:b6:43:50:8a:41:0f:19:
23:47:16:d8:53:d9:5a:10:ab:f7:65:ce:55:99:f7:
59:46:ab:74:f9:cc:65:67:b1:7c:ff:b0:24:6f:95:
45:5b:7c:81:3a:9e:4e:34:25:6b:ee:5f:12:27:68:
1e:da:5b:87:66:96:e5:ee:9c:b8:76:82:ba:d6:0c:
89:6b:1f:2e:e2:91:f9:a4:21:e6:3b:b5:04:25:0b:
a1:bc:f3:a9:13:e5:6b:0c:21:80:74:ef:2f:5d:93:
be:59:f6:f9:d8:1b:30:9b:ab:60:46:88:c9:9e:d4:
3c:1f:74:21:95:da:38:c3:6e:7a:b0:30:75:68:18:
de:2a:24:02:6c:fd:ef:bc:1e:a9:08:b1:59:f9:01:
0c:7d:72:86:b4:14:02:8d:a8:1c:0a:2b:e9:2b:f2:
b2:fa:af:06:b3:43:b6:39:d4:43:e7:40:c4:4e:c1:
10:5e:55:37:01:55:74:f0:7f:9f:c6:b1:77:db:b9:
8d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:78:61:89:D9:98:B3:8C:53:47:5F:08:59:FE:DF:87:F4:96:79:EF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/p3hhidmYs4xTR18IWf7fh_SWee8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
38:61:5d:70:dd:6c:10:e4:53:0c:e0:ce:62:4a:3a:5a:e5:19:
ee:64:d8:83:53:a1:d2:a6:1d:74:fe:5f:7b:2b:9f:52:32:33:
64:e7:31:6e:ed:a1:3e:5c:49:65:70:88:83:28:99:6e:99:44:
59:e5:07:77:3d:47:ef:46:0d:05:79:d8:d6:c2:9c:9c:c3:06:
42:d4:33:09:5f:b1:63:bd:84:ea:01:ab:2b:7f:3f:a5:97:7b:
0e:b5:ff:fb:84:dd:79:c1:7b:1a:90:b6:c5:97:e1:b5:b9:ac:
39:53:be:6f:87:f5:73:62:44:78:76:d2:2d:44:38:5c:c3:5f:
35:f4:34:95:c4:ad:a6:2a:8f:0c:97:bf:77:eb:7f:85:74:25:
8c:e0:0f:37:e9:0f:1e:ab:9b:a1:76:9a:4d:99:16:31:84:2f:
d4:5b:60:13:f1:a6:3c:ed:ae:89:45:90:a7:c1:42:91:11:0d:
52:c8:6b:e1:24:39:2a:92:30:5d:83:53:dc:bb:2b:4f:cb:39:
6c:4e:cc:4e:db:09:f3:d3:18:9a:81:e7:76:66:12:2f:4e:fd:
4f:27:1f:c2:73:80:e3:1a:b4:af:1a:2d:8c:aa:43:5c:7b:3c:
4b:cd:a3:72:ef:60:94:9d:c7:d7:47:e7:35:d3:23:a5:29:be:
e2:bb:ef:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:19:58 2025 by rpki-client