Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/spmH_CvizMaERYmaJBcHGFOrTMQ.roa
File: spmH_CvizMaERYmaJBcHGFOrTMQ.roa (raw, json)
Hash identifier: /jr98gEUiYOIxoCiU6YCzOuWYcNsVSK8BXvw2yTg4qw=
Subject key identifier: B2:99:87:FC:2B:E2:CC:C6:84:45:89:9A:24:17:07:18:53:AB:4C:C4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6806
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/spmH_CvizMaERYmaJBcHGFOrTMQ.roa
Signing time: Wed 04 Jun 2025 11:41:46 +0000
ROA not before: Wed 04 Jun 2025 11:41:46 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26630 (0x6806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 4 11:41:46 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B29987FC2BE2CCC68445899A2417071853AB4CC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a8:4e:cc:20:45:da:7c:4d:37:d1:dc:a7:80:
3e:7d:4b:8d:5c:14:04:10:d7:24:91:49:5c:15:64:
fe:b9:ba:7d:80:0c:db:fa:cb:49:a4:dd:e4:0c:51:
6d:f3:1d:71:a9:09:78:04:10:22:db:b7:19:40:1f:
84:88:1f:7d:cc:d5:0b:a7:f7:7e:c9:57:8f:34:4f:
bb:ee:62:92:69:a6:c4:9d:7a:89:12:48:94:8b:dd:
e0:c6:8e:ae:6f:9b:3a:43:1e:37:b9:1e:8b:66:5a:
26:c7:d7:11:e5:c3:e1:2e:08:a8:82:b0:c1:15:35:
00:1c:b6:f5:21:67:2e:ce:43:93:e0:4b:be:11:7a:
dd:15:18:0a:c5:76:ae:08:84:38:25:70:b9:7b:e0:
f4:8e:fd:f6:81:32:97:55:63:2e:4d:bd:8c:88:51:
26:7d:2a:0a:8e:24:5b:ec:39:39:35:3c:b3:b7:38:
59:26:b3:bc:59:e6:30:aa:3a:b8:0c:ec:3d:57:1b:
66:e3:8f:2a:1c:aa:19:df:e1:f2:a2:df:7d:ef:62:
e6:dd:a9:28:49:3e:18:30:18:63:5c:c8:12:44:93:
78:1c:9f:7f:ac:0d:c5:f7:1a:f5:b0:d6:c0:c2:53:
9d:c1:83:c0:f3:49:7b:fd:37:27:00:f2:c1:68:6b:
a1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:99:87:FC:2B:E2:CC:C6:84:45:89:9A:24:17:07:18:53:AB:4C:C4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/spmH_CvizMaERYmaJBcHGFOrTMQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
44:97:7e:1d:7c:9c:4e:1a:8f:af:98:d0:c3:b1:08:3b:77:2d:
0b:58:56:e3:b8:82:4c:ff:e0:38:9f:4e:08:53:be:bf:88:b1:
49:c7:8c:4f:2e:58:11:47:8f:6f:41:1e:2d:7a:43:d5:08:aa:
39:cb:31:8a:c4:e8:8b:b7:fd:7c:ec:22:31:e7:01:d4:59:58:
24:a5:5d:14:06:28:8e:bc:23:d8:46:11:c1:0a:92:85:5f:6a:
f3:a7:e9:60:13:0a:a6:fe:ca:25:d9:40:77:aa:4c:c5:b8:7f:
03:0f:f1:cd:4b:30:bc:25:5b:cb:0a:d5:2e:c6:42:31:1f:6f:
be:7f:41:c3:25:8a:7f:d3:66:10:17:33:80:e7:bb:7c:ea:e0:
c3:a3:ce:98:e9:e9:ca:e7:5e:bc:05:00:8c:3b:6d:79:bb:56:
02:79:b7:da:08:38:47:72:bc:39:c9:fb:cb:e0:95:92:67:82:
0a:d1:2d:4e:73:0b:64:a0:e9:19:7c:d3:af:5a:25:58:c5:7a:
e9:4e:13:a1:ba:1a:01:e7:9c:7e:53:a5:1f:a2:52:29:cc:f3:
d7:a4:2b:c3:3c:bb:da:03:a2:58:e0:d5:32:de:06:90:58:16:
e6:f5:89:91:b6:32:54:66:1f:6a:cb:4d:44:90:23:16:02:44:
5a:b9:61:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:28:53 2025 by rpki-client