Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/tKSCdGmsvxZUaA9w60edd4ZUMA4.roa
File: tKSCdGmsvxZUaA9w60edd4ZUMA4.roa (raw, json)
Hash identifier: n8VpIANbWNDHjMk8qb4OG4xbyfB09PpiPhmnosDVZM4=
Subject key identifier: B4:A4:82:74:69:AC:BF:16:54:68:0F:70:EB:47:9D:77:86:54:30:0E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6760
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tKSCdGmsvxZUaA9w60edd4ZUMA4.roa
Signing time: Mon 02 Jun 2025 18:11:51 +0000
ROA not before: Mon 02 Jun 2025 18:11:51 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26464 (0x6760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 2 18:11:51 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B4A4827469ACBF1654680F70EB479D778654300E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:ec:06:ab:94:8e:26:b5:e6:50:13:fe:1f:
99:d5:a3:b7:a0:65:da:ef:65:d9:28:aa:c8:10:9a:
f1:ad:01:a9:a4:af:2b:e3:6f:2f:6e:59:74:91:c5:
05:42:03:1f:b6:03:0e:a3:3e:64:a2:c6:be:26:d6:
02:c5:78:7b:a1:d0:ea:ca:79:34:0f:51:1b:0c:55:
44:12:43:46:3f:31:a2:25:72:fc:1b:3c:8f:b2:1e:
fe:6b:85:89:31:53:38:cd:d8:a2:ce:3a:8c:5c:17:
79:67:05:55:96:3a:cb:e5:80:e7:87:8a:22:86:e5:
54:39:d7:ca:7e:8b:a3:73:ef:fc:b2:e4:f3:4e:5b:
4d:2b:db:65:f0:e9:09:cd:a3:b4:11:0c:42:99:c3:
99:a7:26:99:3d:be:a5:90:1c:e7:c7:c0:74:6b:e4:
4f:c2:b1:77:75:a7:13:99:52:7f:90:ab:ca:40:73:
a2:3f:77:08:6e:2d:08:38:9f:3a:94:01:26:95:5d:
6e:6c:59:a6:49:7d:63:8a:41:c2:ff:49:61:b4:04:
e5:12:c6:cb:fd:48:1e:7f:38:29:d0:59:8b:fe:f0:
b7:e1:2b:2b:e2:f9:34:ba:5b:cf:a3:cc:3d:97:7c:
79:ac:ba:89:81:9e:5a:4f:2f:22:de:0c:3c:5b:3d:
67:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A4:82:74:69:AC:BF:16:54:68:0F:70:EB:47:9D:77:86:54:30:0E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tKSCdGmsvxZUaA9w60edd4ZUMA4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
0b:be:bc:68:c5:51:91:9c:e8:ff:f5:47:f8:24:cf:71:4c:68:
7a:0d:2c:5a:32:98:bc:3b:bb:d9:b9:e3:c7:02:9c:04:b2:9d:
6f:2a:a2:2d:72:b3:7a:0b:2e:d9:dd:eb:5c:9f:c9:5f:a1:22:
78:dc:b4:bf:ea:1e:40:eb:c5:94:5c:3b:0b:23:2f:75:30:0e:
6f:1d:e2:ae:f5:3f:85:18:47:e6:8d:79:6e:30:c1:53:40:5a:
11:e3:2c:e7:42:d2:79:34:7e:38:d4:b0:24:6c:be:d5:98:81:
f6:75:ea:b2:37:9a:b6:70:57:42:ba:53:00:93:19:73:c8:57:
dd:c8:3e:fa:fd:22:75:51:94:25:7d:19:c2:c7:9b:0d:ff:64:
07:c2:76:29:c6:b2:2e:88:a8:f3:8f:e0:ec:c2:12:14:37:b0:
70:38:fa:7c:63:10:3e:2b:fd:77:4e:a1:c4:56:0c:78:f9:dc:
83:e8:d2:bf:55:05:78:b3:55:80:b5:1e:da:09:9b:e9:0a:1b:
cd:ae:db:86:b1:ff:ad:a8:d5:0f:ac:b6:d1:ab:ca:3a:47:fb:
75:c4:aa:e0:1c:a5:3b:a2:83:16:1e:3f:53:aa:1a:96:e5:1d:
37:e0:78:bc:3a:80:2b:83:87:05:90:a6:07:e7:7b:6f:45:0b:
8a:8a:21:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:52:44 2025 by rpki-client