Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/tSb6h4lNrBWWUbNkBf7Jk1C_kXA.roa
File: tSb6h4lNrBWWUbNkBf7Jk1C_kXA.roa (raw, json)
Hash identifier: /dkS8XTJJE8AlwPFv5ptDaR1GJIxLdRl1ScDEFB24qk=
Subject key identifier: B5:26:FA:87:89:4D:AC:15:96:51:B3:64:05:FE:C9:93:50:BF:91:70
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 676C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tSb6h4lNrBWWUbNkBf7Jk1C_kXA.roa
Signing time: Mon 02 Jun 2025 21:11:40 +0000
ROA not before: Mon 02 Jun 2025 21:11:40 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26476 (0x676c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 2 21:11:40 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B526FA87894DAC159651B36405FEC99350BF9170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:03:ed:f1:ea:a4:c3:c9:16:db:bf:48:9b:
1a:82:87:ce:fd:f3:65:02:05:21:0c:67:5c:e0:64:
ee:c7:3c:44:1d:5a:f9:cd:78:ba:94:06:a0:14:c7:
bf:00:fe:45:1f:2e:e7:91:be:eb:d9:c4:c2:47:a8:
5b:a2:68:7e:51:a5:7e:44:8e:f9:cd:76:e6:4e:ff:
3a:0e:20:e0:58:44:f8:84:aa:8f:e0:8f:77:b0:bc:
63:86:77:94:1a:92:4f:6d:3b:1e:75:3c:70:7e:98:
47:43:3a:14:18:20:88:81:b3:d8:24:07:14:a1:c7:
23:f6:91:b9:00:10:e0:8d:0a:33:b1:08:fc:ad:6d:
fb:1a:22:33:ea:74:ce:9c:24:d8:ba:03:5d:b2:91:
80:d4:e3:a0:e4:df:d2:ae:51:ea:01:71:a3:83:71:
74:ae:a3:cf:4f:7a:1d:dc:fe:09:66:a8:f9:a0:0c:
cf:38:86:45:90:d8:50:1e:d0:df:fa:00:8e:a7:89:
56:06:b6:06:d1:d7:4b:6c:e3:86:00:3b:d7:0d:18:
f1:96:80:39:7a:11:3e:06:f3:be:a4:9b:66:81:10:
9e:b4:53:46:ef:c8:05:77:89:d4:89:8d:38:9e:df:
36:6e:90:49:aa:29:28:e6:c6:7b:62:9a:07:b8:95:
c5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:26:FA:87:89:4D:AC:15:96:51:B3:64:05:FE:C9:93:50:BF:91:70
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tSb6h4lNrBWWUbNkBf7Jk1C_kXA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
24:2a:57:dc:2a:3e:b8:87:e2:fa:f4:44:b5:c5:45:6e:5d:16:
2c:76:d6:fa:8c:44:30:a1:a6:54:f3:da:a5:9a:57:88:06:8f:
d3:a0:43:83:c7:0e:6a:66:70:28:3f:c2:06:5c:ad:6d:7c:23:
0f:ec:49:19:a7:81:ec:0e:1c:02:ba:57:52:e6:8c:f9:ed:5e:
5b:72:90:ed:8b:c7:2d:15:33:8d:4f:05:a6:02:d2:c9:c4:51:
c9:b6:e4:69:2b:b2:9a:33:6c:56:e0:6c:92:b5:34:10:3e:cc:
21:b2:37:91:e2:d2:70:85:42:dc:77:16:ef:99:46:8f:ae:8e:
e1:07:90:54:ed:67:7b:f5:fa:77:3f:60:02:96:22:74:68:37:
8c:4c:5d:6b:4d:99:af:34:0f:31:95:86:d0:f6:42:17:46:da:
ea:4c:67:61:32:01:2e:cb:9c:94:db:54:2e:af:ac:ef:cc:37:
f2:d5:ec:20:62:39:b4:a9:ea:bb:63:03:9b:a0:f6:fd:ac:3a:
be:9d:a8:ee:82:4a:16:75:3a:1b:d1:c8:d5:f0:4d:e0:e8:76:
83:76:27:90:39:83:11:89:1a:44:01:5c:e4:5d:34:1f:d3:6b:
c3:9d:10:92:30:1c:cc:c3:a6:0a:1c:c1:b1:47:86:30:b4:54:
04:04:ca:61
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICZ2wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MDIy
MTExNDBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEI1MjZGQTg3ODk0REFD
MTU5NjUxQjM2NDA1RkVDOTkzNTBCRjkxNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5vAPt8eqkw8kW279ImxqCh87982UCBSEMZ1zgZO7HPEQdWvnN
eLqUBqAUx78A/kUfLueRvuvZxMJHqFuiaH5RpX5EjvnNduZO/zoOIOBYRPiEqo/g
j3ewvGOGd5Qakk9tOx51PHB+mEdDOhQYIIiBs9gkBxShxyP2kbkAEOCNCjOxCPyt
bfsaIjPqdM6cJNi6A12ykYDU46Dk39KuUeoBcaODcXSuo89Peh3c/glmqPmgDM84
hkWQ2FAe0N/6AI6niVYGtgbR10ts44YAO9cNGPGWgDl6ET4G876km2aBEJ60U0bv
yAV3idSJjTie3zZukEmqKSjmxntimge4lcVpAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUtSb6h4lNrBWWUbNkBf7Jk1C/kXAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3RTYjZoNGxOckJXV1Vi
TmtCZjdKazFDX2tYQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAkKlfc
Kj64h+L69ES1xUVuXRYsdtb6jEQwoaZU89qlmleIBo/ToEODxw5qZnAoP8IGXK1t
fCMP7EkZp4HsDhwCuldS5oz57V5bcpDti8ctFTONTwWmAtLJxFHJtuRpK7KaM2xW
4GyStTQQPswhsjeR4tJwhULcdxbvmUaPro7hB5BU7Wd79fp3P2ACliJ0aDeMTF1r
TZmvNA8xlYbQ9kIXRtrqTGdhMgEuy5yU21Qur6zvzDfy1ewgYjm0qeq7YwOboPb9
rDq+najugkoWdTob0cjV8E3g6HaDdieQOYMRiRpEAVzkXTQf02vDnRCSMBzMw6YK
HMGxR4YwtFQEBMph
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:31:51 2025 by rpki-client