Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xs0IIY6Tsma6JJZSLXk1eFaEnCI.roa
File: xs0IIY6Tsma6JJZSLXk1eFaEnCI.roa (raw, json)
Hash identifier: zchf3q7snLmLqDP0ZRgVng6SUFyoAdsadlASwGB194I=
Subject key identifier: C6:CD:08:21:8E:93:B2:66:BA:24:96:52:2D:79:35:78:56:84:9C:22
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6966
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xs0IIY6Tsma6JJZSLXk1eFaEnCI.roa
Signing time: Sun 08 Jun 2025 03:41:59 +0000
ROA not before: Sun 08 Jun 2025 03:41:59 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26982 (0x6966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 8 03:41:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C6CD08218E93B266BA2496522D79357856849C22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:4c:7e:be:b2:94:91:5a:0c:73:29:51:98:
d0:db:d0:37:be:73:b0:b7:48:4c:d3:e6:a7:26:80:
18:62:dc:72:12:2d:70:57:51:3f:f0:36:25:3a:4a:
f4:6e:ac:e1:6b:0c:16:0d:00:70:43:10:81:b3:f6:
4b:6a:e2:14:91:3a:cd:28:12:70:9c:a7:90:4f:20:
59:37:59:88:7f:91:f8:47:7e:bd:c4:4b:ba:66:6a:
05:c1:8b:1d:dc:a7:5a:15:25:21:f8:5f:51:1b:0d:
c3:5e:50:9a:6c:e9:84:fa:0c:f8:80:88:5d:0d:41:
40:23:cc:7e:30:93:58:5e:32:dd:e7:36:c4:61:eb:
eb:18:42:99:7a:0c:36:e5:6d:3e:55:4c:45:83:15:
37:53:12:da:62:c8:77:45:53:41:47:55:51:9c:0f:
33:b0:be:97:c1:47:2e:d2:a5:05:96:9e:6b:d7:f1:
2e:41:fa:2e:62:2d:7b:b1:51:21:fd:a4:5a:22:fb:
ad:0e:cb:11:01:91:d5:ec:54:73:f3:2a:3d:6a:86:
03:b8:11:d7:97:7f:3b:cd:8c:2f:22:df:b3:4e:cc:
b4:02:b4:92:14:43:c8:1b:e8:7f:01:36:09:1e:33:
69:10:ed:c6:e6:9b:1c:f2:64:55:21:88:38:2a:26:
11:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CD:08:21:8E:93:B2:66:BA:24:96:52:2D:79:35:78:56:84:9C:22
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xs0IIY6Tsma6JJZSLXk1eFaEnCI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
69:6f:9a:9e:68:74:d3:08:df:24:e2:b4:77:21:2c:66:33:84:
6d:d2:a8:e8:c2:d3:31:b8:dd:d0:9b:84:3c:72:48:ca:55:05:
a2:d9:63:13:fc:d4:34:a2:ce:fe:c8:76:aa:22:16:d0:9a:68:
5c:c4:99:71:23:99:fb:9a:0b:86:76:5a:92:fa:fd:f6:e2:62:
08:fe:38:ac:fb:36:b1:62:a5:ca:ae:9b:d9:cd:43:c5:cb:b3:
d8:d7:f7:2e:39:45:a6:c8:b7:6a:4e:f7:8b:f7:cb:8b:47:08:
a7:28:36:4c:13:36:72:99:16:a0:17:b0:8b:bf:7a:fc:fc:8f:
64:a6:54:db:1c:db:77:fb:48:57:a2:65:05:ef:94:3d:20:80:
ab:71:fe:50:ad:da:1a:96:46:f6:6c:2e:89:89:f7:7a:d4:a9:
d4:8a:9f:ed:64:25:93:76:16:35:ef:22:cd:f2:1a:60:f1:1f:
79:c1:1b:59:6f:71:9d:02:b7:2c:d8:8b:d3:bf:17:88:1d:ec:
30:de:48:61:5e:18:90:f9:bc:1e:f9:2b:b5:67:ee:43:91:3a:
d6:79:00:3f:e2:c5:80:06:e8:71:cc:4a:7d:81:46:89:b5:51:
39:8a:3b:c5:05:fa:80:18:4b:4f:0b:ec:eb:31:79:02:0d:c7:
3a:81:96:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:46:18 2025 by rpki-client