Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0lDPR3NvtKkPuJ7q7c3YxuVggOY.roa
File: 0lDPR3NvtKkPuJ7q7c3YxuVggOY.roa (raw, json)
Hash identifier: uwjrz1G1kEPBW6414u/v3J01yuSScIosz3u2XVp+7eY=
Subject key identifier: D2:50:CF:47:73:6F:B4:A9:0F:B8:9E:EA:ED:CD:D8:C6:E5:60:80:E6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 64F6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0lDPR3NvtKkPuJ7q7c3YxuVggOY.roa
Signing time: Tue 27 May 2025 07:41:26 +0000
ROA not before: Tue 27 May 2025 07:41:26 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25846 (0x64f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 27 07:41:26 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D250CF47736FB4A90FB89EEAEDCDD8C6E56080E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:d4:eb:48:15:cb:3e:24:3c:94:cc:1d:bf:
55:db:96:eb:a1:72:06:96:a0:e9:cb:f2:47:94:c0:
23:94:8d:94:63:b5:a6:0a:1a:b0:be:11:fb:3a:72:
d2:5b:d5:74:0d:f6:de:4c:cb:e2:eb:57:cb:44:19:
cf:c1:52:f4:1e:7c:0d:89:39:bc:f4:28:31:78:68:
12:87:85:c6:c9:0a:af:44:ee:76:5f:c2:e7:86:17:
32:97:62:d9:e7:df:5c:bd:f8:ac:c3:42:fa:f2:4c:
97:a9:e1:78:88:4d:43:dc:30:7b:84:7c:95:ca:24:
dd:ce:38:44:22:a6:2a:db:dd:3a:0f:ad:f7:9a:b5:
fd:41:c2:8e:67:ab:0d:4a:bd:c4:a0:87:89:9f:fe:
38:59:de:8e:33:3c:b6:de:c5:5e:53:b3:73:0f:3e:
88:ad:14:05:e9:65:a1:eb:67:97:96:8f:89:f7:f4:
8d:ff:1b:bb:2a:6e:3a:04:85:7e:8e:04:fb:87:6f:
ce:68:d8:54:de:5e:f6:51:50:6e:ed:ac:b3:85:62:
23:f1:ee:88:6e:c5:f4:38:aa:a3:22:02:ab:8e:cf:
6f:66:e1:2e:24:8e:1b:6d:37:6b:2b:9d:20:8a:ac:
4f:df:15:f1:5f:ba:6f:07:b9:41:a6:67:4f:8b:91:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:50:CF:47:73:6F:B4:A9:0F:B8:9E:EA:ED:CD:D8:C6:E5:60:80:E6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0lDPR3NvtKkPuJ7q7c3YxuVggOY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
3d:ad:c3:22:be:f2:65:3b:1c:3c:d4:fd:db:b1:b6:45:aa:2a:
ee:41:db:cb:79:6d:39:5b:00:7b:b2:d9:6a:c5:e4:a6:81:0c:
2b:53:9f:57:8e:ec:86:d9:83:68:1f:40:f9:1c:99:cd:93:67:
59:49:9d:41:49:d0:0c:59:a1:d2:98:01:8d:92:ed:db:c7:13:
a4:e9:6b:99:0e:5f:3f:26:0f:9a:0c:fe:f8:79:68:60:ce:c0:
f7:af:60:ca:56:2c:bc:72:b4:a6:d1:2c:71:16:08:b3:8e:41:
ab:cc:c8:33:8b:25:d4:70:6f:45:92:11:a3:0f:21:f6:fa:b3:
9f:fa:cd:9b:b7:28:02:5d:11:c9:bc:f9:5f:a1:f4:59:f9:f4:
ba:38:32:13:5b:6c:7e:cb:bb:84:fd:c7:c9:d9:81:99:84:7a:
24:ff:3f:29:22:04:17:d8:90:ea:40:a7:ff:95:2b:e2:60:dd:
bb:20:77:ed:6c:9c:cd:7b:5b:fb:3b:f3:93:07:ed:39:57:38:
b5:a7:f3:92:b9:6e:2a:b7:a6:ae:f0:4a:5a:4e:30:d2:b4:5c:
b5:5b:f5:99:f5:5a:80:e9:0e:b3:b6:2e:ef:96:d2:f9:1f:4e:
40:70:72:d0:cd:f6:66:ed:bd:7d:fa:a0:64:64:88:54:39:d7:
12:dd:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:58:32 2025 by rpki-client