Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/2VnPCIMv8zO9G5gK1zJgu58FMD4.roa
File: 2VnPCIMv8zO9G5gK1zJgu58FMD4.roa (raw, json)
Hash identifier: q4IEKsYYtQYW442PuVtWjFx27PkCu1iYW9zTaiJ71GE=
Subject key identifier: D9:59:CF:08:83:2F:F3:33:BD:1B:98:0A:D7:32:60:BB:9F:05:30:3E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6348
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2VnPCIMv8zO9G5gK1zJgu58FMD4.roa
Signing time: Thu 22 May 2025 20:10:42 +0000
ROA not before: Thu 22 May 2025 20:10:42 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25416 (0x6348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 22 20:10:42 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D959CF08832FF333BD1B980AD73260BB9F05303E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:87:2b:bc:a1:23:1b:ce:6f:36:bf:96:12:
cd:e9:c0:71:c9:26:19:d2:7c:84:02:50:d2:8e:b4:
3a:a1:f0:80:d6:b7:eb:25:6f:1b:bc:22:84:35:8c:
23:8a:4a:f2:4d:b5:35:8c:71:d6:ad:d5:af:20:d4:
47:4f:4f:02:47:15:98:e8:0c:8d:0c:14:88:f4:ef:
3e:c6:c3:8e:36:ab:88:10:c5:e6:79:d2:36:a5:58:
e0:92:65:ca:39:92:49:ca:40:41:86:81:d7:cd:1d:
f9:3e:78:63:7b:2f:bd:98:49:b0:3a:95:03:cc:30:
a1:68:f9:c2:93:91:99:2e:ce:fa:48:f2:78:aa:4c:
4d:6f:9a:7a:a2:f1:65:66:a6:b4:4b:0d:e7:19:1e:
a0:35:d1:2c:93:f3:d0:37:60:bb:f7:29:2f:23:30:
42:8e:72:d7:a5:65:58:8d:1c:00:5e:97:95:0c:f5:
d3:22:0e:38:87:ee:34:8e:80:9d:06:1e:a9:18:53:
00:03:89:be:e7:b1:0e:d3:5a:57:66:b6:fe:3a:bc:
34:9e:25:3e:22:ee:79:fd:7c:25:ee:9f:30:a1:a6:
95:a5:0d:43:e9:34:bf:a1:a6:89:58:4f:2e:18:6b:
89:fa:d3:98:5d:1a:d5:62:a9:41:dc:64:ce:fd:d6:
da:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:59:CF:08:83:2F:F3:33:BD:1B:98:0A:D7:32:60:BB:9F:05:30:3E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2VnPCIMv8zO9G5gK1zJgu58FMD4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
2e:2d:6c:e4:66:dc:b8:e6:77:45:b8:ac:bc:6e:89:55:5b:71:
06:e1:e7:e3:73:4c:01:9a:00:0c:a9:43:48:2b:ac:21:91:b9:
b6:48:32:af:41:b3:57:ad:d5:2b:fa:fe:a9:50:7e:0b:f7:82:
80:54:c4:a9:13:13:ca:c2:6e:80:ba:56:6a:f7:51:18:99:72:
4f:4f:11:9f:aa:f3:4c:d9:36:ae:15:94:de:ea:63:62:6f:95:
40:ef:d7:17:8c:e2:dd:d2:a4:e1:fb:da:f4:6a:0c:7b:7e:d8:
cd:d1:d0:ec:7f:d7:a5:cc:8b:86:9e:a8:7c:85:47:97:7b:77:
10:87:f9:10:56:2d:31:68:e4:65:46:c0:67:5f:6b:f5:98:5f:
a5:92:54:21:94:32:9f:5c:e7:b4:0a:cf:75:cb:88:b5:4d:27:
78:df:d5:4a:6e:38:12:0e:dd:3d:95:ea:b5:c3:c8:a5:04:97:
f4:26:b9:cf:a9:8a:6d:28:ea:56:94:11:6a:a9:bb:72:c7:01:
8e:ad:af:25:4f:0a:73:ec:6d:bb:64:19:e6:72:89:77:80:48:
7d:9c:a2:ca:4b:4f:5c:89:72:ae:92:b4:e0:91:3c:cb:cd:de:
a1:09:bc:0e:a7:40:af:3c:65:50:75:a5:60:27:93:23:c4:79:
fc:5a:f7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:55:09 2025 by rpki-client