Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/HaPx3H__ZPpyDnqV1MhzGXNIyxo.roa
File: HaPx3H__ZPpyDnqV1MhzGXNIyxo.roa (raw, json)
Hash identifier: ukDryJcDtd2aC5Hkj7Ms4QCkbCRYUfqRY8euHiqvSEE=
Subject key identifier: 1D:A3:F1:DC:7F:FF:64:FA:72:0E:7A:95:D4:C8:73:19:73:48:CB:1A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6280
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HaPx3H__ZPpyDnqV1MhzGXNIyxo.roa
Signing time: Tue 20 May 2025 18:10:41 +0000
ROA not before: Tue 20 May 2025 18:10:41 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25216 (0x6280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 20 18:10:41 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1DA3F1DC7FFF64FA720E7A95D4C873197348CB1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:28:13:9c:89:68:47:f0:dc:99:55:43:12:
bb:33:19:c3:e2:51:3b:e4:cb:89:24:89:0a:50:ab:
ea:5a:e7:a3:33:13:77:17:84:52:24:82:55:5a:05:
81:09:50:d1:b3:48:97:4e:21:4d:b8:5c:19:3a:cc:
50:e8:49:20:78:ff:ca:2f:c0:9f:d0:b8:c9:df:7a:
ae:78:20:f6:98:27:15:aa:c3:f5:48:cb:da:e3:9e:
03:c4:07:c1:64:d8:e7:27:e4:54:9c:69:0c:d9:a3:
cc:8a:15:b4:58:f6:b1:5c:6e:a3:25:ba:8e:54:c0:
d0:b9:36:64:89:ed:3a:fd:cb:73:18:58:17:b8:9a:
fb:45:f4:19:59:e3:17:51:57:ce:81:3d:39:b0:43:
bb:99:bc:42:f3:11:a7:84:10:07:34:68:99:6b:9f:
01:1e:1d:a2:88:e2:4f:3c:b7:21:b5:3a:6a:0b:6c:
dc:ea:e4:df:23:7e:2b:25:81:f4:4f:63:6b:d6:46:
e0:a6:cc:b4:6f:5a:99:d2:80:a2:10:86:e0:ce:3a:
9b:a7:b1:5b:b7:5c:ae:16:87:64:86:ef:a2:ee:60:
13:0a:93:2c:ad:3a:41:ca:bf:6a:03:7e:ec:54:ee:
01:01:31:1b:c9:f6:9a:9b:16:d2:15:94:d4:b8:0c:
40:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A3:F1:DC:7F:FF:64:FA:72:0E:7A:95:D4:C8:73:19:73:48:CB:1A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HaPx3H__ZPpyDnqV1MhzGXNIyxo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1b:43:6d:7c:e2:e7:8e:9b:a6:6e:04:d4:97:dc:77:f1:69:2a:
26:6b:12:19:94:ee:48:85:20:6e:77:c5:ce:0a:06:53:f2:8f:
34:2d:52:c8:28:a1:37:24:44:b9:06:70:70:11:03:aa:15:95:
b7:7e:e1:d1:18:27:49:03:a9:d3:41:62:fe:f5:14:1d:c2:e0:
6a:6e:87:e0:82:28:0d:4d:56:ba:bf:e3:9d:28:d0:ca:7a:c5:
e7:49:5b:9c:d7:93:5b:e5:cf:fc:0d:0b:ef:2d:89:df:de:2c:
3c:7f:df:8d:ba:23:25:51:03:94:2d:97:f9:a2:99:a0:0c:a7:
ec:69:75:39:29:3c:8a:c8:a1:ed:a9:e9:d6:c8:de:38:8b:db:
e6:42:f7:87:bc:f4:41:d5:c7:17:cf:68:7b:5f:f3:46:34:e2:
8d:4b:19:bd:bf:6e:68:84:a3:26:de:8a:07:83:71:77:b9:fa:
f0:60:0d:ff:6a:2f:c7:e1:50:8d:83:b1:69:e3:33:a4:01:da:
7e:25:47:d2:b6:77:d6:6f:66:7e:83:d7:3e:0e:39:84:06:24:
a2:0e:29:50:59:4f:61:03:65:eb:71:3b:0f:3a:a5:21:9d:9c:
ec:fd:16:fb:4e:57:f0:1e:00:bc:28:ac:b3:bc:4a:64:37:45:
f9:b3:55:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:06:00 2025 by rpki-client