Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/IbyoaMNbFhEPUhYHtT4K6C3A2d0.roa
File: IbyoaMNbFhEPUhYHtT4K6C3A2d0.roa (raw, json)
Hash identifier: Igch4HURfw7wlXe/mYT6f+NVJa3K3BIybOXASHBinA0=
Subject key identifier: 21:BC:A8:68:C3:5B:16:11:0F:52:16:07:B5:3E:0A:E8:2D:C0:D9:DD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6380
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IbyoaMNbFhEPUhYHtT4K6C3A2d0.roa
Signing time: Fri 23 May 2025 10:11:46 +0000
ROA not before: Fri 23 May 2025 10:11:46 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25472 (0x6380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 23 10:11:46 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=21BCA868C35B16110F521607B53E0AE82DC0D9DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:1e:3b:99:4a:2f:39:0f:b0:7d:8e:6b:28:
35:48:0e:eb:00:6e:7c:18:02:f2:01:78:37:4d:cf:
50:1c:4d:ad:1b:d8:64:0b:15:1e:ff:ff:03:f9:00:
a7:12:4b:d6:4f:b0:20:90:ee:83:24:68:77:1c:60:
6d:28:6e:b2:05:b2:c7:25:55:8e:bf:3c:6f:0b:fe:
e9:8e:71:9f:ce:e0:5f:20:d4:d6:fd:28:4d:5e:fe:
48:de:18:bc:d2:6f:bf:5e:76:80:67:54:6a:20:25:
d5:69:fa:88:84:0d:1a:87:85:6c:32:b1:b5:f4:61:
e6:37:f3:93:bd:e6:7e:55:2d:33:28:c1:a3:2d:59:
c1:8b:65:89:15:f3:95:81:6f:c8:2e:8c:d2:ae:be:
84:aa:20:80:c0:f2:31:01:84:fe:cf:e2:01:b0:2c:
75:65:c0:2a:78:19:04:9f:a5:0f:65:db:07:a2:9a:
8c:77:bb:db:38:b7:32:5b:5f:98:ee:c0:fc:65:3e:
39:1f:58:d3:7e:91:dc:ed:32:ed:28:8b:e8:df:f5:
50:3c:e3:e1:18:17:83:d9:5e:41:30:03:c4:10:35:
95:8b:cb:93:a7:eb:10:2b:98:d3:39:54:bf:26:32:
c1:c1:36:8a:bd:16:45:e8:63:3f:5c:e2:38:5b:54:
c9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BC:A8:68:C3:5B:16:11:0F:52:16:07:B5:3E:0A:E8:2D:C0:D9:DD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IbyoaMNbFhEPUhYHtT4K6C3A2d0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
72:d5:f1:b4:29:89:b7:0d:ae:89:56:98:06:f1:a4:55:16:b8:
50:27:19:8f:a4:e0:cb:8d:f3:cb:31:9b:ca:f3:18:e0:44:f2:
e2:9f:5f:40:d1:b7:31:e1:3b:37:55:1d:81:ee:e3:06:10:ef:
15:8b:e0:23:dd:cb:e9:e1:a8:0b:17:a9:fd:b4:d1:c4:61:61:
44:34:a9:8b:31:62:d1:ff:f6:19:b5:cf:b7:e5:4d:c3:8b:f7:
be:1b:66:1d:eb:11:88:b8:ba:87:74:c6:77:ce:32:13:da:6a:
74:98:ca:7a:fe:8c:ae:a9:f2:1b:ae:13:b7:25:4c:6e:6f:8e:
3b:88:08:46:1e:e4:c5:af:21:57:f0:e3:91:d5:b0:31:b7:85:
b8:74:d7:4c:55:5d:24:a1:51:f6:48:1b:e0:36:82:3d:d4:ec:
b7:f0:2a:f1:c9:ae:f6:a0:e7:7f:f9:fa:48:1f:b0:b1:cd:d5:
91:b7:92:5c:ec:e0:a3:b3:77:f9:9b:48:73:da:af:af:a6:a2:
20:09:7b:ec:d5:90:40:17:bf:0e:3d:4b:ab:f4:e2:19:1d:8c:
9e:6b:55:44:79:ef:f7:3a:72:4c:f7:7e:d3:c7:55:74:70:d7:
a9:42:a2:a8:7a:31:75:13:c3:39:44:fe:53:53:f1:39:3b:9c:
05:c7:c3:85
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICY4AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjMx
MDExNDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIxQkNBODY4QzM1QjE2
MTEwRjUyMTYwN0I1M0UwQUU4MkRDMEQ5REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnVx47mUovOQ+wfY5rKDVIDusAbnwYAvIBeDdNz1AcTa0b2GQL
FR7//wP5AKcSS9ZPsCCQ7oMkaHccYG0obrIFssclVY6/PG8L/umOcZ/O4F8g1Nb9
KE1e/kjeGLzSb79edoBnVGogJdVp+oiEDRqHhWwysbX0YeY385O95n5VLTMowaMt
WcGLZYkV85WBb8gujNKuvoSqIIDA8jEBhP7P4gGwLHVlwCp4GQSfpQ9l2weimox3
u9s4tzJbX5juwPxlPjkfWNN+kdztMu0oi+jf9VA84+EYF4PZXkEwA8QQNZWLy5On
6xArmNM5VL8mMsHBNoq9FkXoYz9c4jhbVMkjAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUIbyoaMNbFhEPUhYHtT4K6C3A2d0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0lieW9hTU5iRmhFUFVo
WUh0VDRLNkMzQTJkMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBy1fG0
KYm3Da6JVpgG8aRVFrhQJxmPpODLjfPLMZvK8xjgRPLin19A0bcx4Ts3VR2B7uMG
EO8Vi+Aj3cvp4agLF6n9tNHEYWFENKmLMWLR//YZtc+35U3Di/e+G2Yd6xGIuLqH
dMZ3zjIT2mp0mMp6/oyuqfIbrhO3JUxub447iAhGHuTFryFX8OOR1bAxt4W4dNdM
VV0koVH2SBvgNoI91Oy38Crxya72oOd/+fpIH7CxzdWRt5Jc7OCjs3f5m0hz2q+v
pqIgCXvs1ZBAF78OPUur9OIZHYyea1VEee/3OnJM937Tx1V0cNepQqKoejF1E8M5
RP5TU/E5O5wFx8OF
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:58:14 2025 by rpki-client