Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/KWfLR0qPFfABIGSOoi6xMvnPZQ8.roa
File: KWfLR0qPFfABIGSOoi6xMvnPZQ8.roa (raw, json)
Hash identifier: xTjWmaMHucFdQvRwKcTgfh2tg58BdevCGO6wlrBBdAg=
Subject key identifier: 29:67:CB:47:4A:8F:15:F0:01:20:64:8E:A2:2E:B1:32:F9:CF:65:0F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6182
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KWfLR0qPFfABIGSOoi6xMvnPZQ8.roa
Signing time: Sun 18 May 2025 02:40:33 +0000
ROA not before: Sun 18 May 2025 02:40:33 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24962 (0x6182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 18 02:40:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2967CB474A8F15F00120648EA22EB132F9CF650F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:9f:b2:4f:9d:36:08:70:e8:d7:bb:ae:fe:
f0:10:8e:94:a3:ab:05:86:8f:13:35:44:7f:f7:60:
fc:48:b8:9d:21:69:e4:c2:64:94:d8:43:67:86:3f:
8d:64:82:80:17:10:f2:61:16:e8:78:ee:b2:21:03:
40:b0:cc:db:96:1d:c7:b7:84:60:ba:b7:7b:cf:e6:
1c:ae:3d:7c:de:e8:e3:40:d8:c3:bb:c7:8d:77:d8:
19:5f:7f:a3:bc:bb:dd:00:ba:38:9b:f7:26:f5:d2:
b9:05:f0:1a:64:27:74:35:1c:0c:3d:6d:e3:94:e2:
b6:98:d0:ce:51:49:d1:55:15:fc:c3:43:e3:1e:10:
57:db:4a:76:5a:8d:06:f0:d9:7a:47:dd:7c:21:3e:
50:fe:e1:ae:75:79:96:e8:92:e2:df:9f:85:b0:98:
4e:74:bf:ca:1f:cb:35:d3:4d:b9:09:6b:ca:c8:90:
9a:35:ca:f8:7a:9a:71:4e:f4:a3:34:eb:a0:eb:5b:
5e:69:ad:25:88:9e:80:0e:4a:0a:7f:d6:3c:57:33:
9a:aa:53:b0:19:92:75:77:c5:2d:85:33:69:ba:e6:
e5:8f:67:23:f5:07:81:fb:5c:db:6d:88:62:38:7d:
8c:5d:ef:68:bc:43:19:85:db:19:1a:d2:e9:59:d0:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:67:CB:47:4A:8F:15:F0:01:20:64:8E:A2:2E:B1:32:F9:CF:65:0F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KWfLR0qPFfABIGSOoi6xMvnPZQ8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
8b:a9:a9:a3:cc:d6:b7:49:e0:af:e4:a4:94:36:aa:85:49:38:
40:dc:d5:58:8a:54:37:39:e7:19:5d:8c:f7:50:d5:22:7e:32:
cc:43:04:23:22:af:fd:20:2f:61:d8:9d:c5:0d:03:67:e1:00:
fd:79:2c:71:31:bc:3a:91:bb:46:e6:74:27:b3:45:a9:09:7c:
3a:43:29:04:29:a5:34:87:6b:36:6b:d9:1d:1e:1a:c3:9e:24:
e6:00:cd:06:60:f0:70:ea:76:3b:19:5c:f9:ff:91:29:3b:2e:
41:14:da:39:d4:aa:3f:29:dd:c7:9a:39:0c:c5:57:59:aa:d0:
2a:22:2a:25:8b:67:62:73:a5:ef:c6:07:a2:07:f7:27:c2:32:
ec:4b:44:5d:93:1d:38:23:22:47:2f:aa:5e:e8:70:91:91:cb:
e4:27:d3:fa:69:45:df:78:b1:7b:7b:6a:6f:f6:5c:0b:5c:94:
ba:7a:31:b1:33:58:e2:1a:58:16:40:e0:90:a1:7f:24:75:3a:
3d:56:c7:42:f8:42:89:d2:66:20:7c:68:21:04:c2:66:dd:2d:
ce:15:77:71:d3:25:d0:1c:91:cc:93:81:8c:3d:88:37:1e:e4:
6f:4f:ed:fa:cc:27:5c:8a:d6:ac:37:1c:f2:b5:16:c0:34:50:
b1:7f:31:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:21:43 2025 by rpki-client