Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/TPtfSFIXC8XSqOjhrbNIyuanY58.roa
File: TPtfSFIXC8XSqOjhrbNIyuanY58.roa (raw, json)
Hash identifier: ymQTKmN7NzjvvEac0W/ENoEY5PeNUPzvKgbXQgIlQBA=
Subject key identifier: 4C:FB:5F:48:52:17:0B:C5:D2:A8:E8:E1:AD:B3:48:CA:E6:A7:63:9F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 67CE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/TPtfSFIXC8XSqOjhrbNIyuanY58.roa
Signing time: Tue 03 Jun 2025 21:41:42 +0000
ROA not before: Tue 03 Jun 2025 21:41:42 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26574 (0x67ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 3 21:41:42 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4CFB5F4852170BC5D2A8E8E1ADB348CAE6A7639F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:73:6a:7c:76:4f:7f:8e:5c:3c:71:51:ec:
fa:91:49:a1:e3:aa:81:41:1a:e6:4c:64:10:1f:77:
bf:55:42:48:23:86:9a:9b:14:8a:13:5c:f4:a5:50:
4c:99:7e:51:2a:b1:83:9d:30:d7:9e:5b:69:4e:ab:
2e:8b:33:d6:72:97:84:ff:00:d0:d3:46:bd:dc:71:
4b:74:ee:10:de:d8:e6:c7:42:a4:b7:b2:8b:c9:7d:
cc:90:4d:f8:09:d8:84:60:0f:65:59:08:7f:b7:8c:
0f:a5:36:8c:f8:9e:de:7f:1e:2e:35:95:30:ca:b4:
f4:af:2e:fe:ae:e3:fb:57:3c:b6:4d:c0:03:5d:0a:
5f:c1:af:ca:ca:f7:84:a4:86:52:df:f6:a6:95:61:
58:1e:8e:af:52:ee:8c:7b:da:82:c3:90:2b:4d:43:
f7:78:7a:23:ab:05:d6:64:a7:92:1d:2f:01:e1:f4:
3a:19:8b:8d:0d:a5:66:8b:df:b9:e2:f6:c6:85:8b:
2e:ba:4a:20:31:f3:3d:7c:c0:da:de:00:ec:1f:f3:
c0:8e:db:c4:6c:d1:1b:d0:5d:d8:37:04:44:f7:40:
6c:05:97:aa:b1:09:c5:41:f6:8d:a8:3d:e0:7c:4b:
8f:63:73:f4:46:b7:cb:e5:34:ac:9d:10:23:88:0a:
6f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FB:5F:48:52:17:0B:C5:D2:A8:E8:E1:AD:B3:48:CA:E6:A7:63:9F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/TPtfSFIXC8XSqOjhrbNIyuanY58.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
40:43:7b:8f:a9:18:46:ed:60:5a:5b:da:b1:b9:e5:d2:44:86:
14:8b:c9:aa:de:41:07:de:0c:63:b4:3c:b2:02:1f:89:ac:62:
1b:68:f3:e3:3d:ae:47:2b:46:15:1d:3e:d5:64:2a:71:77:0c:
44:67:75:d2:6a:72:85:b8:d2:4e:69:4a:e1:91:ab:f1:07:85:
6c:50:5f:8e:10:50:1c:ef:6b:cb:a9:ec:d2:5c:e5:d0:cc:53:
c5:3f:74:df:6a:aa:82:75:e0:02:65:54:8b:e4:ce:8f:a3:21:
12:8b:37:5a:2a:f1:87:ef:ad:ca:f1:9d:40:78:18:0f:19:ac:
84:78:19:9b:87:3e:7d:88:58:d6:f0:bd:f2:7e:46:c8:3a:e5:
88:11:a4:30:7b:4d:51:08:c4:7f:e8:ce:84:3e:76:77:fd:82:
55:ee:4d:4a:76:ce:a4:3a:85:28:76:52:a9:b4:1e:9d:0a:a7:
fd:9f:ea:f2:1d:d2:99:57:9d:d3:05:52:db:22:0b:dd:fd:9d:
69:12:45:8d:ef:cf:3a:59:96:a9:d7:93:42:00:bf:92:82:0d:
82:bd:97:ee:a9:3d:3a:ab:22:f0:c2:a8:79:89:5f:3b:0e:42:
8c:ea:25:ca:32:75:30:bd:ef:a1:49:41:28:63:c5:5b:94:2e:
01:84:92:3b
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICZ84wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MDMy
MTQxNDJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDRDRkI1RjQ4NTIxNzBC
QzVEMkE4RThFMUFEQjM0OENBRTZBNzYzOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCodHNqfHZPf45cPHFR7PqRSaHjqoFBGuZMZBAfd79VQkgjhpqb
FIoTXPSlUEyZflEqsYOdMNeeW2lOqy6LM9Zyl4T/ANDTRr3ccUt07hDe2ObHQqS3
sovJfcyQTfgJ2IRgD2VZCH+3jA+lNoz4nt5/Hi41lTDKtPSvLv6u4/tXPLZNwANd
Cl/Br8rK94SkhlLf9qaVYVgejq9S7ox72oLDkCtNQ/d4eiOrBdZkp5IdLwHh9DoZ
i40NpWaL37ni9saFiy66SiAx8z18wNreAOwf88CO28Rs0RvQXdg3BET3QGwFl6qx
CcVB9o2oPeB8S49jc/RGt8vlNKydECOICm9DAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUTPtfSFIXC8XSqOjhrbNIyuanY58wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1RQdGZTRklYQzhYU3FP
amhyYk5JeXVhblk1OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBAQ3uP
qRhG7WBaW9qxueXSRIYUi8mq3kEH3gxjtDyyAh+JrGIbaPPjPa5HK0YVHT7VZCpx
dwxEZ3XSanKFuNJOaUrhkavxB4VsUF+OEFAc72vLqezSXOXQzFPFP3TfaqqCdeAC
ZVSL5M6PoyESizdaKvGH763K8Z1AeBgPGayEeBmbhz59iFjW8L3yfkbIOuWIEaQw
e01RCMR/6M6EPnZ3/YJV7k1Kds6kOoUodlKptB6dCqf9n+ryHdKZV53TBVLbIgvd
/Z1pEkWN7886WZap15NCAL+Sgg2CvZfuqT06qyLwwqh5iV87DkKM6iXKMnUwve+h
SUEoY8VblC4BhJI7
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:57:19 2025 by rpki-client