Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_jtrRdY3rt9L_l6eWN_MGkNSZHY.roa
File: _jtrRdY3rt9L_l6eWN_MGkNSZHY.roa (raw, json)
Hash identifier: 8eGLUXFEIAmzzdZGQ6JcjpcFZl+a8/ZMi23E4okCJIY=
Subject key identifier: FE:3B:6B:45:D6:37:AE:DF:4B:FE:5E:9E:58:DF:CC:1A:43:52:64:76
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 630E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_jtrRdY3rt9L_l6eWN_MGkNSZHY.roa
Signing time: Thu 22 May 2025 05:41:01 +0000
ROA not before: Thu 22 May 2025 05:41:01 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25358 (0x630e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 22 05:41:01 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=FE3B6B45D637AEDF4BFE5E9E58DFCC1A43526476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:c7:48:32:54:a7:47:cf:d1:f4:26:d5:45:
c9:10:3b:9b:09:32:10:17:31:95:46:e0:9f:1e:4a:
bf:c6:a0:43:59:56:2a:4f:54:be:ff:8c:39:be:e5:
63:71:45:1c:cc:9c:b6:fa:8e:55:3d:31:df:ae:91:
ca:7a:d8:78:bc:e6:c7:cd:7d:4f:61:e0:af:8b:bd:
46:46:82:a8:59:69:28:11:6a:87:f7:0a:78:d8:0c:
e8:af:f3:26:2a:ce:4e:52:f6:0a:0b:80:92:d4:87:
94:5d:fe:e4:1c:34:7c:09:28:05:38:1d:7a:1e:51:
26:b8:c6:c3:c0:00:03:8b:25:93:76:65:47:da:26:
17:c0:ad:33:39:95:58:54:08:1d:f9:64:10:77:b5:
5d:f2:fd:77:59:f1:9a:f2:45:0d:dc:0d:4d:54:e8:
6e:29:b1:4c:ab:ee:f7:03:a8:7b:99:79:cd:1b:7a:
b5:92:f6:cc:fb:d0:c0:a9:a7:ac:00:82:b2:92:0f:
16:02:fe:4f:b1:1f:2c:45:14:33:e5:c2:02:e6:d2:
5d:ff:2f:fc:65:70:88:9a:67:47:59:d1:b7:be:c5:
11:46:9c:49:44:5a:59:32:a4:ae:f5:99:13:e2:2d:
32:74:bd:75:3b:72:46:f1:12:64:48:c9:10:d8:e8:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3B:6B:45:D6:37:AE:DF:4B:FE:5E:9E:58:DF:CC:1A:43:52:64:76
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_jtrRdY3rt9L_l6eWN_MGkNSZHY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
64:c6:32:1e:7d:c5:15:62:e1:d8:e6:fe:3b:77:ea:26:71:f0:
9f:ce:df:02:f1:0c:b2:8e:17:c6:71:9d:67:ea:ff:92:d5:19:
e4:f5:c0:d9:28:51:d1:1d:b4:80:94:72:fd:b9:3c:33:76:43:
a1:4f:fb:7a:9b:b9:a8:e5:53:5f:2e:b4:92:2c:2a:0d:82:3b:
92:c3:d4:2f:f9:53:e4:d2:c4:35:60:87:15:6c:70:e1:73:0c:
e3:83:78:e2:d6:14:1b:7d:90:1e:4b:f4:f6:62:ec:7b:23:6f:
74:45:ec:dc:93:24:b5:4e:c8:4a:b3:75:a3:23:29:58:8e:24:
f2:78:9d:d2:58:9f:f4:a1:b0:ef:54:e8:4f:52:81:fd:9a:50:
25:99:d8:fe:e4:9e:6c:f2:ab:f6:ae:33:b4:02:4c:86:7d:b0:
00:32:43:6a:d7:a7:41:fd:aa:71:9d:e8:8a:30:fe:75:a6:26:
89:87:b4:e3:c6:d3:5b:ff:4b:2e:7e:66:13:09:6c:85:50:d0:
7a:34:13:ba:10:c3:78:54:f5:a4:e3:1e:f2:98:00:dd:05:74:
de:52:da:bb:b0:e1:c2:ac:e9:f4:0e:8f:50:c1:cd:cf:eb:fa:
91:56:5b:81:d7:b1:c9:bf:96:82:bd:be:69:2b:12:84:f7:c8:
6e:3c:a0:5f
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICYw4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjIw
NTQxMDFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEZFM0I2QjQ1RDYzN0FF
REY0QkZFNUU5RTU4REZDQzFBNDM1MjY0NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDN+cdIMlSnR8/R9CbVRckQO5sJMhAXMZVG4J8eSr/GoENZVipP
VL7/jDm+5WNxRRzMnLb6jlU9Md+ukcp62Hi85sfNfU9h4K+LvUZGgqhZaSgRaof3
CnjYDOiv8yYqzk5S9goLgJLUh5Rd/uQcNHwJKAU4HXoeUSa4xsPAAAOLJZN2ZUfa
JhfArTM5lVhUCB35ZBB3tV3y/XdZ8ZryRQ3cDU1U6G4psUyr7vcDqHuZec0berWS
9sz70MCpp6wAgrKSDxYC/k+xHyxFFDPlwgLm0l3/L/xlcIiaZ0dZ0be+xRFGnElE
WlkypK71mRPiLTJ0vXU7ckbxEmRIyRDY6Hj5AgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQU/jtrRdY3rt9L/l6eWN/MGkNSZHYwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L19qdHJSZFkzcnQ5TF9s
NmVXTl9NR2tOU1pIWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBkxjIe
fcUVYuHY5v47d+omcfCfzt8C8QyyjhfGcZ1n6v+S1Rnk9cDZKFHRHbSAlHL9uTwz
dkOhT/t6m7mo5VNfLrSSLCoNgjuSw9Qv+VPk0sQ1YIcVbHDhcwzjg3ji1hQbfZAe
S/T2Yux7I290RezckyS1TshKs3WjIylYjiTyeJ3SWJ/0obDvVOhPUoH9mlAlmdj+
5J5s8qv2rjO0AkyGfbAAMkNq16dB/apxneiKMP51piaJh7TjxtNb/0sufmYTCWyF
UNB6NBO6EMN4VPWk4x7ymADdBXTeUtq7sOHCrOn0Do9Qwc3P6/qRVluB17HJv5aC
vb5pKxKE98huPKBf
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:58:49 2025 by rpki-client