Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/bYmEsp5e8OJ4ZU1WzhkcO3o2YQs.roa
File: bYmEsp5e8OJ4ZU1WzhkcO3o2YQs.roa (raw, json)
Hash identifier: gpS2I+ocexOknb1LcTzYhr+eeQd0Jh0abEf9ctKNa/M=
Subject key identifier: 6D:89:84:B2:9E:5E:F0:E2:78:65:4D:56:CE:19:1C:3B:7A:36:61:0B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 64B4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bYmEsp5e8OJ4ZU1WzhkcO3o2YQs.roa
Signing time: Mon 26 May 2025 15:11:11 +0000
ROA not before: Mon 26 May 2025 15:11:11 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25780 (0x64b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 26 15:11:11 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6D8984B29E5EF0E278654D56CE191C3B7A36610B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:7f:02:51:2e:f0:be:d9:d4:b5:ba:55:cb:
10:97:54:ee:13:b5:99:e7:07:04:39:5e:f8:a9:a3:
2f:8d:4c:60:9a:1d:67:e3:a6:cd:f0:43:b0:f2:3b:
25:55:38:d4:f9:03:1c:ce:15:51:6a:ee:ed:2c:4f:
23:83:05:38:b9:4a:ee:23:dd:74:66:d8:5b:bd:b5:
32:af:6d:92:f1:69:31:63:b3:76:2d:0a:53:42:68:
5f:6b:23:00:d9:33:e8:fb:f1:92:91:63:62:0a:06:
36:bb:58:32:54:3c:2e:0c:6a:b4:d7:9a:c8:0e:f3:
2c:4e:da:ee:64:c2:84:ed:ea:a7:41:3f:00:e4:28:
d5:76:7d:d2:d3:cb:34:cd:7a:79:fa:95:f4:0c:a7:
a5:23:d6:30:3b:a6:e6:3c:a2:4f:ee:d0:a9:a3:c3:
53:53:4f:97:42:47:74:6c:24:cc:7d:59:c0:b3:1f:
21:69:6c:43:d7:fc:64:07:d4:c8:88:92:db:f7:bb:
67:fc:c9:ae:1a:80:6f:7e:ad:1b:73:c7:20:ac:19:
08:bf:92:26:34:db:2c:99:74:58:cb:27:75:fc:2c:
13:63:c1:2b:85:39:32:ff:cd:cf:e4:8f:44:c4:41:
e7:54:17:6c:2b:bf:ca:24:7f:c8:72:da:42:19:28:
26:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:89:84:B2:9E:5E:F0:E2:78:65:4D:56:CE:19:1C:3B:7A:36:61:0B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bYmEsp5e8OJ4ZU1WzhkcO3o2YQs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
2b:2f:b5:1e:fa:e4:fc:4e:1c:59:5f:27:d2:7c:bd:b5:c6:b8:
a0:9a:f4:a9:04:95:7e:9f:23:9b:d8:90:8d:c9:be:38:7e:66:
42:67:fc:46:26:17:a3:44:d4:d8:4a:84:f0:13:21:61:72:0c:
73:5d:c8:8b:c1:fb:0e:3e:88:d4:2a:53:43:c1:42:d7:a5:bd:
12:33:1b:01:e4:5c:2b:17:25:a3:8d:d4:e8:8c:f2:b4:0b:a6:
75:2b:7e:66:55:8a:81:89:d5:d8:f2:5b:72:20:e3:05:b9:32:
31:d1:ba:22:29:df:a4:80:bb:6d:32:64:73:f7:47:db:45:d9:
41:7d:6b:d6:9f:4c:45:ab:56:99:27:28:f7:d0:b6:63:0c:7c:
55:e4:ff:39:78:8d:0d:f8:80:9f:69:cf:1a:b8:88:72:8b:6a:
78:5e:cb:c5:d2:0c:28:72:38:03:4f:b2:70:3b:cc:3d:68:d6:
70:75:09:ed:19:dc:e1:dc:be:12:a8:58:83:5c:61:5c:db:23:
ac:93:60:2c:1f:bd:42:04:fa:58:de:e0:dc:af:68:af:b0:1f:
06:bb:3e:2a:70:0b:f9:c5:ac:fc:46:51:f3:6b:d6:82:74:dc:
15:a2:a6:57:38:e0:94:aa:ae:15:81:aa:76:23:b5:ef:a0:44:
79:43:c6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:53:30 2025 by rpki-client