Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/iuT_5KQswlHa66B0RmlK9OrY9U8.roa
File: iuT_5KQswlHa66B0RmlK9OrY9U8.roa (raw, json)
Hash identifier: /aGvNtbIm8JoIW9Jcfm6tprX/oVd35/3zlAni1T8NvA=
Subject key identifier: 8A:E4:FF:E4:A4:2C:C2:51:DA:EB:A0:74:46:69:4A:F4:EA:D8:F5:4F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6378
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iuT_5KQswlHa66B0RmlK9OrY9U8.roa
Signing time: Fri 23 May 2025 08:10:48 +0000
ROA not before: Fri 23 May 2025 08:10:48 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25464 (0x6378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 23 08:10:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8AE4FFE4A42CC251DAEBA07446694AF4EAD8F54F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:d9:3e:3a:71:22:e2:2f:f3:a5:4a:1f:48:
27:fa:6b:8c:ad:c6:f8:81:49:a0:f3:66:0b:fc:b1:
2e:56:ae:73:fe:76:ac:c0:26:ca:9e:be:53:f7:f4:
c8:14:ab:e2:07:48:15:17:1c:69:8c:ac:ef:36:2e:
a7:1a:3d:ac:35:fc:45:66:a4:98:24:3f:8e:c0:7c:
bc:6c:a2:74:9a:de:7e:a9:58:05:dd:2d:2f:06:1d:
10:d6:a0:49:58:32:65:d3:91:a2:09:1b:f2:f2:64:
da:7c:58:5c:7b:25:60:1a:94:d7:e2:03:0f:e1:c2:
f6:8f:f0:4c:17:59:88:f5:d9:c0:44:73:1f:06:97:
74:92:05:3d:a1:4b:b5:9f:58:ac:ee:1c:8b:dd:82:
37:56:10:e6:2e:53:97:5e:5c:2a:ba:40:41:02:79:
8e:df:74:af:de:45:77:f8:35:bf:ed:bf:bc:28:6e:
34:aa:db:1c:5d:5f:5e:0f:fb:02:43:30:9a:2d:6e:
33:26:81:d4:e0:f7:53:b1:d2:6c:68:6a:37:67:5f:
7e:57:52:54:2a:e2:3e:be:d8:b6:53:ce:d3:23:3b:
05:f7:d4:51:c1:86:ce:be:5a:2b:52:72:30:d7:8a:
55:09:37:57:87:3f:ca:9c:b0:58:d9:64:5a:bb:1e:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E4:FF:E4:A4:2C:C2:51:DA:EB:A0:74:46:69:4A:F4:EA:D8:F5:4F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iuT_5KQswlHa66B0RmlK9OrY9U8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
83:24:73:65:f0:0f:a8:53:d6:3a:e0:35:ee:d0:f9:34:02:aa:
12:ba:ca:6d:3e:b1:3a:b3:9a:da:20:6b:07:ca:f7:63:ee:51:
2f:7a:e2:73:39:2a:83:55:a6:8c:8f:44:e3:6c:ec:18:1a:77:
96:04:3f:e6:76:b3:85:a9:95:8b:bd:50:0d:d8:d8:a7:1a:df:
c2:ce:4c:a8:b4:86:e7:a7:29:ae:a0:77:71:58:b3:fc:6c:b4:
c9:a6:e7:f4:d7:96:4d:41:e2:e8:2f:be:76:7a:4c:0d:98:bb:
e1:19:a1:8f:4c:c4:13:d8:af:d8:2c:70:af:c4:78:9b:4b:4d:
f1:9e:5c:ff:a9:15:41:96:4f:03:33:fd:4f:7a:ea:ad:ca:fc:
d5:6c:9e:39:a9:12:4f:27:47:25:d4:3f:69:0d:6a:bb:7a:70:
45:ac:0f:88:ff:65:26:45:d8:a0:7d:41:d0:6f:64:ef:7a:43:
c9:1d:53:af:44:f8:fb:e7:ec:55:f5:bb:73:60:b5:01:1d:a2:
02:33:74:c1:aa:2e:f3:dc:87:28:11:e3:e8:cc:42:d1:79:9f:
45:7f:8c:aa:5b:86:06:1a:83:fe:9f:a6:10:95:e9:f7:85:a3:
d8:4f:20:22:1d:b2:6f:0e:98:d6:4f:30:14:a6:be:58:7d:e5:
b0:2b:e9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:23:05 2025 by rpki-client