Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/kersk8ydTV-RQsEM-aYOBN2HneI.roa
File: kersk8ydTV-RQsEM-aYOBN2HneI.roa (raw, json)
Hash identifier: u/kWGibwx9fP6MCWW2idnxUulUdb+KA+lZWTNIOWrQw=
Subject key identifier: 91:EA:EC:93:CC:9D:4D:5F:91:42:C1:0C:F9:A6:0E:04:DD:87:9D:E2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 66BE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kersk8ydTV-RQsEM-aYOBN2HneI.roa
Signing time: Sun 01 Jun 2025 01:41:35 +0000
ROA not before: Sun 01 Jun 2025 01:41:35 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26302 (0x66be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 1 01:41:35 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=91EAEC93CC9D4D5F9142C10CF9A60E04DD879DE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8a:02:fe:63:ba:ee:06:64:8e:a6:7a:3b:03:
f6:f1:87:9b:41:d9:07:15:ae:aa:38:aa:05:26:1d:
4c:db:8e:e5:98:e1:ec:ba:ca:42:50:97:5c:5a:f5:
1e:36:ce:a0:bb:8e:79:a2:ee:1c:fd:6e:21:5d:f8:
8c:92:55:c3:57:93:a0:ab:6f:e6:c8:ae:f7:01:e1:
09:5f:80:4c:65:63:66:7c:67:a0:95:5b:f6:bc:cb:
34:01:ba:d6:24:a7:07:00:c8:9a:97:52:6d:95:49:
f7:ec:62:4f:e2:76:a7:98:ad:80:26:a8:cf:21:c3:
1f:20:2b:be:22:5c:21:76:14:b1:06:8b:48:f5:ab:
27:1b:ab:7e:14:5b:99:19:55:e3:3c:ae:66:8c:57:
a0:bd:c5:7f:72:5e:87:76:bd:ca:b8:ed:80:d1:f6:
b3:70:1f:a6:c5:fa:dd:96:98:dc:18:43:dd:e2:fc:
70:e8:fc:76:23:fe:5a:32:c0:5b:fb:1a:68:bc:d1:
ae:99:d0:8f:5c:a6:33:c5:73:92:ad:89:24:4c:d2:
61:a7:6b:de:db:e1:39:86:9a:99:4b:a2:18:ab:74:
3c:4e:33:77:16:51:02:0a:7b:b2:59:81:99:35:90:
ed:be:6b:e6:e3:ce:c8:e0:74:2f:a7:7b:26:c4:8a:
9f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EA:EC:93:CC:9D:4D:5F:91:42:C1:0C:F9:A6:0E:04:DD:87:9D:E2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kersk8ydTV-RQsEM-aYOBN2HneI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
0b:0f:f4:cc:65:25:ce:d7:c7:31:ef:df:0c:4f:93:84:52:c2:
21:c4:9b:8a:34:5c:92:65:2a:91:ed:af:de:4c:34:bd:73:b5:
14:d4:3c:ed:b6:d3:97:3d:77:8a:70:1b:5c:c0:56:15:af:cc:
4f:1d:46:0b:57:a8:4d:0c:16:9d:c0:6c:78:ae:68:c8:20:6d:
80:fa:ea:c4:56:e3:5e:2e:23:cd:c2:50:6c:1a:66:6b:99:1d:
6e:7c:1c:be:a7:87:56:51:be:d1:43:18:4b:7e:52:4a:77:f8:
d8:15:fe:02:d3:24:8c:6a:96:a9:f8:f8:53:50:e5:86:e9:25:
02:62:16:74:ed:4e:07:c8:09:e8:c2:0a:d4:fd:b6:dd:9a:a5:
eb:f7:59:39:74:90:ca:0d:14:da:9e:fd:a8:d9:1b:b3:03:6e:
32:31:43:bd:55:00:20:0a:8a:7d:6f:b7:35:04:ac:de:0e:0c:
2a:fb:50:03:28:74:5a:19:3b:fb:c6:13:46:54:19:85:f2:d8:
e1:cc:60:f7:74:8f:66:5c:9f:fd:5d:e7:38:69:35:ee:ad:a9:
ff:d0:d6:f9:6a:d1:73:c4:42:62:73:5c:b0:4a:08:8d:33:61:
5b:ca:d9:11:31:61:2d:3e:76:00:c3:cc:e0:58:3f:bc:a9:ed:
d3:d6:2b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:16:05 2025 by rpki-client