Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/rnXy6FlqUc64LvRvxQdta_tMC1k.roa
File: rnXy6FlqUc64LvRvxQdta_tMC1k.roa (raw, json)
Hash identifier: Ujn5QURy1LZitNuR2xyI3sGhBVETGBKLadvR39h9GHk=
Subject key identifier: AE:75:F2:E8:59:6A:51:CE:B8:2E:F4:6F:C5:07:6D:6B:FB:4C:0B:59
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6582
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rnXy6FlqUc64LvRvxQdta_tMC1k.roa
Signing time: Wed 28 May 2025 18:41:34 +0000
ROA not before: Wed 28 May 2025 18:41:34 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25986 (0x6582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 28 18:41:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=AE75F2E8596A51CEB82EF46FC5076D6BFB4C0B59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:07:94:95:b2:99:ca:2c:c8:52:ac:91:8a:
50:8e:e6:ad:6e:c0:de:c6:b1:9d:ae:fa:b5:59:dc:
0b:77:ec:da:be:37:5d:ab:4e:a1:a8:68:2d:17:a0:
e7:1d:55:c0:63:6e:2d:31:f4:08:1d:db:d1:c6:25:
94:35:3b:05:0a:ca:65:59:d7:7d:cd:86:6c:8d:3a:
d3:31:12:25:d9:f1:8a:9c:49:63:4f:aa:00:52:b5:
b3:2e:47:eb:36:b0:66:cf:35:d0:e8:76:c4:b0:d6:
61:47:08:2c:c0:db:35:95:16:bd:21:c3:49:ce:d0:
fc:66:dc:0b:6e:3f:ea:b2:31:c7:8e:a2:c7:76:81:
b3:b8:18:f1:8e:16:b2:59:85:c9:69:d0:d1:48:45:
ca:d5:c7:17:1d:48:6a:a7:c2:61:5d:ce:45:e8:95:
a3:3a:e7:74:80:7f:e8:37:d4:d3:50:b5:71:48:ec:
d5:96:14:26:8a:dc:84:b5:1e:b6:8a:1c:17:90:e8:
b2:a8:cd:6d:3f:a7:f4:e7:2e:86:90:9c:c8:47:e0:
73:c8:f2:91:d3:20:5a:93:c7:42:66:33:a0:f4:a5:
bb:78:a9:ab:f9:b3:c5:32:50:7e:4d:43:1b:55:9d:
fe:be:e8:71:ef:03:e3:9f:e9:d1:2b:8a:a1:2c:ad:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:75:F2:E8:59:6A:51:CE:B8:2E:F4:6F:C5:07:6D:6B:FB:4C:0B:59
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rnXy6FlqUc64LvRvxQdta_tMC1k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a5:0e:2e:e9:56:a5:b6:53:df:5b:18:99:1e:dc:88:66:a6:55:
97:98:6a:f3:4a:7d:65:43:7e:59:68:b5:e5:6f:74:99:8b:d6:
f9:c9:30:9a:3e:1c:a0:4c:94:77:63:0b:e7:4e:40:11:8d:b6:
55:98:9a:9f:ca:c2:1e:26:fa:7e:c9:b3:82:cd:77:ab:f0:5b:
59:a4:5a:18:7f:59:e6:27:db:b0:ad:a7:3d:b3:08:16:18:ce:
62:e6:5a:f3:68:d0:5a:9b:20:5c:78:93:06:bb:93:1f:4a:fa:
84:f2:62:fc:83:4e:04:d1:02:a3:d4:8c:df:3f:16:72:6c:45:
92:66:8d:04:2b:65:d9:97:75:ab:20:b8:c5:1d:21:4b:10:51:
2c:b0:f2:5e:4b:0a:e3:ce:5f:9a:61:c5:73:4f:99:85:05:24:
28:69:64:92:33:13:96:ad:3b:89:ca:06:13:a5:82:9b:d7:2d:
45:d4:fa:73:fe:d4:e4:64:c9:b8:a1:74:c1:46:5b:71:04:31:
d9:3c:44:a9:00:88:69:5e:c7:79:2c:d9:79:e1:19:ea:1b:bd:
b6:01:b2:1c:e6:19:c3:10:ee:d4:fc:fd:7d:ac:e7:c5:15:b0:
1f:df:a8:dd:81:b2:5e:88:0f:04:07:67:91:be:56:de:25:33:
79:64:aa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:54:26 2025 by rpki-client