Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wFpHC56Wz75Xh324Elp1nEui0wg.roa
File: wFpHC56Wz75Xh324Elp1nEui0wg.roa (raw, json)
Hash identifier: UypkdDu0aDpq7NA/YWCS7kFWBsEF9+GQrM4LrTHxpKw=
Subject key identifier: C0:5A:47:0B:9E:96:CF:BE:57:87:7D:B8:12:5A:75:9C:4B:A2:D3:08
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7372
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wFpHC56Wz75Xh324Elp1nEui0wg.roa
Signing time: Sat 05 Jul 2025 04:15:07 +0000
ROA not before: Sat 05 Jul 2025 04:15:07 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29554 (0x7372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 5 04:15:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C05A470B9E96CFBE57877DB8125A759C4BA2D308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:b0:bc:dc:11:50:95:78:30:98:4a:df:85:
14:86:7a:43:7b:f2:c9:3b:fa:a6:d6:74:bb:6d:72:
b0:00:8d:88:86:58:b3:5d:92:0d:b5:96:15:35:b2:
5a:f3:ba:f5:b3:d9:4f:f3:39:b1:e0:a1:65:70:b6:
15:9d:88:08:7a:d0:6d:0e:69:f3:a2:33:8b:c8:72:
8d:58:1e:f3:10:be:87:04:d6:72:5b:02:8b:23:89:
af:b3:44:3c:d7:01:c1:73:6b:d7:a0:80:00:21:cb:
78:88:50:c6:40:de:1a:cf:ea:8d:6c:97:13:24:fc:
a6:4a:9b:a9:17:dc:1d:e2:58:ca:3f:58:fa:d4:3d:
b3:ce:91:f9:ee:6d:bc:4a:52:e2:ad:e1:c3:1c:8e:
60:03:c6:a8:ee:81:ca:5c:84:bf:7e:a5:46:5b:49:
bb:5c:94:9a:f1:0f:41:91:f8:ce:18:e9:88:13:72:
43:1d:e8:6e:c3:3e:ed:7c:02:3b:00:d3:76:ce:cc:
b2:9d:f8:03:42:fb:af:25:81:45:82:e9:3f:46:3c:
42:8f:5e:0e:ad:2c:2b:22:27:5d:e8:64:da:7f:6d:
18:81:de:d4:c8:15:ea:72:e6:ef:d9:5f:5b:b5:d8:
e9:28:7d:d1:7a:9c:c0:ac:75:50:00:bd:34:e0:e3:
cb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5A:47:0B:9E:96:CF:BE:57:87:7D:B8:12:5A:75:9C:4B:A2:D3:08
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wFpHC56Wz75Xh324Elp1nEui0wg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
00:11:80:27:66:44:5d:a8:24:55:d5:f9:98:46:9a:cc:cc:0f:
8b:a6:98:3b:12:f0:e4:5d:be:55:75:40:b4:de:28:11:10:22:
ab:13:e4:02:02:b0:94:0b:7f:8e:b6:39:47:d4:5c:01:07:3e:
11:86:d9:c6:a0:80:77:5a:61:ed:4d:c9:33:89:2b:db:3f:bf:
d8:bb:be:55:51:a6:1e:a7:07:56:d5:ec:8a:80:ff:26:61:11:
5d:91:fd:c4:b9:94:95:52:31:80:25:ab:6b:da:33:88:62:e1:
6e:65:24:f6:65:a0:13:8f:58:7a:81:be:36:b3:10:11:a8:ec:
69:2a:96:d8:3c:43:2c:4d:13:44:a6:fb:24:2f:33:12:58:57:
9e:cb:22:61:b7:14:64:66:c9:03:4d:57:58:5a:e9:dc:e0:f7:
a9:5f:7e:5a:0d:0f:2a:37:7a:d3:f4:da:a2:04:4e:bf:44:2d:
27:d1:6b:db:fe:ed:80:05:31:6f:4c:2c:ad:d3:ca:90:23:6e:
89:0e:b1:62:42:a5:9e:ef:4f:23:e0:78:ce:c5:ea:af:b3:b4:
db:96:c9:36:5e:7b:d8:f8:63:6d:de:9d:28:83:e9:76:64:73:
21:55:24:b8:ce:20:54:01:e1:4b:44:7d:78:a4:e0:7e:a7:b0:
e3:3d:e2:91
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICc3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MDUw
NDE1MDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEMwNUE0NzBCOUU5NkNG
QkU1Nzg3N0RCODEyNUE3NTlDNEJBMkQzMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxZLC83BFQlXgwmErfhRSGekN78sk7+qbWdLttcrAAjYiGWLNd
kg21lhU1slrzuvWz2U/zObHgoWVwthWdiAh60G0OafOiM4vIco1YHvMQvocE1nJb
Aosjia+zRDzXAcFza9eggAAhy3iIUMZA3hrP6o1slxMk/KZKm6kX3B3iWMo/WPrU
PbPOkfnubbxKUuKt4cMcjmADxqjugcpchL9+pUZbSbtclJrxD0GR+M4Y6YgTckMd
6G7DPu18AjsA03bOzLKd+ANC+68lgUWC6T9GPEKPXg6tLCsiJ13oZNp/bRiB3tTI
Fepy5u/ZX1u12OkofdF6nMCsdVAAvTTg48uxAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUwFpHC56Wz75Xh324Elp1nEui0wgwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3dGcEhDNTZXejc1WGgz
MjRFbHAxbkV1aTB3Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAAEYAn
ZkRdqCRV1fmYRprMzA+Lppg7EvDkXb5VdUC03igRECKrE+QCArCUC3+OtjlH1FwB
Bz4RhtnGoIB3WmHtTckziSvbP7/Yu75VUaYepwdW1eyKgP8mYRFdkf3EuZSVUjGA
Jatr2jOIYuFuZST2ZaATj1h6gb42sxARqOxpKpbYPEMsTRNEpvskLzMSWFeeyyJh
txRkZskDTVdYWunc4PepX35aDQ8qN3rT9NqiBE6/RC0n0Wvb/u2ABTFvTCyt08qQ
I26JDrFiQqWe708j4HjOxeqvs7Tblsk2XnvY+GNt3p0og+l2ZHMhVSS4ziBUAeFL
RH14pOB+p7DjPeKR
-----END CERTIFICATE-----
Generated at Sun Jul 20 19:04:57 2025 by rpki-client