Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/z6-HkPyH9fsKrd36RZBD6Ap4cyY.roa
File: z6-HkPyH9fsKrd36RZBD6Ap4cyY.roa (raw, json)
Hash identifier: iY3UjWcdtH+GyyIn040SuA7bSD/B7VnGnWrh6WQ5zyw=
Subject key identifier: CF:AF:87:90:FC:87:F5:FB:0A:AD:DD:FA:45:90:43:E8:0A:78:73:26
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 65CA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/z6-HkPyH9fsKrd36RZBD6Ap4cyY.roa
Signing time: Thu 29 May 2025 12:41:27 +0000
ROA not before: Thu 29 May 2025 12:41:27 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26058 (0x65ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 29 12:41:27 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CFAF8790FC87F5FB0AADDDFA459043E80A787326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:88:c9:86:86:33:24:33:b2:56:b3:f1:2e:61:
bc:f8:cb:68:0c:00:3e:c3:03:dd:f4:ca:59:61:e5:
0a:73:eb:9e:3b:89:12:f0:33:c8:03:52:da:75:2b:
38:52:16:1f:ae:dc:70:b2:02:ff:28:2d:7e:03:38:
ce:99:64:80:d7:3e:7b:e6:60:29:30:06:8a:30:ee:
53:57:ec:4b:40:da:ac:d9:29:c6:eb:e7:16:ae:e3:
05:a8:09:dc:e3:0f:19:d6:10:ba:25:ce:50:fc:c7:
36:63:fe:96:68:b3:53:93:b2:96:2d:ff:61:c8:46:
f3:be:98:b3:32:3e:89:56:dc:b3:e1:b9:a6:63:a2:
94:63:cf:bb:ee:d7:d1:a0:55:8f:34:e7:95:99:98:
01:eb:6b:0f:8a:c9:86:e7:5a:3d:91:f5:2d:d1:16:
59:0a:99:6f:30:1e:09:d5:79:39:a9:b4:d5:95:93:
09:09:3a:b9:4f:cc:44:7e:0c:87:75:36:a8:77:50:
61:f1:55:bf:01:31:fd:97:72:f1:3a:81:16:ce:36:
a3:d9:11:fb:b0:3e:ea:83:48:49:00:05:5a:db:de:
1c:3d:50:60:5c:de:79:d4:05:77:4a:df:27:b6:3b:
2a:26:c8:34:3a:1d:4d:d4:4a:f7:f7:24:14:05:b0:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AF:87:90:FC:87:F5:FB:0A:AD:DD:FA:45:90:43:E8:0A:78:73:26
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/z6-HkPyH9fsKrd36RZBD6Ap4cyY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
84:22:44:28:fd:a2:dd:fd:83:d1:0c:92:71:3d:6f:77:71:1c:
ce:66:4c:50:f6:50:ee:b4:2f:3b:66:7d:e4:15:ba:c9:82:12:
98:0a:23:d8:e8:2e:71:05:62:04:82:b6:25:1f:68:88:41:df:
b2:9c:37:1e:65:25:1a:ab:47:c1:28:79:99:80:48:28:e5:b4:
46:33:45:ba:d2:d0:11:f8:c8:81:79:41:92:85:76:61:2d:1b:
58:b6:cb:53:21:0d:1c:d1:21:55:df:9e:7f:28:d7:d3:f0:69:
42:98:f5:56:6d:d2:f0:56:0d:ff:51:9c:d0:c6:a9:87:aa:06:
a1:ae:3a:60:a7:d7:0f:e9:26:fd:8c:75:a4:cf:34:fc:1b:21:
83:13:33:cd:59:42:ee:05:88:5d:be:41:74:86:4b:ed:c7:2d:
51:3c:73:53:d3:d8:58:78:8d:ae:68:c3:ce:82:50:7a:19:ec:
fe:5a:db:3a:25:f7:c2:e2:d0:f7:bc:0a:b5:24:9e:fa:ab:3f:
7e:42:4d:c0:54:97:fb:c0:31:e0:2f:ce:5f:15:cf:38:b7:1a:
16:46:f7:6e:05:66:34:27:6e:bb:70:22:2b:63:d9:a8:f9:ee:
6b:28:a7:d5:22:9e:2e:44:6d:d1:90:db:4f:a6:89:88:fd:ac:
e7:f3:76:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:59:23 2025 by rpki-client