Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8L-kHmFuZGJIlOhxUrf4XU3a1ZI.roa
File: 8L-kHmFuZGJIlOhxUrf4XU3a1ZI.roa (raw, json)
Hash identifier: r2mcZyxSv4VXy+ah/VAimwsQl5IEu54RNY3y0OlfySg=
Subject key identifier: F0:BF:A4:1E:61:6E:64:62:48:94:E8:71:52:B7:F8:5D:4D:DA:D5:92
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 68DE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8L-kHmFuZGJIlOhxUrf4XU3a1ZI.roa
Signing time: Fri 06 Jun 2025 17:41:50 +0000
ROA not before: Fri 06 Jun 2025 17:41:50 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26846 (0x68de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 6 17:41:50 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F0BFA41E616E64624894E87152B7F85D4DDAD592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:6f:3e:99:cb:5c:3f:11:6b:33:25:50:11:
22:2a:43:de:f0:fd:80:d8:eb:72:b3:7e:5b:f5:7b:
06:6d:fd:1b:fc:4f:87:b2:14:0a:8d:b2:71:8b:d3:
b0:97:55:b1:f8:17:b5:4f:58:82:cc:14:88:bf:a3:
f1:22:3a:fb:6d:05:33:99:3b:a7:2b:82:bc:ad:cf:
39:91:4b:bb:23:35:23:58:59:36:a9:ba:b9:1b:6f:
96:aa:89:71:d1:a9:c7:ea:5d:5f:e9:c3:a6:0d:76:
a1:b2:f6:60:81:84:e8:1e:73:9e:54:d4:d9:63:c3:
59:69:1d:99:e4:1b:09:8d:c2:fa:e9:d7:bd:26:13:
55:30:68:22:9f:0c:06:17:9f:4e:9c:e3:95:d6:6d:
86:10:ef:4c:2a:58:9d:22:65:eb:3f:b1:b7:7b:2a:
60:62:12:e3:cf:d1:e1:05:d5:df:60:bc:6c:94:20:
c9:da:26:e7:8c:e5:ba:22:c4:ac:b1:24:f9:59:79:
20:49:6f:98:c4:71:c8:92:0a:18:97:4e:90:4d:fb:
5c:b8:09:c3:14:d5:c4:15:28:20:5e:74:1d:81:e1:
34:6f:6e:19:d8:49:b5:8e:62:51:76:f7:30:40:ef:
a9:dc:67:63:d3:04:b2:71:30:d5:2d:1c:2c:74:a7:
0f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BF:A4:1E:61:6E:64:62:48:94:E8:71:52:B7:F8:5D:4D:DA:D5:92
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8L-kHmFuZGJIlOhxUrf4XU3a1ZI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1d:ae:df:97:46:1a:f1:48:00:84:b7:c5:1e:98:ae:22:0c:67:
ee:db:10:e3:fe:27:b0:4d:e1:54:29:ed:42:ba:2c:32:a0:af:
1e:c5:5b:09:66:f7:03:ce:0b:92:22:6d:05:e6:2e:f3:9b:25:
96:dc:2d:d0:99:04:52:ab:a4:73:ad:bd:c7:1c:8e:a9:14:1c:
ea:1c:c6:88:c1:9b:2d:53:79:fb:24:27:21:9c:ad:d1:38:28:
b7:ee:8a:c2:1e:71:14:f0:c9:d0:ed:95:b2:2e:ed:c7:32:5b:
1d:ce:b7:9a:06:e8:a9:56:7a:94:98:22:89:5d:eb:90:f4:0d:
51:37:a3:bb:3b:cb:4a:09:49:f2:5b:e1:c3:0c:86:d5:5c:79:
a3:ad:8b:c4:36:e8:5e:b4:1c:d4:74:b6:03:e8:f0:19:a9:e6:
6c:59:76:a9:e5:53:c9:a8:2b:84:0f:fc:64:0c:af:d6:f4:59:
e4:fb:bb:2f:b4:df:c7:14:8c:0b:42:5a:d4:4d:87:7e:f0:90:
f4:28:35:cd:94:89:fa:90:a3:50:f2:76:74:9a:85:3f:ce:4a:
24:be:f8:5a:de:ee:ba:fd:57:9b:d9:99:c5:34:00:6d:9d:3b:
86:f2:2e:94:a5:97:05:f2:dd:9f:f6:90:7e:86:79:c3:eb:ad:
1c:da:0d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:04:00 2025 by rpki-client