Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MUt2bbftuD4HOzlPnhsR4ur8qms.roa
File: MUt2bbftuD4HOzlPnhsR4ur8qms.roa (raw, json)
Hash identifier: AzyyJGnBW6M+mLal+rqjI8OOUBVoCk3nHZy2RhIpU3I=
Subject key identifier: 31:4B:76:6D:B7:ED:B8:3E:07:3B:39:4F:9E:1B:11:E2:EA:FC:AA:6B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 69FE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MUt2bbftuD4HOzlPnhsR4ur8qms.roa
Signing time: Mon 09 Jun 2025 17:41:59 +0000
ROA not before: Mon 09 Jun 2025 17:41:59 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27134 (0x69fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 9 17:41:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=314B766DB7EDB83E073B394F9E1B11E2EAFCAA6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bd:4c:91:da:44:72:7f:f3:5d:91:cc:76:1e:
11:05:7a:8c:da:49:37:8d:2d:06:78:b0:3b:8f:b3:
d0:40:a4:23:c9:27:9f:47:7e:c0:44:35:ea:9b:16:
59:50:9e:7c:5e:29:60:bf:df:07:e9:a6:61:ca:52:
30:20:9c:f9:ce:3d:a3:5a:49:e3:ec:72:43:64:e4:
7f:3a:4e:07:79:22:59:c3:68:41:98:df:45:5a:84:
e6:95:69:e9:87:ac:73:8f:3d:9b:91:01:8e:2c:41:
ed:52:f7:4e:07:31:c9:a0:61:97:63:8c:21:7c:a7:
50:3d:47:b9:c9:ac:75:4a:7a:30:da:45:19:d7:68:
76:96:51:0d:cb:0e:a4:e4:f1:29:5f:27:2a:02:07:
d6:05:12:a2:ef:dc:0d:ae:02:60:04:3f:2a:a7:85:
9f:0e:66:72:ce:24:7f:cb:59:87:ce:e1:9f:1f:d4:
52:d2:ec:23:69:8a:db:7b:9e:43:5f:ac:2e:c3:59:
4f:83:6e:a9:95:10:1e:83:bc:33:1f:e3:e5:76:a3:
14:eb:47:cd:4a:e6:4e:16:d8:c6:ce:7a:84:19:ee:
b3:c6:9e:23:c2:0d:6f:ea:e7:db:1f:d0:2a:6e:49:
98:82:36:6b:33:03:ad:35:24:7a:52:ee:78:b4:f1:
df:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4B:76:6D:B7:ED:B8:3E:07:3B:39:4F:9E:1B:11:E2:EA:FC:AA:6B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MUt2bbftuD4HOzlPnhsR4ur8qms.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
6a:d0:b8:36:2e:f7:91:03:a0:04:e6:65:30:98:53:6d:55:e9:
57:93:e0:f7:22:66:99:91:a5:db:9e:88:22:49:d6:bb:84:72:
c7:86:b3:55:3d:0a:0d:2f:b0:c5:ea:9b:7a:c5:6b:5d:4b:43:
08:d8:19:32:7a:ce:8e:08:43:96:48:d5:22:9e:b5:c1:88:b8:
7e:66:34:a3:ad:f7:bd:08:af:e8:8c:2f:cd:db:57:a8:ec:8c:
4d:4a:69:1b:e3:c3:15:8b:11:aa:d3:57:77:94:a3:25:c4:18:
05:ee:fa:be:05:d8:11:86:ef:fa:77:2b:df:15:1c:b7:1e:9a:
12:80:64:78:14:27:82:13:4a:51:0d:69:06:cf:6a:65:62:bc:
17:08:b9:4e:2b:b6:34:ad:ec:09:a8:58:48:b4:68:ce:2c:24:
99:6b:7e:2d:45:9d:fc:58:bd:d2:f6:cb:95:88:4b:7c:d4:e1:
74:30:c8:6e:8a:85:c4:66:8f:af:17:b0:47:3c:c6:ff:9a:79:
92:c8:2e:d1:4b:61:0a:26:59:b9:6c:ad:da:0d:d9:3b:8a:b8:
9e:f5:7b:51:64:e8:81:f2:45:71:8a:b1:00:3b:c6:d3:f4:ef:
4e:bd:9b:5f:14:08:d7:56:5f:1c:4b:8d:b1:61:8f:30:ef:f8:
0d:9c:fd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 19:46:13 2025 by rpki-client