Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MV8hDVnRcBQgBHTNueEUhSw5JP0.roa
File: MV8hDVnRcBQgBHTNueEUhSw5JP0.roa (raw, json)
Hash identifier: cezc0Y3nsEpooFVZbhN6niS3+VzGc0kXea2B2woMy90=
Subject key identifier: 31:5F:21:0D:59:D1:70:14:20:04:74:CD:B9:E1:14:85:2C:39:24:FD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6752
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MV8hDVnRcBQgBHTNueEUhSw5JP0.roa
Signing time: Mon 02 Jun 2025 14:41:33 +0000
ROA not before: Mon 02 Jun 2025 14:41:33 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26450 (0x6752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 2 14:41:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=315F210D59D17014200474CDB9E114852C3924FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:04:68:46:f6:c1:69:27:7b:84:73:9c:cc:
f6:ba:6d:ce:d8:2c:a0:bb:e3:b9:88:72:35:f0:b3:
8b:1c:0b:2a:ce:62:63:60:1a:c7:56:0a:fd:0d:c8:
a5:0b:73:35:a2:ab:8c:c6:73:3f:54:ba:96:fd:06:
d2:e9:b6:79:b6:05:28:a1:2f:3f:b8:19:ff:8a:1a:
c6:36:e6:19:cb:6d:04:5d:b7:39:4f:6c:73:a9:39:
22:0b:69:14:d6:89:6e:d4:29:06:9f:d5:07:cc:15:
78:d0:a9:a9:f8:c5:cf:9d:41:83:9d:cb:6e:a7:43:
d2:16:9c:f2:8c:4d:39:93:9e:21:c7:43:01:1c:fa:
ac:d0:34:3a:43:99:3b:45:c5:dd:e9:c1:a1:dc:ea:
7e:07:1a:46:11:a0:62:32:e4:0d:ec:82:53:22:8c:
7c:2f:64:08:97:9f:72:dc:47:b2:5b:7f:08:b6:33:
66:0e:52:b0:c0:49:54:73:0c:7c:e2:39:f6:6c:50:
4f:57:e2:cd:b7:ba:62:1c:36:c0:9a:6e:b8:eb:c5:
6a:82:cd:bf:f8:06:73:d5:76:3d:bf:26:56:c7:dd:
88:8c:2a:41:a1:05:9c:51:92:c1:f7:f7:de:49:95:
9e:81:84:a9:37:b2:01:53:76:9d:06:f6:c4:45:bf:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5F:21:0D:59:D1:70:14:20:04:74:CD:B9:E1:14:85:2C:39:24:FD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MV8hDVnRcBQgBHTNueEUhSw5JP0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
33:48:01:3e:70:08:d0:c0:df:65:48:5c:f3:81:0f:f7:d0:7f:
9b:f9:94:55:2d:f3:55:8e:cf:27:2c:4a:e1:89:47:1b:45:b3:
88:f7:46:49:87:39:11:97:a4:71:76:89:75:08:fb:b9:a9:1b:
ce:ae:c2:9b:16:45:04:79:1c:a6:b6:fd:00:fd:5c:0b:9c:89:
08:6a:dc:0d:77:5a:10:52:38:67:21:97:61:4c:d7:6b:cf:cb:
f3:b7:21:6e:2f:1c:7f:a5:aa:3d:b5:43:06:a9:29:41:19:c3:
1a:e8:80:53:88:3c:55:76:d9:b2:45:94:ff:94:43:d5:b9:43:
18:7a:06:3f:d4:21:f6:b5:b7:35:6b:8e:5c:18:7c:24:32:90:
d6:4e:01:c8:8d:d1:51:47:6b:e1:17:75:da:fc:46:d0:6b:ff:
ab:01:f4:66:dd:a7:0b:a4:56:99:6e:59:8f:0e:65:56:49:f9:
2e:69:eb:bc:78:5f:0c:28:23:32:4c:4f:44:ac:ad:ea:37:63:
cc:f0:88:9e:45:4f:d6:51:d4:82:8d:85:7a:b1:d8:64:3b:0c:
40:3a:fe:93:46:86:ab:d6:66:df:18:93:cb:e2:4e:99:bd:a4:
7b:b5:0d:4d:47:09:62:5f:0c:63:a4:e0:b9:26:d8:5a:d7:b8:
8e:40:19:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:09 2025 by rpki-client