Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/PkeIkTQbfoQH3ZaIpW6ewV3j4VQ.roa
File: PkeIkTQbfoQH3ZaIpW6ewV3j4VQ.roa (raw, json)
Hash identifier: ESth/ezI/T2SfShdlEzh1R3wVR8x8H6Ogl1QbjJFYKY=
Subject key identifier: 3E:47:88:91:34:1B:7E:84:07:DD:96:88:A5:6E:9E:C1:5D:E3:E1:54
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6AF8
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PkeIkTQbfoQH3ZaIpW6ewV3j4VQ.roa
Signing time: Thu 12 Jun 2025 08:12:20 +0000
ROA not before: Thu 12 Jun 2025 08:12:20 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27384 (0x6af8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 12 08:12:20 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3E478891341B7E8407DD9688A56E9EC15DE3E154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:12:41:5b:fc:80:31:9e:3e:24:3e:f3:d3:
62:d2:46:ef:07:bc:9a:20:87:e4:88:be:18:03:05:
63:24:52:a1:c7:93:cd:9d:cd:02:b9:ab:f3:2e:39:
2a:98:a4:3f:b4:b9:00:2c:f9:93:4f:d9:85:8b:4b:
c7:34:00:16:62:d7:73:ba:7a:bb:0a:55:ae:ea:d0:
ab:3e:63:72:e7:f9:3c:1e:d9:33:d9:4d:2a:cd:17:
3d:38:41:23:a8:28:8a:d5:a2:97:4f:23:4f:f4:82:
64:ab:c4:7a:d3:9d:24:47:8a:d6:76:9c:7d:04:eb:
65:3e:0a:c8:b7:27:27:47:ba:d2:18:9f:6a:1e:dc:
6c:05:c2:0a:08:1a:48:b1:5e:c4:cd:c2:9a:a1:5b:
45:ca:2c:22:3f:a9:a3:2a:7a:13:52:40:ca:3c:f9:
90:34:4b:49:e1:6b:ad:63:1a:17:d7:de:dc:dc:d1:
41:30:71:38:17:ef:0b:9d:59:49:6a:4a:27:08:f7:
39:f0:c7:a0:31:b1:04:3b:ce:46:05:13:b5:ad:0e:
ca:e6:ac:b1:20:71:b7:42:fb:8c:8f:1f:53:af:a7:
64:a4:03:f7:06:49:f1:73:d0:9e:40:00:e9:35:5d:
8e:c2:54:4d:ff:c5:8b:5a:90:47:fb:11:9b:7d:dd:
dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:47:88:91:34:1B:7E:84:07:DD:96:88:A5:6E:9E:C1:5D:E3:E1:54
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PkeIkTQbfoQH3ZaIpW6ewV3j4VQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
11:80:ab:e2:54:1b:67:c1:a7:fb:03:39:6a:e7:ad:36:a3:ab:
00:89:e1:59:da:2e:2a:e1:f6:af:dc:0c:f0:14:89:26:46:8c:
a6:37:27:fd:9e:fc:26:74:40:0b:7c:63:fe:49:7f:36:5e:72:
bd:ad:e4:9c:74:59:db:d6:b2:1a:cf:24:c5:f9:f7:5d:39:23:
65:77:71:70:b7:fa:00:08:8c:fc:0f:f9:a5:e5:9b:a2:33:b2:
83:a4:02:63:3a:bb:84:1e:aa:24:d8:4b:fa:5e:06:e5:c0:92:
6c:28:cd:62:db:41:76:8e:1f:6c:77:c0:ab:9c:03:d9:2e:59:
18:c8:af:50:c6:db:43:ac:ff:34:cc:66:2a:00:69:c4:e1:20:
7a:12:6c:36:66:b2:a8:84:a8:08:2b:e3:f6:5e:54:05:58:46:
58:a2:ab:81:aa:f7:a1:d2:49:cf:d2:b2:08:19:4f:b2:03:16:
19:6e:cd:d7:33:86:75:e8:3c:6f:85:63:3b:96:a8:8e:27:bf:
f1:84:3f:da:24:3a:77:f0:35:34:70:a9:86:1b:39:c0:17:a2:
20:c3:94:ab:be:11:84:4f:58:95:35:70:ba:ac:6c:44:6f:eb:
5d:28:22:f7:b7:68:9d:d6:a8:a5:80:3b:5e:2d:8e:4b:8f:93:
84:68:db:43
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICavgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MTIw
ODEyMjBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDNFNDc4ODkxMzQxQjdF
ODQwN0REOTY4OEE1NkU5RUMxNURFM0UxNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF8BJBW/yAMZ4+JD7z02LSRu8HvJogh+SIvhgDBWMkUqHHk82d
zQK5q/MuOSqYpD+0uQAs+ZNP2YWLS8c0ABZi13O6ersKVa7q0Ks+Y3Ln+Twe2TPZ
TSrNFz04QSOoKIrVopdPI0/0gmSrxHrTnSRHitZ2nH0E62U+Csi3JydHutIYn2oe
3GwFwgoIGkixXsTNwpqhW0XKLCI/qaMqehNSQMo8+ZA0S0nha61jGhfX3tzc0UEw
cTgX7wudWUlqSicI9znwx6AxsQQ7zkYFE7WtDsrmrLEgcbdC+4yPH1Ovp2SkA/cG
SfFz0J5AAOk1XY7CVE3/xYtakEf7EZt93dzBAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUPkeIkTQbfoQH3ZaIpW6ewV3j4VQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1BrZUlrVFFiZm9RSDNa
YUlwVzZld1YzajRWUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQARgKvi
VBtnwaf7Azlq5602o6sAieFZ2i4q4fav3AzwFIkmRoymNyf9nvwmdEALfGP+SX82
XnK9reScdFnb1rIazyTF+fddOSNld3Fwt/oACIz8D/ml5ZuiM7KDpAJjOruEHqok
2Ev6XgblwJJsKM1i20F2jh9sd8CrnAPZLlkYyK9QxttDrP80zGYqAGnE4SB6Emw2
ZrKohKgIK+P2XlQFWEZYoquBqveh0knP0rIIGU+yAxYZbs3XM4Z16DxvhWM7lqiO
J7/xhD/aJDp38DU0cKmGGznAF6Igw5SrvhGET1iVNXC6rGxEb+tdKCL3t2id1qil
gDteLY5Lj5OEaNtD
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:06:47 2025 by rpki-client