Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RohYm_N0DwoZFq41M7hgwsm9_zE.roa
File: RohYm_N0DwoZFq41M7hgwsm9_zE.roa (raw, json)
Hash identifier: 3Ovg9I3O2UbUlwkqSVA+9cxifeyhfkI2rXBuxkKlzJE=
Subject key identifier: 46:88:58:9B:F3:74:0F:0A:19:16:AE:35:33:B8:60:C2:C9:BD:FF:31
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 66F8
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RohYm_N0DwoZFq41M7hgwsm9_zE.roa
Signing time: Sun 01 Jun 2025 16:11:43 +0000
ROA not before: Sun 01 Jun 2025 16:11:43 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26360 (0x66f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 1 16:11:43 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4688589BF3740F0A1916AE3533B860C2C9BDFF31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:81:22:a6:15:ad:0b:b1:9c:6b:b5:e8:10:
9b:3c:96:71:62:0c:8f:66:78:13:20:07:08:ff:0c:
d3:57:66:39:8c:5f:73:d2:29:b5:07:22:87:2a:bc:
9b:59:e4:d6:6e:7d:23:a4:45:a3:3f:95:f6:2e:1d:
30:ba:03:26:e9:67:1e:04:b5:8c:33:53:46:a6:b9:
b7:6b:16:33:d6:1e:0a:15:79:da:55:90:09:d7:34:
d7:57:f1:61:0f:12:27:01:9e:31:95:f8:0b:81:db:
56:b7:d7:e5:b4:72:5c:05:68:e7:57:aa:e8:52:37:
e1:fc:e2:80:a8:2c:a6:dd:aa:d7:b5:26:61:2f:89:
22:fc:d5:21:67:3f:cb:14:f1:aa:14:30:6f:2b:bc:
08:c0:2d:2a:0c:08:f0:47:87:d2:88:ed:23:42:04:
5d:57:24:69:58:00:a0:d8:2e:48:26:9c:41:2e:e9:
9b:38:db:59:2b:47:3b:19:4f:91:d5:54:f7:e7:55:
bb:a9:32:45:23:ba:ba:ce:1a:b4:c8:f6:69:76:19:
05:0f:52:cf:61:89:6f:63:50:c9:5c:67:5b:4b:db:
ee:b3:95:ca:f5:70:27:6b:b2:b2:8d:88:0c:19:3d:
a3:81:1e:e4:f2:ad:ea:2b:df:1f:84:bf:80:e4:5c:
80:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:88:58:9B:F3:74:0F:0A:19:16:AE:35:33:B8:60:C2:C9:BD:FF:31
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RohYm_N0DwoZFq41M7hgwsm9_zE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b1:37:fe:24:91:7f:26:34:46:34:fd:ce:57:1c:70:66:0a:41:
e2:6a:f7:8e:80:f7:5d:f3:d4:a5:0d:13:5d:48:c2:9c:55:df:
20:fb:ec:5f:a9:c7:80:85:f0:46:41:e1:bd:01:dd:ec:59:a9:
87:c9:a8:e1:7d:3b:3f:a4:8d:1f:41:02:97:b4:83:0c:47:35:
1b:ea:f7:ad:31:80:a4:29:db:21:4c:92:73:43:f9:bc:88:7b:
80:65:b5:c0:be:b0:7d:4f:bf:ea:aa:ec:c7:93:02:97:26:91:
11:e4:0b:1e:a4:25:3f:74:01:38:c4:91:4d:75:68:98:63:f6:
44:94:11:f9:04:1b:60:75:7e:bb:46:fc:93:72:28:a0:5a:96:
aa:52:86:9f:1e:4d:31:cf:7e:bd:c1:54:6a:69:53:21:a4:fa:
11:10:11:2c:2c:51:de:a6:5e:b9:c8:91:93:42:3c:80:d4:d7:
50:3f:62:71:cc:2a:8e:4f:73:12:73:51:54:c9:67:c8:03:f5:
59:27:93:32:6f:d1:8e:bd:68:9b:80:f2:52:0d:b0:ff:06:d6:
89:c7:22:a5:77:6d:da:de:77:d0:59:e2:25:c4:73:aa:2b:42:
58:32:d9:4d:76:8a:13:11:74:d0:5a:32:48:f6:a5:65:a0:9e:
ab:12:82:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:01:35 2025 by rpki-client