Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WcDksYoa245lxYEBJMgC7Oo0SF0.roa
File: WcDksYoa245lxYEBJMgC7Oo0SF0.roa (raw, json)
Hash identifier: IEX4jSlFGSNMzk/sj69IISheZFFgYbnVa/X3qLqDFqI=
Subject key identifier: 59:C0:E4:B1:8A:1A:DB:8E:65:C5:81:01:24:C8:02:EC:EA:34:48:5D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 66B4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WcDksYoa245lxYEBJMgC7Oo0SF0.roa
Signing time: Sat 31 May 2025 23:11:35 +0000
ROA not before: Sat 31 May 2025 23:11:35 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26292 (0x66b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 31 23:11:35 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=59C0E4B18A1ADB8E65C5810124C802ECEA34485D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:50:08:3c:34:46:e1:27:07:de:2e:33:85:22:
19:ea:76:e0:a4:90:72:41:06:88:50:e0:69:b6:35:
e3:bd:fe:a3:5e:3f:57:3e:c4:bb:ad:3a:42:68:56:
1e:3f:f1:f5:ed:86:b5:00:21:d7:3a:fc:cf:2d:fd:
5e:1c:e9:70:2f:bc:d4:20:30:54:f8:b0:54:62:6f:
af:2d:f7:4e:4c:23:03:70:0e:06:2d:20:c6:f3:d9:
a0:1a:44:79:0a:65:b6:4f:77:92:a2:0d:12:f4:2d:
df:5f:2a:b4:33:c5:8b:d8:07:86:3b:5a:81:d0:f3:
01:69:89:6f:ad:b0:43:1d:27:7c:12:d9:d6:b6:cb:
d9:c8:2d:00:c9:51:05:c4:42:32:df:f3:41:21:4f:
6b:02:76:02:44:5b:b1:60:77:3b:23:16:8c:76:9f:
04:72:a6:73:bd:b3:61:a2:b5:a3:de:6c:de:7c:91:
e4:57:cb:80:3a:82:25:66:c7:1c:6d:09:66:80:c0:
3e:25:01:28:0d:dc:a0:e4:7b:9f:4f:70:be:2f:4f:
16:8a:4e:7d:54:a7:85:cc:9a:c6:74:a4:61:9f:94:
66:ac:6f:c9:ff:66:bb:98:f7:9f:e3:0c:21:c9:19:
a8:81:a0:06:7c:67:53:bb:07:68:41:88:c5:71:f8:
8c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C0:E4:B1:8A:1A:DB:8E:65:C5:81:01:24:C8:02:EC:EA:34:48:5D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WcDksYoa245lxYEBJMgC7Oo0SF0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
8e:6f:cd:d6:b9:7a:dc:6a:ce:74:2d:e8:fb:c9:5a:d8:a9:c4:
d0:39:56:24:a4:f2:b6:c2:c3:92:ba:d1:32:e9:0f:4e:64:51:
ca:eb:5f:09:6f:9b:37:e5:76:02:e7:99:95:6b:db:ef:d5:06:
bd:34:25:11:db:4c:d3:a1:43:2d:89:d0:e5:f0:18:5e:b6:a9:
c9:f8:3e:a3:39:65:6e:2f:70:ac:70:f1:20:ba:51:ce:43:10:
1b:21:05:55:20:a9:be:0e:30:81:d5:34:2a:2c:46:90:d3:5b:
9d:b4:36:fa:92:0e:34:ac:ca:80:ee:7a:b0:93:7c:83:57:48:
32:97:92:be:67:43:1d:17:33:2b:30:d2:1b:d8:fd:da:8d:52:
a5:7f:9e:c3:c6:be:5b:10:4d:49:2f:ac:e0:84:98:1c:f6:57:
7c:9b:ac:8b:8b:0a:5b:a6:b3:59:95:51:33:b0:97:50:32:74:
e8:77:9a:69:67:1f:33:6c:e6:e6:58:23:d4:e2:10:94:34:1a:
9c:1e:d0:16:cb:81:c1:81:98:3b:ca:f2:b9:f8:65:ce:47:30:
44:19:4b:6a:c8:2d:c7:ae:ff:b8:b4:88:4a:6d:0f:e4:6a:39:
2c:e2:03:58:e6:c1:94:22:8f:f9:0b:63:bc:c8:f4:0b:5d:1d:
fc:1a:7c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:58:39 2025 by rpki-client