Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WtipUGrHadzr3ckR3pr56V5ihLM.roa
File: WtipUGrHadzr3ckR3pr56V5ihLM.roa (raw, json)
Hash identifier: h0p0KnTAhCZ2pchNOvKLs+/V2Oyzy4FhvMCHyWbGacw=
Subject key identifier: 5A:D8:A9:50:6A:C7:69:DC:EB:DD:C9:11:DE:9A:F9:E9:5E:62:84:B3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 64E6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WtipUGrHadzr3ckR3pr56V5ihLM.roa
Signing time: Tue 27 May 2025 03:41:13 +0000
ROA not before: Tue 27 May 2025 03:41:13 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25830 (0x64e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 27 03:41:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5AD8A9506AC769DCEBDDC911DE9AF9E95E6284B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dc:4d:c7:9c:06:a3:b2:11:a9:fd:a0:cf:97:
03:28:3f:23:b4:00:4d:38:aa:ea:6d:87:d6:84:06:
34:7e:81:af:f5:ff:e3:0e:61:73:85:d1:b3:ad:b7:
9f:37:d6:8e:8c:c9:15:53:fa:3c:fd:55:77:4d:80:
4a:da:be:41:53:d9:a4:3b:cf:73:d3:72:cd:f0:44:
7b:ae:e6:4e:c7:8a:5d:e7:9f:b8:f8:6d:0b:ea:11:
e5:42:bf:de:24:c6:68:38:5c:43:31:47:e0:a1:8f:
df:2a:91:2a:4c:a0:ef:68:7c:fc:ae:06:45:31:3f:
a2:c5:c5:65:41:c1:f8:c7:82:a9:0b:a2:61:de:35:
22:95:20:c1:32:3a:af:b8:4c:b7:ed:a7:cd:88:4f:
26:67:b6:4d:d2:a3:8c:f0:1c:54:a9:00:b6:80:b9:
74:cb:9d:af:47:f9:ef:cd:1e:0e:d8:75:2d:65:d5:
82:90:10:03:44:d0:8d:56:e6:82:fa:6e:85:31:63:
68:5c:2c:82:51:ff:cf:82:85:5e:95:85:05:e9:5f:
91:f7:14:bf:6e:c2:f6:04:3a:9a:c1:d5:e9:a2:84:
75:68:00:98:05:3e:88:b3:4d:9d:e5:e5:86:e1:55:
9f:e1:5a:d6:e2:7c:ff:8a:28:3f:8b:09:b8:13:6b:
a5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D8:A9:50:6A:C7:69:DC:EB:DD:C9:11:DE:9A:F9:E9:5E:62:84:B3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WtipUGrHadzr3ckR3pr56V5ihLM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
3e:88:dd:82:63:be:de:c8:ec:e9:f0:f8:e1:42:26:8e:f8:fa:
47:bd:01:6b:25:d1:d1:5b:11:ba:78:d6:79:85:2d:ea:e4:95:
fb:14:c6:7d:4b:af:e1:6b:1d:b2:98:dd:2a:9c:39:c4:15:85:
7b:ed:b2:11:01:7b:74:07:d0:2b:1a:9a:50:ca:ca:e4:53:7e:
e0:2b:41:da:b7:a4:c3:98:29:87:80:46:30:66:26:37:2f:13:
78:45:21:b7:df:85:b4:5a:7a:ec:8e:7f:2f:a4:7f:ed:22:1b:
d3:77:46:95:1a:99:de:2f:4d:0d:03:1a:0e:dd:ab:31:a7:3a:
30:55:fd:49:b4:4e:4c:30:04:10:29:da:2c:9f:e5:f4:b6:45:
d9:50:29:ba:d0:76:74:d3:5f:d8:d0:59:d7:c7:fc:17:1b:e2:
4a:3e:7a:f9:ee:fb:9d:2f:ac:d6:be:52:09:f0:c9:dd:14:9b:
06:eb:87:ed:3d:37:e6:5d:c3:4e:62:ae:fd:ec:12:72:f9:cf:
dd:0e:c3:b8:78:9a:fa:f8:7a:53:eb:c6:7d:55:ed:c3:3a:38:
86:f2:7e:53:74:90:f1:b4:a0:70:c5:8d:ed:01:b4:e2:9d:e6:
72:de:2b:7a:51:c0:c2:29:62:2b:c7:f8:67:ea:5c:39:3e:a2:
29:55:58:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:18:47 2025 by rpki-client