Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dFps2ED8XayD58TdX2PsVTMCSu4.roa
File: dFps2ED8XayD58TdX2PsVTMCSu4.roa (raw, json)
Hash identifier: ek5b0NRzK+nsXpC1Gz7+N9iX7ZOdLkfNASLn0SMBbEc=
Subject key identifier: 74:5A:6C:D8:40:FC:5D:AC:83:E7:C4:DD:5F:63:EC:55:33:02:4A:EE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6B56
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dFps2ED8XayD58TdX2PsVTMCSu4.roa
Signing time: Fri 13 Jun 2025 07:42:18 +0000
ROA not before: Fri 13 Jun 2025 07:42:18 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27478 (0x6b56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 13 07:42:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=745A6CD840FC5DAC83E7C4DD5F63EC5533024AEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:78:c3:01:2e:47:aa:94:10:87:02:9c:bd:78:
f6:54:d4:67:4f:07:33:40:ba:19:46:94:22:8b:94:
d6:c0:9f:7e:33:39:8a:85:13:9c:d9:0b:21:a3:86:
a3:61:2d:9f:fb:4f:f3:f2:9f:12:9d:df:9a:c6:2d:
0d:60:88:b6:68:b3:0f:98:46:8d:79:e0:50:00:e1:
2e:8f:9b:aa:27:f8:09:d5:e1:ed:cb:d2:77:49:b4:
b5:16:84:65:b6:15:d4:2c:12:5d:c4:2f:40:62:f5:
17:81:97:b9:41:1a:47:93:ef:11:73:17:c5:a9:d9:
8a:79:c2:c2:c8:2f:4b:d1:67:54:05:f1:d6:19:53:
b1:b0:94:8e:bd:34:f8:e3:50:22:0c:03:1b:76:fb:
4a:1e:59:9f:5a:07:05:04:ad:ea:ca:8f:e7:13:a9:
fc:7b:cd:eb:45:de:25:1a:ad:ae:d1:1d:99:1d:8c:
63:66:42:39:bc:80:76:3e:c6:6f:52:e3:cb:ef:0c:
b8:ca:f4:95:b8:29:e0:ae:04:a0:cb:7d:72:30:9e:
57:6b:48:23:7b:8a:54:28:1a:7c:84:69:50:65:7d:
8a:f0:12:18:4b:bf:39:c8:bb:ed:ca:bf:2f:89:5b:
5e:6e:1f:4c:ab:08:6d:b2:eb:ee:c8:e5:9c:da:cd:
c8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5A:6C:D8:40:FC:5D:AC:83:E7:C4:DD:5F:63:EC:55:33:02:4A:EE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dFps2ED8XayD58TdX2PsVTMCSu4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
86:aa:eb:b0:52:cb:58:9f:ea:47:19:9d:41:f1:34:9d:98:dd:
55:2f:16:21:40:41:76:b6:c7:54:72:e5:62:f8:6e:5b:9f:fd:
08:40:cc:78:a5:9d:c6:6b:dc:84:04:e7:cb:78:dc:b7:80:79:
cb:18:4c:77:77:06:c0:86:ee:45:9f:a6:8d:dc:b8:36:46:25:
e5:17:ae:55:8a:1b:82:3f:0c:b3:3d:07:61:a5:c8:05:40:a6:
c5:73:f8:78:ac:c8:9f:63:82:84:ee:12:38:99:53:bb:51:af:
f5:fa:27:92:cd:c1:2b:d5:9a:49:11:47:69:9b:f6:6d:6d:9d:
e1:a0:95:9c:3e:63:e7:97:8f:a4:3c:44:b1:c9:cd:ac:36:bd:
84:f8:14:4a:e1:89:22:38:d8:1c:53:67:4d:c3:5d:c5:2d:37:
e2:45:a5:c4:ba:c5:1c:9b:05:52:ba:b7:5b:b1:ff:94:1d:68:
cc:d2:76:ca:e5:31:10:1e:0e:3d:85:ab:6e:6c:09:de:b1:6a:
19:a7:99:18:f7:93:e4:e4:aa:93:4f:15:70:8c:9e:ba:48:1e:
d7:00:d5:23:9b:0f:3f:0d:88:d1:fc:cf:80:40:f1:8c:94:3b:
f5:e1:c8:bd:d3:bb:0e:2e:9f:29:c9:e9:a9:a3:3d:69:d1:42:
09:34:21:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:09 2025 by rpki-client