Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hs62bsbsJ-pCafWLnUHkXcwyuM0.roa
File: hs62bsbsJ-pCafWLnUHkXcwyuM0.roa (raw, json)
Hash identifier: AufFrHQE09g8p8PwB+rojRB1yxFeDSKFpx4TPip39wk=
Subject key identifier: 86:CE:B6:6E:C6:EC:27:EA:42:69:F5:8B:9D:41:E4:5D:CC:32:B8:CD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6916
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hs62bsbsJ-pCafWLnUHkXcwyuM0.roa
Signing time: Sat 07 Jun 2025 07:45:31 +0000
ROA not before: Sat 07 Jun 2025 07:45:31 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26902 (0x6916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 7 07:45:31 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=86CEB66EC6EC27EA4269F58B9D41E45DCC32B8CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fe:95:8b:65:5a:c8:e8:15:3e:63:36:6e:bd:
40:d1:8a:95:62:c8:c8:63:73:74:34:08:12:05:48:
3b:47:b0:5f:f6:f8:aa:37:99:bf:a1:07:b7:1a:57:
4c:12:a9:5c:6e:43:ad:56:27:d7:49:7a:24:f7:18:
37:17:0b:5d:a9:9f:ea:5e:d6:dd:be:3e:25:9b:db:
ae:a1:3a:6d:5b:fd:02:5e:42:e6:ff:2a:03:9f:47:
c0:78:56:2b:f8:c2:08:f1:60:b5:72:85:5f:a3:2b:
66:b9:c8:c0:1c:4d:19:29:46:4c:56:cb:7f:c4:3c:
e3:61:2d:97:ab:4d:92:2a:6f:d4:af:f8:2b:b4:03:
44:1c:23:37:29:30:be:21:1c:33:4f:e8:d5:4f:e8:
c5:8c:37:22:1b:86:94:c3:d7:10:67:46:8f:93:b2:
25:ac:52:d5:ee:c1:1c:83:34:a9:41:a6:33:f7:c0:
4d:85:7d:df:f4:b8:f6:7a:a5:4b:8e:29:36:0d:ed:
0d:df:93:6a:3e:cb:fc:55:9f:0e:62:78:40:94:89:
d7:7d:1f:59:17:67:c6:c6:2c:d8:4c:f3:2a:8b:2f:
c4:13:d6:9a:3c:1a:2a:bb:9c:bb:78:db:ca:1f:12:
1f:77:61:29:fa:59:b0:9b:ea:24:c1:35:2d:cb:57:
45:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CE:B6:6E:C6:EC:27:EA:42:69:F5:8B:9D:41:E4:5D:CC:32:B8:CD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hs62bsbsJ-pCafWLnUHkXcwyuM0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b7:56:1a:30:a0:ec:1c:38:87:9c:8f:a1:82:85:7e:84:3b:17:
a6:44:7c:b3:63:17:d8:0f:eb:1c:27:f4:67:c0:ee:9d:31:3e:
a8:07:04:49:0d:0a:a0:f4:b5:c2:52:d2:67:19:0e:ed:8a:e2:
e5:00:d2:ca:d0:58:99:10:65:4c:55:93:f7:70:fc:e9:24:a7:
11:1e:49:d3:47:ff:1b:22:fe:7d:8d:f2:96:40:8e:f6:19:28:
a4:22:04:61:b7:ac:dc:55:0f:ea:b4:a5:eb:8b:fa:a6:a4:b7:
9c:24:b6:d8:62:e8:50:ef:b7:d1:9f:15:89:46:94:13:4f:6f:
32:24:47:5e:2e:93:71:09:be:43:95:f9:78:c4:4a:fb:82:a6:
6f:36:fc:fe:78:81:5a:f2:ae:2c:90:f8:6f:28:c6:d5:56:a9:
9b:21:4b:22:b0:63:54:9e:17:f9:2c:20:e9:ad:f4:e0:f3:bc:
80:7e:b2:55:6a:0a:ee:da:a2:54:03:09:d2:06:1b:f3:21:38:
4f:ca:d5:8b:a6:cb:e8:90:38:bb:41:ff:07:36:90:01:3a:b7:
35:0e:74:9c:31:2f:62:4b:5d:17:d0:b5:b2:9e:cc:3b:62:0e:
b0:e2:26:75:bc:53:ba:72:3e:30:46:d2:b4:86:3b:05:c0:a5:
4d:82:ab:29
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICaRYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MDcw
NzQ1MzFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDg2Q0VCNjZFQzZFQzI3
RUE0MjY5RjU4QjlENDFFNDVEQ0MzMkI4Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDr/pWLZVrI6BU+YzZuvUDRipViyMhjc3Q0CBIFSDtHsF/2+Ko3
mb+hB7caV0wSqVxuQ61WJ9dJeiT3GDcXC12pn+pe1t2+PiWb266hOm1b/QJeQub/
KgOfR8B4Viv4wgjxYLVyhV+jK2a5yMAcTRkpRkxWy3/EPONhLZerTZIqb9Sv+Cu0
A0QcIzcpML4hHDNP6NVP6MWMNyIbhpTD1xBnRo+TsiWsUtXuwRyDNKlBpjP3wE2F
fd/0uPZ6pUuOKTYN7Q3fk2o+y/xVnw5ieECUidd9H1kXZ8bGLNhM8yqLL8QT1po8
Giq7nLt428ofEh93YSn6WbCb6iTBNS3LV0VJAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUhs62bsbsJ+pCafWLnUHkXcwyuM0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2hzNjJic2JzSi1wQ2Fm
V0xuVUhrWGN3eXVNMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQC3Vhow
oOwcOIecj6GChX6EOxemRHyzYxfYD+scJ/RnwO6dMT6oBwRJDQqg9LXCUtJnGQ7t
iuLlANLK0FiZEGVMVZP3cPzpJKcRHknTR/8bIv59jfKWQI72GSikIgRht6zcVQ/q
tKXri/qmpLecJLbYYuhQ77fRnxWJRpQTT28yJEdeLpNxCb5Dlfl4xEr7gqZvNvz+
eIFa8q4skPhvKMbVVqmbIUsisGNUnhf5LCDprfTg87yAfrJVagru2qJUAwnSBhvz
IThPytWLpsvokDi7Qf8HNpABOrc1DnScMS9iS10X0LWynsw7Yg6w4iZ1vFO6cj4w
RtK0hjsFwKVNgqsp
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:52:36 2025 by rpki-client