Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oH-c-bhdfyVHWTCGOwe4ZVAWBFs.roa
File: oH-c-bhdfyVHWTCGOwe4ZVAWBFs.roa (raw, json)
Hash identifier: BqjQoXMDt9l9LNZ/BM09K0gfgKqYZnBaJDh0M38nyCQ=
Subject key identifier: A0:7F:9C:F9:B8:5D:7F:25:47:59:30:86:3B:07:B8:65:50:16:04:5B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6A96
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oH-c-bhdfyVHWTCGOwe4ZVAWBFs.roa
Signing time: Wed 11 Jun 2025 07:45:47 +0000
ROA not before: Wed 11 Jun 2025 07:45:47 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27286 (0x6a96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 11 07:45:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A07F9CF9B85D7F25475930863B07B8655016045B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:89:d6:9a:7c:4f:83:5d:f4:ff:a2:10:15:ec:
5f:d1:d5:d5:de:f0:d7:ff:61:ba:69:86:75:56:aa:
74:51:69:b5:3b:1f:78:5d:3a:0e:77:89:1e:7e:60:
8b:b6:32:37:e8:92:74:58:0b:d6:c4:35:8b:de:1d:
1b:81:80:ce:32:60:92:d2:f9:c7:7c:c3:79:aa:35:
51:83:ee:5e:c3:c1:1d:87:67:63:de:1a:11:64:aa:
b4:de:b7:be:c1:82:32:b9:36:69:6a:20:b1:c0:05:
3a:07:da:65:24:82:3d:8e:ab:fe:8e:3b:2f:7e:57:
5a:62:37:e0:71:dd:6e:15:64:ae:93:55:68:7e:cd:
8b:6f:ae:b8:86:cf:c7:e6:dc:8c:08:f3:d3:5d:0f:
4d:79:a0:d6:99:07:74:51:ab:55:a8:27:db:e0:77:
a3:86:40:40:bb:59:0d:e2:50:f5:7a:4e:3d:5f:13:
51:ec:a0:94:e0:24:db:65:d2:cc:cd:19:94:74:58:
88:ea:30:c2:67:df:b3:97:cb:84:d0:50:15:27:a1:
4a:44:23:4a:f9:77:65:ac:e9:e7:43:ea:7b:c8:7b:
db:09:4e:ae:3f:06:42:f9:23:69:eb:cb:8e:88:7c:
f3:20:24:ff:1f:d0:cf:69:46:d2:32:70:80:06:ac:
17:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7F:9C:F9:B8:5D:7F:25:47:59:30:86:3B:07:B8:65:50:16:04:5B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oH-c-bhdfyVHWTCGOwe4ZVAWBFs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
18:04:75:85:0a:3c:92:cc:18:60:15:79:04:2b:90:b1:d0:3e:
ad:9b:f2:f4:80:54:c4:c6:9d:a4:c4:10:a1:a2:3c:eb:3b:62:
db:a6:76:6c:6b:81:e0:4c:8d:bf:d8:d3:cb:2e:ca:2d:fa:44:
a7:81:34:54:15:5a:e1:70:8f:09:76:e6:0a:12:72:8c:a4:08:
35:28:31:9b:86:97:8f:b5:5f:4e:c8:25:ec:2c:06:72:24:fb:
dd:57:43:67:62:08:50:5e:1c:40:dc:3c:fb:c2:cb:bd:93:77:
59:d1:65:2a:15:2d:ad:8e:00:8d:2a:2e:ba:02:82:30:f4:79:
93:83:b0:88:cc:39:18:67:af:5a:7e:69:82:e7:b7:0f:64:c4:
96:2b:9e:86:62:00:8d:58:4c:c5:f4:73:34:9b:cd:69:4a:c3:
5d:1d:44:fc:b7:8b:30:50:de:54:5a:76:e6:80:6a:ab:4f:66:
fe:10:8f:f3:7e:ac:c1:da:85:9d:56:1d:87:29:06:f8:7c:f3:
c4:dd:1a:12:78:e1:a0:04:96:24:9a:7f:29:3c:bd:d1:8c:f3:
90:fd:25:68:3c:11:4a:e7:79:eb:14:72:f5:2c:25:9b:12:7c:
f0:ba:3b:d5:2c:03:eb:34:11:ec:ab:f4:2a:8c:6f:25:4f:e2:
a9:f1:a0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:08:39 2025 by rpki-client