Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/r8EPDFKua2aFtwUtxSYWvGIec04.roa
File: r8EPDFKua2aFtwUtxSYWvGIec04.roa (raw, json)
Hash identifier: FljYDYOWEiCIetxtCb5AeHZZx4VbYGl/Ztf5hQxYvgM=
Subject key identifier: AF:C1:0F:0C:52:AE:6B:66:85:B7:05:2D:C5:26:16:BC:62:1E:73:4E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6BD4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/r8EPDFKua2aFtwUtxSYWvGIec04.roa
Signing time: Sat 14 Jun 2025 15:12:18 +0000
ROA not before: Sat 14 Jun 2025 15:12:18 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27604 (0x6bd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 14 15:12:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=AFC10F0C52AE6B6685B7052DC52616BC621E734E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:49:2a:66:37:d9:87:34:ad:b6:aa:1d:6a:14:
09:a6:64:6d:a3:87:2e:05:46:06:2b:fe:81:dd:fa:
20:1e:86:80:fd:f0:4e:5e:7f:cb:3d:36:7b:ee:ae:
a6:64:59:b0:8a:42:40:25:c4:5d:04:11:2d:a0:b5:
62:85:07:aa:95:e8:5d:85:28:d8:9f:ed:c4:24:10:
91:60:a0:5c:2f:42:e7:54:e4:9b:7d:5a:21:9c:d5:
ff:d5:40:ab:b8:f5:72:cf:b7:e3:76:7a:19:60:bb:
6f:51:dd:3a:61:d3:71:19:ff:5b:47:ec:23:7a:50:
3c:12:6f:a7:49:74:7a:a0:25:37:c0:4a:f8:e0:a3:
a9:b9:e7:3d:3d:f0:00:96:c5:bf:2c:3f:0b:35:bd:
a8:e7:9a:5e:72:1c:dd:3c:88:e0:3e:eb:9c:2c:07:
db:89:83:85:56:3f:39:c4:fb:a4:65:11:42:79:4e:
31:58:fb:22:0a:1d:a2:92:4d:35:b5:1f:f4:7a:2c:
32:e9:85:24:43:09:7b:8d:68:55:a6:37:f2:3a:d3:
de:78:7e:34:a6:59:26:8b:4d:47:df:fb:af:4f:0e:
ce:d7:d0:89:cf:c3:ed:da:62:a6:ec:54:9a:3e:69:
a8:73:b7:16:d8:55:b7:34:30:31:2c:2a:30:61:cb:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C1:0F:0C:52:AE:6B:66:85:B7:05:2D:C5:26:16:BC:62:1E:73:4E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/r8EPDFKua2aFtwUtxSYWvGIec04.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
2f:7d:42:67:93:94:81:05:49:c8:b1:6e:10:64:ee:47:3e:1c:
09:eb:5a:2f:52:bb:61:7d:64:d3:4c:47:44:60:c4:1a:78:53:
ce:cd:23:5d:c2:d7:d5:2f:61:54:6b:53:e2:c8:53:81:fd:aa:
86:62:51:96:5d:e1:73:83:d2:22:b2:04:3a:49:79:4b:da:67:
35:cc:32:41:18:e9:b7:5b:37:25:07:70:32:e1:af:f8:fe:2b:
57:9a:62:49:ac:49:40:b1:5b:37:4b:e1:44:b2:fa:8b:79:bf:
8d:19:29:12:66:02:5c:8c:1d:7d:04:5e:55:f0:de:fa:51:45:
a4:1e:40:be:21:1f:d9:6c:3c:39:16:dc:e6:43:fb:88:8e:0b:
c5:d9:8d:ec:fc:32:40:da:de:b0:05:41:1f:f0:66:b0:71:08:
ee:79:5f:4e:e8:98:8a:4b:d8:ce:02:54:51:ea:48:4f:c0:6a:
17:b3:36:7f:a0:2a:ab:06:0e:e9:48:ed:fa:9d:82:bd:77:a9:
03:b4:30:a8:2e:6f:d7:50:b2:d0:02:4c:cd:45:7d:61:ee:f9:
3c:0f:d5:05:9d:b3:87:c6:9a:3b:8c:bb:b4:d3:b0:16:3a:5e:
49:3d:27:b8:25:42:de:0f:94:db:5a:1d:cf:9b:f2:ae:09:86:
bd:cf:55:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:22:36 2025 by rpki-client