Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/rTf0l2e4-FPVU1sEN5D5jvsBTo4.roa
File: rTf0l2e4-FPVU1sEN5D5jvsBTo4.roa (raw, json)
Hash identifier: K7EcBGJ94IChG1Lra+IFYWZaR7tpIVGsvaflMRzms7c=
Subject key identifier: AD:37:F4:97:67:B8:F8:53:D5:53:5B:04:37:90:F9:8E:FB:01:4E:8E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6BE4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rTf0l2e4-FPVU1sEN5D5jvsBTo4.roa
Signing time: Sat 14 Jun 2025 19:12:40 +0000
ROA not before: Sat 14 Jun 2025 19:12:40 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27620 (0x6be4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 14 19:12:40 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=AD37F49767B8F853D5535B043790F98EFB014E8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:53:5b:c5:eb:70:17:f6:a4:a0:84:e0:a7:
99:d0:65:50:69:39:a1:e3:83:9f:25:73:f8:2c:e4:
0e:89:d9:ad:72:90:57:7b:a3:09:5f:f5:01:e9:d6:
fa:07:c5:5d:8f:2c:22:e1:0f:5d:a3:7b:d1:53:ee:
f0:d6:05:19:e2:7c:bd:74:3b:e0:e2:f7:9c:1e:a0:
bf:7f:9c:c3:bb:f5:69:ed:2a:f8:03:ff:e9:d4:bb:
b7:4a:ba:85:db:12:44:5d:1a:83:cd:ef:3f:c7:bd:
df:7b:25:bd:3c:4e:f4:8c:9b:8a:da:2b:4b:02:3d:
46:54:08:6e:45:9d:4f:96:8d:0d:bc:01:83:bd:39:
24:2e:a9:e4:eb:d2:81:f9:d4:64:3d:db:1c:1e:77:
6d:f3:79:14:ca:c7:8c:27:53:47:ff:8b:b2:db:cf:
b3:35:c5:2a:81:80:63:99:87:db:2a:31:13:c9:24:
7b:cf:a9:89:0e:ef:89:c7:14:2e:2c:2d:4f:00:0e:
d4:1a:b3:d3:e9:31:94:18:23:5c:ce:ba:7f:f4:21:
06:01:03:d7:23:da:25:10:25:7d:13:4f:88:81:ed:
68:7e:fe:bf:94:f5:51:9b:31:ae:ed:1b:00:7a:b7:
d7:68:f9:06:81:32:3c:d2:74:3f:98:c4:fb:d9:4e:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:37:F4:97:67:B8:F8:53:D5:53:5B:04:37:90:F9:8E:FB:01:4E:8E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rTf0l2e4-FPVU1sEN5D5jvsBTo4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
82:f9:14:f7:7f:16:96:f0:19:e1:85:93:38:14:a7:cd:f7:de:
43:de:31:1d:66:98:73:0e:31:7c:6a:72:b8:e4:44:61:f4:7f:
de:5b:ae:74:23:b1:34:c8:9c:a2:ad:29:a5:9e:97:71:d6:d8:
1c:d3:4b:08:0e:5b:e2:4a:27:6b:f5:91:28:28:f1:71:6c:d3:
5b:82:16:ea:d0:dd:e3:53:ef:0c:98:76:22:f9:3a:a7:49:a6:
ba:a9:ff:cb:2f:cb:d7:f7:9d:6f:62:13:9e:d0:49:a1:bb:60:
0f:54:45:76:7b:f7:0a:d2:35:77:c9:06:3c:45:23:90:df:78:
52:34:ee:c3:a4:11:a3:4a:5d:ae:95:25:c4:05:8d:b5:36:e1:
16:2d:5d:90:46:e6:3e:03:db:be:21:3c:8b:c0:db:91:fa:d8:
38:1f:c8:e1:26:fd:4d:21:4d:2a:78:b0:72:a8:b1:90:fc:2f:
a9:ed:cb:46:1c:a8:1b:c3:28:4a:91:ce:4c:bf:ef:50:5c:3f:
ff:04:f0:07:e6:d5:51:86:e6:00:fe:ec:d8:97:2e:ed:b0:24:
d1:e2:ab:b1:d8:bd:ff:85:c3:95:8c:13:bc:51:c0:ec:72:91:
8d:b9:8e:e2:d2:f0:0f:4c:e6:2c:13:3b:00:03:fb:28:47:b5:
cc:c0:b8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:08:28 2025 by rpki-client