Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/tAvkvxQ1fA6alkBYfT4YfLR6YqI.roa
File: tAvkvxQ1fA6alkBYfT4YfLR6YqI.roa (raw, json)
Hash identifier: UVH8h+DUqqmr87g/mm1Kjb+2YFXGU/46f6lGzik5YYY=
Subject key identifier: B4:0B:E4:BF:14:35:7C:0E:9A:96:40:58:7D:3E:18:7C:B4:7A:62:A2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 612E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tAvkvxQ1fA6alkBYfT4YfLR6YqI.roa
Signing time: Sat 17 May 2025 05:40:27 +0000
ROA not before: Sat 17 May 2025 05:40:27 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24878 (0x612e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 17 05:40:27 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B40BE4BF14357C0E9A9640587D3E187CB47A62A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:79:9b:e0:90:83:8a:9b:64:dd:a8:db:34:
fc:16:8f:45:d8:6d:6c:8f:98:98:16:55:f7:7b:59:
cf:20:f4:5b:1f:27:b6:bc:68:fe:17:a0:04:32:1f:
07:b9:9f:1e:1d:22:ca:53:42:8c:5e:f2:54:7d:a9:
f3:5a:46:75:69:d9:d5:1a:14:1e:e8:8d:53:b9:d2:
3f:ee:05:cf:77:8f:20:5d:6a:fe:72:79:f3:ce:e9:
c9:9b:bd:05:1b:3b:5d:0c:fa:d2:94:25:ab:ce:ce:
05:62:fc:18:73:61:f4:f0:ce:cf:23:41:4a:64:11:
ac:1e:f8:15:66:8b:2f:f0:94:8f:78:26:1c:89:4c:
8b:b0:c8:11:b9:fa:8b:98:a1:b1:40:76:b4:58:51:
8e:db:78:0c:7d:cd:90:34:78:03:08:4b:d2:c5:73:
54:bd:18:48:5c:ee:88:24:c9:c6:4a:13:f9:5b:6a:
1d:58:f2:91:5f:49:cd:f8:fe:f1:36:dd:5f:a2:3d:
72:4e:bb:3e:8a:36:4f:95:3f:d5:97:79:16:2b:9b:
cb:f8:38:c2:e6:ad:01:43:8d:41:55:6e:8c:08:8a:
93:7a:56:36:7c:f9:b6:08:e7:0b:1c:4f:79:20:ff:
41:4b:de:db:43:1d:c3:ad:be:f1:1d:ee:12:21:6b:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0B:E4:BF:14:35:7C:0E:9A:96:40:58:7D:3E:18:7C:B4:7A:62:A2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tAvkvxQ1fA6alkBYfT4YfLR6YqI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b1:98:74:6c:ca:15:cc:ee:d3:e5:41:39:e0:46:3e:0a:42:6c:
71:e0:3a:97:7f:5d:a8:c1:80:49:8b:01:1b:94:6a:6b:b3:ce:
77:ce:9b:46:b7:22:0b:3e:28:5a:5d:b8:9d:d0:7c:8c:e4:2f:
ee:52:88:d2:74:de:ec:3e:1d:11:fc:4b:32:fd:cf:88:3c:e8:
b4:a5:22:61:fc:5e:e6:3b:11:31:a0:3a:4d:07:8f:07:29:71:
8b:f1:bd:f7:e5:2c:25:9b:eb:ef:3a:4e:3f:dd:4f:7e:df:09:
fe:64:f6:e7:13:26:8a:85:1d:cc:2f:a9:b4:93:ad:31:47:a4:
53:68:0d:71:60:3c:d3:64:a2:8c:8b:ca:9b:19:fc:ba:39:ce:
3f:d2:f6:bc:77:01:f6:96:e6:c1:81:7e:9a:e7:55:ec:60:27:
68:52:03:af:cc:a5:e4:30:96:30:13:9b:9a:b1:7f:88:c2:63:
68:36:22:7c:cf:e4:13:d1:9c:c5:27:8e:6c:0d:67:ca:85:9c:
d4:16:66:93:7a:ae:24:13:06:09:1e:19:f2:76:1f:e8:41:39:
27:56:19:23:39:d0:ac:b2:4c:de:f5:f4:eb:79:84:21:b6:26:
ae:62:c1:51:10:cf:5a:92:d5:68:e9:8c:b6:a3:2b:1f:1f:91:
e6:20:e1:aa
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICYS4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MTcw
NTQwMjdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEI0MEJFNEJGMTQzNTdD
MEU5QTk2NDA1ODdEM0UxODdDQjQ3QTYyQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCn3Hmb4JCDiptk3ajbNPwWj0XYbWyPmJgWVfd7Wc8g9FsfJ7a8
aP4XoAQyHwe5nx4dIspTQoxe8lR9qfNaRnVp2dUaFB7ojVO50j/uBc93jyBdav5y
efPO6cmbvQUbO10M+tKUJavOzgVi/BhzYfTwzs8jQUpkEawe+BVmiy/wlI94JhyJ
TIuwyBG5+ouYobFAdrRYUY7beAx9zZA0eAMIS9LFc1S9GEhc7ogkycZKE/lbah1Y
8pFfSc34/vE23V+iPXJOuz6KNk+VP9WXeRYrm8v4OMLmrQFDjUFVbowIipN6VjZ8
+bYI5wscT3kg/0FL3ttDHcOtvvEd7hIha0AbAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUtAvkvxQ1fA6alkBYfT4YfLR6YqIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3RBdmt2eFExZkE2YWxr
QllmVDRZZkxSNllxSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQCxmHRs
yhXM7tPlQTngRj4KQmxx4DqXf12owYBJiwEblGprs853zptGtyILPihaXbid0HyM
5C/uUojSdN7sPh0R/Esy/c+IPOi0pSJh/F7mOxExoDpNB48HKXGL8b335Swlm+vv
Ok4/3U9+3wn+ZPbnEyaKhR3ML6m0k60xR6RTaA1xYDzTZKKMi8qbGfy6Oc4/0va8
dwH2lubBgX6a51XsYCdoUgOvzKXkMJYwE5uasX+IwmNoNiJ8z+QT0ZzFJ45sDWfK
hZzUFmaTeq4kEwYJHhnydh/oQTknVhkjOdCsskze9fTreYQhtiauYsFREM9aktVo
6Yy2oysfH5HmIOGq
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:17:22 2025 by rpki-client