Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/thQjFaPvcCwpDAwm_2xXSz2Iftg.roa
File: thQjFaPvcCwpDAwm_2xXSz2Iftg.roa (raw, json)
Hash identifier: M50wHmLktZFc6l3Kg889sjXQjSyfGxRivzhWu+B/DIE=
Subject key identifier: B6:14:23:15:A3:EF:70:2C:29:0C:0C:26:FF:6C:57:4B:3D:88:7E:D8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6B84
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/thQjFaPvcCwpDAwm_2xXSz2Iftg.roa
Signing time: Fri 13 Jun 2025 19:12:28 +0000
ROA not before: Fri 13 Jun 2025 19:12:28 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27524 (0x6b84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 13 19:12:28 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B6142315A3EF702C290C0C26FF6C574B3D887ED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:17:51:4d:ec:55:46:9a:ba:fd:31:60:86:
78:48:ad:b0:8e:2e:15:cb:c7:cf:83:85:df:4a:36:
15:ff:81:db:f9:b6:71:b8:b4:72:38:fe:be:7f:fc:
50:e6:d3:3f:8a:e8:82:e9:18:5b:e8:1f:6b:ae:ff:
f2:6b:da:09:82:d9:d3:9e:9b:d3:f9:e8:32:44:4e:
a5:00:37:09:96:cc:1f:8b:b0:ec:6e:03:a0:ca:8a:
fa:70:8c:ba:14:d0:b3:ca:f4:8e:47:76:22:b0:5b:
45:3d:cf:27:25:31:3c:58:74:84:40:e1:02:a1:6f:
91:46:6a:52:62:c0:2d:bc:da:7e:eb:59:5f:7e:2f:
ad:11:2d:1c:e6:03:09:1d:d8:50:8e:6e:1f:97:13:
94:98:b9:e3:d9:65:e9:56:46:f3:d7:99:0a:08:16:
d4:c8:8a:28:62:c9:d2:6b:cd:62:9b:0a:1a:ea:b2:
0e:71:1b:07:ed:7d:34:49:cd:a2:95:5c:76:5c:7d:
37:bf:d4:f6:9b:f2:38:f8:c7:12:fe:e1:9e:a6:b7:
00:8b:4b:c3:da:02:8a:a8:d3:d7:70:82:9c:bc:46:
5a:8b:0e:5c:e4:30:1e:ee:e0:b0:92:c9:8a:9b:b3:
03:ac:ee:31:29:9c:e4:ee:ff:dc:3b:4c:46:fd:98:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:14:23:15:A3:EF:70:2C:29:0C:0C:26:FF:6C:57:4B:3D:88:7E:D8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/thQjFaPvcCwpDAwm_2xXSz2Iftg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
27:74:8c:96:c4:46:50:1b:19:fb:9b:dc:5a:b7:95:b6:a9:ea:
06:0d:ae:27:8c:4f:f5:ea:80:3c:bb:7d:98:65:10:a7:06:9a:
0c:a9:5f:68:2f:ec:20:28:2f:fc:6b:35:18:f6:5a:d8:23:db:
d7:04:f5:e6:7c:0d:7c:f7:bd:90:e5:f2:dc:26:5e:0e:75:f3:
e3:64:ca:9c:28:5d:b2:ad:a1:01:fe:bf:14:60:25:89:f5:8b:
56:fb:75:00:72:41:08:93:29:80:f6:2e:ff:3f:bf:50:90:f6:
5e:4b:28:b4:1e:ee:aa:2a:0e:45:a1:87:c1:c4:c6:2b:42:ce:
24:48:8b:d8:f9:cd:a1:b4:e6:20:dc:f7:bd:85:1a:d4:32:69:
46:13:2c:f0:41:6f:6a:1c:c6:81:20:98:52:0b:e3:c7:c1:e8:
5e:20:ae:5c:32:53:f8:4a:9a:bc:94:7b:49:f8:de:e7:f6:cc:
ac:84:91:dd:94:8a:d4:39:72:85:b7:97:e7:31:e7:97:54:8b:
f7:17:88:c5:2e:06:ff:ed:0b:77:87:6d:95:c3:60:b7:af:a3:
0b:8f:75:e9:10:6b:e0:ad:88:7f:71:c0:f1:a1:4c:73:47:0f:
2d:61:12:b7:67:7c:d6:b2:7a:fc:39:0e:a9:57:5e:fb:d9:d3:
fa:a3:e8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:22:55 2025 by rpki-client