Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yGPa_xrWZ-fUt6Da7gVdr5PDAg8.roa
File: yGPa_xrWZ-fUt6Da7gVdr5PDAg8.roa (raw, json)
Hash identifier: LG4DyRSvxC6pDtxdQ+eO9NVdh7nk54ifyR3B0KTSS6Y=
Subject key identifier: C8:63:DA:FF:1A:D6:67:E7:D4:B7:A0:DA:EE:05:5D:AF:93:C3:02:0F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6B28
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yGPa_xrWZ-fUt6Da7gVdr5PDAg8.roa
Signing time: Thu 12 Jun 2025 20:12:21 +0000
ROA not before: Thu 12 Jun 2025 20:12:21 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27432 (0x6b28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 12 20:12:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C863DAFF1AD667E7D4B7A0DAEE055DAF93C3020F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:14:14:f3:8c:60:4a:0b:ae:33:99:1a:3b:
1b:fb:16:27:c4:7e:5f:15:c1:07:a7:7d:4a:6e:04:
44:65:64:d0:5d:be:54:61:db:c9:64:12:36:4b:55:
92:43:41:6a:31:b4:00:ab:60:ac:59:4e:7c:fb:8d:
de:bf:5e:f0:08:60:58:30:b1:da:ed:1e:fb:59:dc:
61:4b:b9:9b:a8:bd:79:4c:c4:84:5b:a5:70:7f:59:
03:9d:12:14:4a:f1:05:74:9e:57:50:a5:d8:0b:18:
55:43:80:34:1f:30:a4:ec:6c:ed:43:bb:1c:f6:7a:
72:b3:76:c4:73:a2:8f:b1:30:65:17:36:dd:f7:c5:
16:71:db:20:36:24:bc:7e:dd:f4:06:52:f4:9e:11:
a0:d7:91:dc:79:a0:30:3c:86:a6:4a:d1:37:29:d6:
66:5d:d9:7c:c1:4a:0b:5e:95:dd:5b:3a:57:d9:d2:
af:97:8e:dc:c5:51:f9:ec:d1:1c:60:7a:78:f1:11:
03:a6:2c:bf:b7:82:db:e0:35:0c:62:cc:c2:61:b4:
7a:a9:82:e6:6e:bc:f3:cf:f9:69:51:8a:4f:8e:08:
e8:da:7c:01:66:0f:7c:2d:ec:c0:14:2e:5d:09:8a:
81:94:a6:03:56:ba:20:98:9f:54:6f:18:50:54:a9:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:63:DA:FF:1A:D6:67:E7:D4:B7:A0:DA:EE:05:5D:AF:93:C3:02:0F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yGPa_xrWZ-fUt6Da7gVdr5PDAg8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
2b:cd:48:1f:15:d6:91:b5:3e:a6:cf:9f:03:af:9a:80:8a:8e:
48:aa:75:5e:1d:ab:0e:a9:c3:41:23:02:1c:14:91:cc:9b:c9:
d4:a3:22:72:f9:e3:53:20:de:47:bc:14:8c:16:30:3c:e3:91:
e8:df:89:66:08:5d:71:7d:cc:76:3c:52:a2:5b:4c:80:c4:e8:
db:b3:07:90:52:f8:f8:ed:41:91:c6:b6:aa:63:62:a8:77:59:
c4:b2:a7:f9:1e:f8:d3:1a:37:53:81:6c:46:b4:e8:a6:c5:e7:
3c:fe:02:a4:4d:5d:00:bc:d8:13:08:1c:f4:9c:2b:24:4b:4e:
b1:a0:64:54:16:2c:98:67:c6:1b:62:f1:e5:a5:ca:f8:d8:07:
a2:d1:16:06:fc:5d:ee:a4:13:42:37:3e:42:4f:6c:b5:ea:3e:
44:88:c6:c1:b2:c0:10:75:57:ba:0c:c8:f3:55:c0:0e:06:de:
48:39:6d:e5:f4:c2:ed:9d:b1:71:ed:24:7f:8c:55:de:6c:f5:
b8:6a:7c:08:b3:15:38:14:d8:94:36:01:6b:fd:39:9a:21:d0:
96:bd:2e:fd:a2:61:f1:aa:de:5b:06:e5:27:84:33:fc:d0:0b:
1d:c0:fb:78:88:65:88:9f:2f:9f:fe:f0:79:6d:c1:ec:46:f4:
69:c7:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:18:31 2025 by rpki-client