Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/LBK5PsQV7TO2sjYsBN3g90VYpVg.roa
File: LBK5PsQV7TO2sjYsBN3g90VYpVg.roa (raw, json)
Hash identifier: AWB3lo1RCmgl1bwisiz2pyW0Clhf2t3chRZ8FU5vdQw=
Subject key identifier: 2C:12:B9:3E:C4:15:ED:33:B6:B2:36:2C:04:DD:E0:F7:45:58:A5:58
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 622C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LBK5PsQV7TO2sjYsBN3g90VYpVg.roa
Signing time: Mon 19 May 2025 21:10:38 +0000
ROA not before: Mon 19 May 2025 21:10:38 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25132 (0x622c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 19 21:10:38 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2C12B93EC415ED33B6B2362C04DDE0F74558A558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:42:45:fd:64:81:28:e3:c6:b6:8e:84:6b:
c5:64:5b:23:e6:6e:d9:c1:9f:d8:ec:d1:5d:98:8c:
8d:07:e3:b5:ac:96:95:73:99:cb:e2:7e:b6:b4:73:
4e:2f:0f:00:5e:26:f5:73:c3:7c:0a:eb:95:a9:6d:
13:50:0f:af:10:a0:93:05:bb:76:b3:b5:b5:99:dd:
f2:44:5b:14:06:c8:ae:b8:95:e1:78:fd:05:6c:33:
52:d8:de:e4:45:64:51:58:d1:82:23:db:e3:a1:89:
c7:eb:b4:8c:f0:62:06:56:2d:6f:ca:dd:30:38:ad:
67:4e:29:00:e5:b4:3b:ff:95:33:3e:e7:eb:bb:8b:
3f:2d:28:f5:8c:5f:f6:91:fd:07:6a:37:84:2d:6d:
11:90:b7:68:45:56:31:86:09:3b:c0:a1:81:59:5e:
e3:c7:81:c2:65:2f:9f:37:3c:4f:36:31:7d:d7:25:
d4:64:d7:1a:15:f1:f8:12:4b:cd:1b:08:e8:82:da:
6b:c6:58:29:a6:01:d6:f6:5b:2d:4f:05:2b:5c:46:
47:c6:0e:6d:0e:b3:d2:44:a2:24:5f:44:a4:0c:ac:
fa:99:5f:f2:82:2a:70:d1:4b:6e:12:61:3d:55:47:
23:58:5f:78:27:84:4a:ae:d0:25:5a:03:9a:4d:83:
3b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:12:B9:3E:C4:15:ED:33:B6:B2:36:2C:04:DD:E0:F7:45:58:A5:58
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LBK5PsQV7TO2sjYsBN3g90VYpVg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
76:ca:50:f8:f6:6e:f3:11:a0:96:fc:3c:8b:50:af:37:4a:a5:
69:6a:d3:ea:46:62:06:df:6e:b4:df:5f:95:16:96:24:81:e7:
57:94:08:78:5d:fd:03:e7:f3:96:8e:f5:0e:ab:5e:d5:39:27:
60:f9:37:30:16:58:7f:18:cb:98:6a:22:ac:90:32:67:ba:fc:
f8:0b:1e:76:a2:0d:cb:a6:20:ad:0c:cf:87:1c:02:ab:50:96:
24:e0:85:f3:ee:49:35:e7:74:5d:cf:79:e6:56:ec:d0:d2:7e:
22:96:13:c1:c4:4d:ab:19:d8:2a:42:97:ed:9f:fb:6f:0d:4e:
9f:e8:9a:df:c4:d0:dc:0e:72:4f:48:73:5b:13:2b:7c:02:d8:
e1:cd:8a:b6:27:2d:a8:10:5e:24:47:f0:ac:a5:dd:79:78:fc:
d5:d7:78:e5:5e:2c:d8:da:c0:50:ec:d5:9f:97:8f:a1:29:a9:
38:17:3c:2b:a9:e9:5a:b9:dc:18:cc:4d:26:37:10:a2:08:22:
de:e8:52:4e:5e:de:55:af:bc:b1:76:e4:6b:43:17:8d:5a:bd:
ac:c2:19:23:75:35:81:8f:47:af:78:a2:cb:0e:21:17:88:b1:
93:f3:ce:c5:b7:18:e6:1f:93:0f:a6:6f:14:25:9c:ed:33:8e:
66:d0:2d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:04:54 2025 by rpki-client