Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qvvyGcwr-BzCF6q1o4eLivBd0o8.roa
File: qvvyGcwr-BzCF6q1o4eLivBd0o8.roa (raw, json)
Hash identifier: iDkOLQ1qTqfBmyYReV77NuEKZytiDLho/4r5sVnuGNc=
Subject key identifier: AA:FB:F2:19:CC:2B:F8:1C:C2:17:AA:B5:A3:87:8B:8A:F0:5D:D2:8F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 64BC
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qvvyGcwr-BzCF6q1o4eLivBd0o8.roa
Signing time: Mon 26 May 2025 17:11:09 +0000
ROA not before: Mon 26 May 2025 17:11:09 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25788 (0x64bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 26 17:11:09 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=AAFBF219CC2BF81CC217AAB5A3878B8AF05DD28F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:54:a4:a1:8f:78:51:0b:04:b4:3a:65:ad:
8e:5f:ae:58:44:0c:3e:15:bc:a9:e7:4b:75:6b:6a:
af:16:67:3f:64:65:ea:5e:17:98:dc:93:dc:14:9a:
04:6b:e9:66:99:47:85:1c:aa:1e:bd:f2:99:f3:d4:
23:be:95:af:2a:87:fd:8a:d6:0e:27:d4:83:a3:89:
e7:af:8e:25:06:78:32:2e:ce:bc:cc:b7:ce:d6:28:
80:4b:37:a6:98:d4:92:92:47:6d:39:8a:a6:f1:ce:
ab:37:64:25:c2:8c:7f:b1:49:6e:9c:11:72:0e:f1:
29:a6:39:e7:88:b4:c3:8a:4e:30:0a:b6:da:fb:59:
a5:58:13:36:b0:b0:97:99:94:57:f7:bf:a7:8f:cb:
62:cb:24:05:9e:f1:0b:b7:41:60:49:e4:a5:5e:2d:
b5:d3:da:d7:c0:f1:5b:af:2d:90:a2:cc:2e:97:7f:
c2:7f:99:88:aa:b3:51:00:08:aa:3e:1b:7d:90:aa:
bf:e8:d9:91:ad:1c:32:be:48:3a:fa:18:e1:15:9d:
f8:e4:38:85:e1:0a:b7:62:a6:6c:01:82:21:92:8d:
3b:90:e9:43:15:76:29:4d:9f:43:dd:56:b4:e5:51:
fe:65:66:8f:cf:6d:30:a8:f9:1a:b6:6c:8c:4a:9d:
bd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FB:F2:19:CC:2B:F8:1C:C2:17:AA:B5:A3:87:8B:8A:F0:5D:D2:8F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qvvyGcwr-BzCF6q1o4eLivBd0o8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
45:78:7f:28:cf:ba:3f:20:bc:2d:e5:71:8d:bb:d8:08:b2:c1:
6c:d8:4e:ab:02:54:05:b8:91:90:8c:53:12:dc:f4:e3:f1:49:
c2:4f:e5:be:01:79:36:9e:93:f3:a6:bb:1a:cb:8e:85:48:43:
6a:97:22:c5:f0:71:7b:fd:9b:96:df:bc:be:6f:d7:d3:40:ac:
cb:0f:b3:d5:55:57:9b:cc:05:10:64:1a:65:5b:4e:63:a3:06:
6c:ed:65:b5:3f:61:e2:22:72:69:32:dd:b8:ab:7a:b0:8e:d0:
43:78:b3:9d:1e:ab:da:82:17:57:52:4a:3a:ca:10:78:b6:fc:
66:a9:95:3e:0e:68:f6:ee:94:c4:63:e0:6c:0f:f5:b0:08:25:
ec:fa:0e:bd:a8:e3:23:72:80:35:9c:91:58:14:66:1e:f4:ff:
02:79:d8:e6:68:89:e4:03:d8:1b:bf:c4:79:63:5e:c7:26:96:
4b:cb:92:15:32:b0:15:db:95:8d:0e:ba:31:21:c7:3c:5f:92:
d4:c3:aa:1d:e1:fa:93:39:5b:7e:d6:c2:16:b9:a0:7d:bd:11:
a4:02:53:70:63:a1:0f:4e:72:0d:45:b8:80:5a:d4:30:3e:0c:
d0:1b:20:39:6a:f8:f9:95:8c:55:bf:3e:3c:6b:2e:cf:ba:b8:
16:9d:bc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:18:38 2025 by rpki-client