Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/l2JVD7tHXrVoiLvX7Y9hjMzJuVI.roa
File: l2JVD7tHXrVoiLvX7Y9hjMzJuVI.roa (raw, json)
Hash identifier: /bterJk7ZZMuIlYmENdaAyb9BotyAwz0hkDdgnCuIIY=
Subject key identifier: 97:62:55:0F:BB:47:5E:B5:68:88:BB:D7:ED:8F:61:8C:CC:C9:B9:52
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5F5E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/l2JVD7tHXrVoiLvX7Y9hjMzJuVI.roa
Signing time: Mon 12 May 2025 09:40:16 +0000
ROA not before: Mon 12 May 2025 09:40:16 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24414 (0x5f5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 09:40:16 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9762550FBB475EB56888BBD7ED8F618CCCC9B952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:df:b1:b0:d3:8f:27:03:4e:8b:42:f8:fb:
cf:8c:75:a1:43:11:58:2f:40:c7:e3:5e:2f:2b:c1:
33:be:82:b9:62:d1:17:e8:00:ba:33:3b:9f:68:6f:
a6:b3:36:59:40:58:5a:39:e6:87:25:5d:50:e0:53:
53:62:54:93:d9:e7:25:38:78:dc:77:60:aa:79:b3:
fb:27:ba:6e:53:2a:4d:b3:1e:8f:64:12:9c:77:1d:
23:d5:fc:7f:a9:32:ba:3a:1c:5c:01:6b:ca:33:c0:
eb:eb:3e:9a:7d:b7:0c:3d:18:26:8f:de:2f:06:68:
1d:68:4f:d9:81:a9:4f:57:ef:4f:3a:3a:c7:be:de:
43:3f:43:81:9d:64:ee:6a:af:f2:29:f2:eb:ef:54:
ed:00:64:90:80:f0:05:4e:2a:e6:d8:55:e1:1d:1a:
76:73:17:94:32:90:42:23:a9:68:b4:87:3a:c1:7d:
33:02:e3:a8:42:22:8d:ec:d4:53:79:ae:fe:0a:3b:
6b:bb:52:35:2c:f0:79:5e:c8:9f:ee:76:e1:19:d7:
4b:d8:f6:c9:13:d6:4a:b0:75:ab:6a:87:d0:5d:b9:
49:91:a0:c4:bc:de:f9:21:3f:76:98:96:62:05:a8:
61:a9:0e:c1:f4:3c:40:a2:71:c3:e9:76:02:02:1f:
1f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:62:55:0F:BB:47:5E:B5:68:88:BB:D7:ED:8F:61:8C:CC:C9:B9:52
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/l2JVD7tHXrVoiLvX7Y9hjMzJuVI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
83:f0:a2:47:f2:9b:ed:b8:c9:c2:31:08:fa:45:f7:2b:16:a1:
4a:1e:bc:7a:29:1f:2b:f4:c9:cf:b6:10:71:2e:1b:e3:3e:d6:
3a:b1:a0:ee:93:cb:a7:27:b5:62:34:bc:eb:ee:7c:18:e6:ff:
f0:e3:d3:5f:82:3d:a1:a7:52:7e:c0:76:d6:d1:61:6d:cf:60:
0c:73:e9:6e:20:03:b0:45:b6:28:f3:bd:d4:f7:b0:a6:b7:6f:
2b:4a:fe:ea:d5:b5:bd:21:59:fd:a5:1c:c9:fe:2a:09:1a:39:
c0:57:49:18:6a:cd:ec:c4:d5:f2:a7:fb:59:a8:5e:ae:ec:fa:
b3:90:3f:3b:cb:19:bc:a2:e7:e2:d0:50:0f:a3:f8:e0:3f:e8:
3f:2c:10:94:be:ab:a7:a9:1a:ea:f2:02:5e:09:bb:b6:01:43:
9c:91:78:72:60:c8:80:b9:4f:3c:6e:22:57:9e:0a:51:55:a7:
38:e0:b6:2a:7f:93:e8:c8:ce:d7:34:3b:a8:26:e1:85:33:2b:
87:05:d4:89:56:2e:b3:69:29:f9:73:6f:4f:7d:3a:6d:c2:33:
2f:05:0f:e9:cc:b0:fa:b9:2a:2b:36:01:f6:64:02:c0:72:71:
fe:d1:67:f2:05:3d:10:40:02:b4:be:bb:2f:49:69:ee:20:c2:
84:1b:c1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:07:19 2025 by rpki-client