Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/LMLsTbGyOFLyVC2UgGzsAPWKXEc.roa
File: LMLsTbGyOFLyVC2UgGzsAPWKXEc.roa (raw, json)
Hash identifier: wD8DzY/AUwfaXiQIwD7qrPFVCUo8ELXMUNwfYbqKzd4=
Subject key identifier: 2C:C2:EC:4D:B1:B2:38:52:F2:54:2D:94:80:6C:EC:00:F5:8A:5C:47
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 682A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LMLsTbGyOFLyVC2UgGzsAPWKXEc.roa
Signing time: Wed 04 Jun 2025 20:41:42 +0000
ROA not before: Wed 04 Jun 2025 20:41:42 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26666 (0x682a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 4 20:41:42 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2CC2EC4DB1B23852F2542D94806CEC00F58A5C47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:7b:ba:11:1b:1d:b2:fd:30:21:2a:4a:03:
f7:40:fd:5d:c0:8f:87:a5:5c:5c:b4:0a:bd:d6:58:
0e:d5:6b:ce:a5:4c:80:51:2d:ed:cd:27:e6:45:59:
34:ec:0e:90:90:5a:8e:17:fe:70:6d:b0:a8:ac:08:
87:6f:1e:ed:92:a3:3c:05:0f:a1:c6:f4:46:0b:d8:
14:a7:8b:b1:5e:00:66:f7:26:e2:08:81:be:98:22:
e2:a7:c6:25:a6:a0:18:db:ff:64:3e:91:53:e8:ac:
f2:59:b5:68:7a:67:32:e3:88:4e:51:55:fe:5f:6e:
41:fa:b4:8e:21:a5:f1:73:93:93:48:47:23:07:40:
56:27:d1:15:70:2d:98:a7:f6:8d:b0:20:d9:60:b0:
89:0d:d0:28:1a:db:92:d5:05:ec:65:25:bf:1b:10:
68:0d:2d:59:c1:53:77:d6:a5:07:0a:4b:21:7f:ea:
2c:13:5c:8a:f3:b6:34:9a:a7:a5:92:41:a6:d6:44:
b5:6e:b2:c2:4d:7e:23:df:24:42:4e:f3:fd:59:16:
64:f1:5d:11:d6:fe:4e:d6:b8:ee:8d:3c:10:4d:4c:
19:34:e8:62:ba:ec:9e:2c:53:b4:f3:ff:69:7e:b0:
43:50:a1:61:f7:5d:af:41:08:73:43:f4:5d:70:d0:
ef:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C2:EC:4D:B1:B2:38:52:F2:54:2D:94:80:6C:EC:00:F5:8A:5C:47
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LMLsTbGyOFLyVC2UgGzsAPWKXEc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
43:ce:cc:cd:eb:7d:86:20:2c:f3:af:97:4a:7d:7a:62:97:54:
11:56:32:b5:e2:cf:74:d7:81:4e:f2:d2:e1:e7:5d:1d:72:1c:
43:47:b4:18:2a:13:b1:07:02:fb:1a:e2:55:db:88:c4:b1:38:
55:74:89:b0:6b:41:5b:41:95:76:bb:d3:5a:d5:12:34:6d:d1:
57:63:ad:b1:f2:44:ee:81:79:f6:fc:e4:54:ee:45:ed:53:0e:
13:be:69:cc:0d:7e:b9:b7:82:e0:0b:36:51:b5:c0:84:a8:43:
50:48:b7:23:31:fa:cd:75:d7:c7:31:56:b4:89:31:29:50:26:
3b:a9:8b:8d:18:39:1c:10:e7:e2:78:fa:e8:05:4f:0c:07:69:
57:3b:4b:c1:c7:ff:da:bc:ba:d4:57:e5:ec:ac:b8:0e:6b:66:
9c:bc:e2:3c:a5:54:c6:49:ec:59:87:db:68:85:a7:3d:8e:f6:
09:f1:98:60:d4:4f:21:e0:e8:7f:cf:fe:f0:b5:b5:13:fe:c9:
e6:aa:a6:cf:1b:61:c1:e7:b9:33:d6:a9:88:5f:45:f7:7b:58:
93:20:3b:53:70:c4:29:5f:d2:95:70:5e:5f:12:a6:2d:85:b1:
41:06:5e:51:25:76:6d:0e:7f:7a:ce:2a:38:45:d1:03:64:a7:
ce:1d:db:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:35:54 2025 by rpki-client