Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/LzlpQpQ_XTYy85WBekGk4YYABiA.roa
File: LzlpQpQ_XTYy85WBekGk4YYABiA.roa (raw, json)
Hash identifier: qQA/eu2zrp1huaJrFsQfbooGBZxVWNCGcu2qO5X5LwY=
Subject key identifier: 2F:39:69:42:94:3F:5D:36:32:F3:95:81:7A:41:A4:E1:86:00:06:20
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6A88
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LzlpQpQ_XTYy85WBekGk4YYABiA.roa
Signing time: Wed 11 Jun 2025 04:12:11 +0000
ROA not before: Wed 11 Jun 2025 04:12:11 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27272 (0x6a88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 11 04:12:11 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2F396942943F5D3632F395817A41A4E186000620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:5c:62:04:2d:9a:e9:a6:ef:33:cd:7e:27:
ca:de:80:32:67:96:9d:b3:00:cb:06:6d:35:5b:f2:
60:ae:5e:f6:53:dc:be:77:e3:58:89:bd:3d:0f:87:
5b:a9:2e:36:3c:ea:f9:67:a8:3e:00:cd:e8:11:3a:
83:0e:4f:42:14:cd:36:7c:81:92:fc:34:b4:1e:fb:
e8:95:28:79:c6:18:64:9c:f7:2a:af:57:aa:2a:0d:
18:9e:2e:74:27:4e:76:de:ae:7a:ab:b8:05:1c:af:
57:ee:0c:81:cf:5d:42:50:72:db:11:77:e9:33:24:
a7:6a:6e:9f:69:af:39:d2:87:35:76:a4:88:ea:33:
8d:62:9f:34:a2:5e:8e:d8:60:c9:0e:f3:9a:d7:5f:
27:71:11:f9:a5:08:7f:da:dd:f0:9b:48:33:99:25:
5f:52:6e:2d:e1:40:2e:b7:7d:d1:75:f6:22:42:4c:
39:1d:f9:1d:cf:4d:0b:93:82:f4:fe:1f:9a:35:a6:
47:b1:4c:c8:f1:35:6a:93:68:a5:71:26:01:c9:db:
14:c2:32:4a:c0:1b:15:95:67:00:64:d7:32:a3:42:
c0:ef:f6:56:d1:07:52:63:69:d0:77:d7:99:ec:eb:
ef:f1:ee:a5:ce:8e:d3:a1:cd:42:fe:32:f3:97:47:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:39:69:42:94:3F:5D:36:32:F3:95:81:7A:41:A4:E1:86:00:06:20
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LzlpQpQ_XTYy85WBekGk4YYABiA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
8c:51:70:f2:8b:83:cd:62:f0:e7:e5:82:ae:a8:7c:d8:7c:05:
43:c5:5f:a8:62:f6:26:f0:5b:fa:a8:7a:9e:19:fe:b7:c3:28:
df:a5:3d:97:0a:ef:17:36:49:ad:ec:29:1c:79:a2:22:bd:9d:
f2:74:ec:b5:6a:64:75:93:25:df:c8:f7:91:d0:92:61:4b:8a:
80:f2:ab:a9:8c:f4:0c:53:fd:a2:3a:b6:14:db:32:11:9b:5b:
24:39:1c:79:86:d8:dd:98:d7:0a:76:4b:e7:c6:9a:3c:0e:19:
b2:ef:10:a0:bc:b1:43:d1:dd:58:5a:85:56:b9:19:69:e8:62:
57:b8:9a:b0:a9:07:83:c3:8c:80:c7:e4:7b:6f:ce:c6:5e:6c:
5e:d3:4e:3f:92:b5:6e:c7:f0:22:1c:a2:12:96:0e:1c:c3:e6:
e4:0b:95:cd:43:bb:df:37:80:45:37:91:2f:4b:b2:1b:e0:de:
6d:29:bc:3a:db:d9:0d:07:ad:86:5d:dd:8c:e1:8b:1e:96:98:
6d:e7:31:43:84:91:64:08:60:6c:5c:c7:84:c3:6f:5d:00:c1:
0c:aa:02:42:e8:78:61:38:ca:ef:d3:b9:c5:b2:9c:b0:74:59:
bc:c2:fb:57:ca:f1:98:ac:53:be:f4:4e:fb:e6:cf:2e:7b:d6:
dc:8e:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:21:13 2025 by rpki-client