Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Q5K7YA5YM6rnPn1EBKAu_cyDDCM.roa
File: Q5K7YA5YM6rnPn1EBKAu_cyDDCM.roa (raw, json)
Hash identifier: lz6VwK7s/I31pR9vNPxQVemNhPIg0kXB8ytY3iq+5VQ=
Subject key identifier: 43:92:BB:60:0E:58:33:AA:E7:3E:7D:44:04:A0:2E:FD:CC:83:0C:23
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 69BA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Q5K7YA5YM6rnPn1EBKAu_cyDDCM.roa
Signing time: Mon 09 Jun 2025 00:41:59 +0000
ROA not before: Mon 09 Jun 2025 00:41:59 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27066 (0x69ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 9 00:41:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4392BB600E5833AAE73E7D4404A02EFDCC830C23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:9d:28:0a:a5:f2:d1:4f:2b:25:95:fb:dd:
5b:9e:1f:b6:bc:3c:08:f2:52:ea:90:11:ef:13:81:
96:35:aa:5f:7a:b0:e5:1e:04:55:60:75:a5:1a:a1:
6d:91:05:79:a4:2a:9c:4a:f8:b5:42:c4:33:db:04:
ce:57:d9:70:38:32:7f:a5:29:b2:7c:70:e4:ec:98:
14:39:eb:f9:ed:29:9f:a4:20:e5:da:33:6f:91:3c:
68:25:c7:67:d5:cf:7e:9b:82:04:de:52:dd:52:cb:
d8:11:55:ae:e4:fa:63:40:26:9c:61:08:41:03:1f:
86:8b:6c:fa:fd:47:9f:0b:88:ff:ff:69:45:c0:b3:
cc:3b:62:ec:69:b6:2d:2c:68:93:8f:11:f5:c4:43:
ea:99:84:41:23:84:e5:db:05:dd:04:6d:ed:19:2a:
83:49:1c:c2:1a:16:7c:7d:71:28:fc:86:70:59:df:
98:9a:f0:23:74:4b:f5:e4:b9:bc:f8:28:ff:00:a9:
ee:94:32:f6:b3:5c:16:a1:5c:0f:c5:ae:6f:de:a1:
1d:6c:01:d2:4b:dd:a9:1c:fe:5c:c1:60:66:57:03:
99:7c:1d:c7:e5:8f:e5:57:3b:91:62:a3:f8:49:69:
48:61:2d:ee:9d:bb:75:13:29:7c:b2:99:6c:f4:01:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:92:BB:60:0E:58:33:AA:E7:3E:7D:44:04:A0:2E:FD:CC:83:0C:23
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Q5K7YA5YM6rnPn1EBKAu_cyDDCM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
31:d5:2e:9e:5a:5e:58:77:14:f0:e8:13:f7:c7:d6:2d:55:4d:
bf:77:71:ef:89:f8:64:c7:41:73:2e:6b:6a:da:a8:89:26:88:
79:5b:df:c1:c1:c6:e3:93:31:49:49:36:9b:76:cf:f4:e8:a0:
e5:19:b4:42:9e:4a:17:ab:05:3d:c1:af:43:eb:98:f1:af:5c:
d0:f9:dd:ac:47:c5:dd:48:3d:6b:56:cf:d5:04:14:9b:76:ff:
d1:cb:b6:ad:df:e7:d4:d6:ce:69:9e:ed:45:d3:21:56:0a:fd:
6e:64:91:e3:43:39:81:94:b0:43:4a:ce:08:00:83:8c:7c:59:
81:d8:3c:47:fa:e1:0f:74:cd:92:60:25:b7:88:a2:91:54:3a:
41:3b:db:62:8d:66:9f:d2:ff:ae:80:16:d2:fe:5b:9a:7c:70:
b2:d3:d9:91:4c:7d:af:2e:77:77:d4:0b:bb:37:81:7e:d4:d5:
ab:f3:fb:02:f8:97:c7:2d:2a:17:da:b2:78:a4:ab:d9:f5:d1:
fe:b5:6c:04:92:13:dc:31:50:1d:0f:48:ef:03:9a:46:29:d5:
fc:98:4c:1e:a1:92:94:3f:0b:3b:b2:22:0a:a7:de:f5:18:cb:
19:e1:17:95:3c:98:53:ae:a6:85:0f:c8:9f:3c:19:10:24:be:
1d:75:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:49:12 2025 by rpki-client