Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GFqQMTI2pCYBPmjHVHWX1nnIQ2k.roa
File: GFqQMTI2pCYBPmjHVHWX1nnIQ2k.roa (raw, json)
Hash identifier: JCJbOKDAMEXQ1Yj3ya4y/pQqIUwgvl4qCVyS8QhPGhs=
Subject key identifier: 18:5A:90:31:32:36:A4:26:01:3E:68:C7:54:75:97:D6:79:C8:43:69
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5FAA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GFqQMTI2pCYBPmjHVHWX1nnIQ2k.roa
Signing time: Tue 13 May 2025 04:40:26 +0000
ROA not before: Tue 13 May 2025 04:40:26 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24490 (0x5faa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 04:40:26 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=185A90313236A426013E68C7547597D679C84369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:25:f1:a0:ce:81:35:df:f2:30:2e:23:60:
c5:a2:d5:49:dd:7b:b4:56:e1:29:e5:dd:3b:27:6f:
fe:23:3b:08:56:a9:c3:64:4a:98:ee:0f:50:ea:a5:
42:05:49:ea:04:6c:bd:fd:67:f2:d8:6e:4c:00:a7:
ef:14:c4:00:a1:da:bc:d1:3a:0d:80:a9:29:fc:55:
a2:c9:32:2c:c8:23:cc:4f:63:b0:de:96:a5:9c:1a:
47:49:94:9c:86:19:b6:39:6e:ac:86:5b:a2:dd:f3:
48:27:bc:54:ec:66:7a:8d:33:08:ba:c3:4a:94:11:
f1:1f:6d:de:09:de:a9:dc:0a:20:53:86:c6:d4:c9:
33:81:be:bb:ec:ae:7b:7d:18:76:cb:53:6c:4e:fa:
cc:ba:18:99:6c:fc:65:f7:89:4f:ed:49:04:5b:0c:
03:7f:50:df:95:6a:60:63:53:47:73:71:91:a7:bf:
4d:a4:87:ab:8c:7e:bb:41:fc:ae:88:9a:7f:bd:00:
93:e3:33:83:0f:e0:54:6a:fe:87:c9:b5:b6:01:7a:
bb:88:db:43:3a:b0:68:99:4b:29:cf:0b:4f:e3:fb:
ce:d3:f0:93:9c:df:87:98:a4:ae:88:60:a0:b1:a1:
17:7c:dd:47:6a:63:10:be:3b:92:fe:d1:ed:15:59:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5A:90:31:32:36:A4:26:01:3E:68:C7:54:75:97:D6:79:C8:43:69
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GFqQMTI2pCYBPmjHVHWX1nnIQ2k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
7a:0c:02:c5:43:91:22:80:d4:16:4f:95:d5:d8:04:33:bc:4e:
2f:22:39:72:dc:59:ec:08:f6:06:59:da:24:2c:ea:5b:90:f3:
30:7a:54:17:b5:b1:ad:ba:aa:25:ae:67:b8:ef:d4:18:ef:a5:
e6:3c:3f:31:40:28:f2:92:94:df:50:38:73:b0:74:e3:34:9d:
77:83:db:31:35:99:d7:66:15:76:76:31:e9:7e:ab:a9:18:55:
62:7c:da:c8:15:9c:00:cd:a4:72:b9:6c:60:2e:86:de:db:76:
4a:a5:ac:75:2a:82:3a:41:d8:12:fb:44:64:8b:79:de:84:ae:
80:bd:2a:73:59:b0:9f:f8:e0:22:6b:77:9d:b1:e7:62:63:07:
e8:e9:8f:cd:bd:11:22:5b:5c:40:d5:b0:05:5a:32:c7:bb:00:
bc:6a:7d:38:03:1b:fb:13:26:8e:41:aa:a2:e8:71:0e:ba:e1:
1e:b5:29:d1:11:43:30:76:aa:95:c3:18:34:02:b2:d0:ae:c8:
af:17:8a:95:e9:c5:1b:df:7c:6d:f8:d0:25:43:bf:09:c9:64:
43:af:d3:c8:6b:57:61:39:fc:e5:ab:c6:cb:63:45:15:0b:ac:
f2:52:dc:4b:bc:56:f7:38:4c:9d:68:c0:bc:37:78:58:6e:9c:
a2:a7:2a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:28:52 2025 by rpki-client