Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099963811500130307/0/3230332e39342e302e302f31392d3139203d3e203137363231.roa
File: 3230332e39342e302e302f31392d3139203d3e203137363231.roa (raw, json)
Hash identifier: d61RRL7ms+mNt35LeEG4qYV/N/0Nb2HsA+1qiC4F53s=
Subject key identifier: AB:79:10:5B:8D:EA:02:82:BD:EC:18:65:56:1B:D9:A0:73:3D:AA:D8
Certificate issuer: /CN=A91EFAA20000/serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C
Certificate serial: 1199D21EB76A653443DEBB30DC277DF534606855
Authority key identifier: 6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/3230332e39342e302e302f31392d3139203d3e203137363231.roa
Signing time: Fri 24 Apr 2026 09:52:55 +0000
ROA not before: Fri 24 Apr 2026 09:47:55 +0000
ROA not after: Fri 23 Apr 2027 09:52:55 +0000
asID: 17621
IP address blocks: 203.94.0.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 27 Apr 2026 07:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:99:d2:1e:b7:6a:65:34:43:de:bb:30:dc:27:7d:f5:34:60:68:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFAA20000, serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C
Validity
Not Before: Apr 24 09:47:55 2026 GMT
Not After : Apr 23 09:52:55 2027 GMT
Subject: CN=AB79105B8DEA0282BDEC1865561BD9A0733DAAD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:d6:76:bb:c8:b7:cf:95:38:d1:fc:f8:e7:
7f:48:17:74:13:ba:82:08:b2:7d:33:b8:b9:f5:c5:
82:5a:32:9d:46:a5:09:41:e1:b6:07:d0:c0:76:84:
29:56:eb:64:b8:95:ac:fe:5e:03:38:59:c7:8a:0a:
d5:f2:a8:3a:62:34:4c:3c:ad:a1:db:e5:b4:fd:b6:
20:51:b7:5f:59:86:2e:36:a4:9b:cc:33:29:00:56:
30:d7:f1:74:ee:14:0f:9a:b9:5c:b5:f4:7e:c7:92:
43:c2:e2:98:31:cd:f8:cd:8d:bb:00:c3:d4:8b:89:
37:65:7a:e4:b9:6a:d9:8f:d6:2f:1a:b2:5d:5a:13:
61:1e:bb:7f:5b:8e:b1:2b:df:29:20:b0:25:07:b5:
28:09:91:09:50:7d:23:28:ca:24:82:48:ac:19:8c:
05:43:75:41:c3:15:b5:21:f0:19:bf:78:a0:9d:7b:
cf:5e:18:fb:95:05:6b:01:27:62:e7:c1:61:d0:c9:
11:3d:ab:a9:02:eb:77:f5:00:40:52:08:b0:ae:e6:
df:66:7d:88:8e:08:7b:b3:bf:6b:52:37:1b:5d:2e:
b1:09:bf:28:ed:99:46:62:05:4c:1d:f1:aa:08:98:
31:ed:00:fc:07:28:b1:f2:fe:d9:11:c5:b3:ad:f8:
dc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:79:10:5B:8D:EA:02:82:BD:EC:18:65:56:1B:D9:A0:73:3D:AA:D8
X509v3 Authority Key Identifier:
keyid:6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/3230332e39342e302e302f31392d3139203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.94.0.0/19
Signature Algorithm: sha256WithRSAEncryption
64:29:8a:64:f3:30:a1:8d:53:d1:5d:68:0d:cd:ac:40:30:92:
e5:e1:96:9e:97:4d:72:aa:2f:dd:b0:2c:12:f1:ad:ce:dd:b1:
54:b5:a9:43:cc:53:ac:8a:4e:25:0f:9c:45:80:49:81:86:d1:
96:c6:28:84:54:93:49:ae:70:99:21:ec:4f:77:a9:79:02:d1:
fa:81:bb:cd:35:52:51:95:44:c5:74:0c:c2:9f:d6:77:32:ec:
b3:2c:e7:2f:d1:a8:a5:d9:19:01:88:08:00:eb:77:4e:b4:42:
c0:58:26:31:73:4a:46:d0:ed:6e:b3:65:94:f0:6b:4f:57:5b:
14:d4:b1:2b:e3:a6:31:41:d0:7e:2d:77:6b:ab:01:6c:bb:b3:
2e:77:23:61:31:8b:7f:a7:3e:5f:45:1a:b2:70:a5:e1:95:5d:
66:5a:03:70:b0:11:db:d4:68:c7:75:78:f6:69:31:4e:68:db:
dd:30:75:69:95:d2:6d:15:05:8b:1b:22:49:a9:ab:59:c5:4b:
90:23:b1:20:fc:c1:98:94:8e:57:ea:c9:ca:23:23:8a:da:e0:
13:b2:c0:96:64:8f:17:ce:3f:ef:16:62:2e:f1:e4:11:fa:54:
dd:69:56:8d:7e:16:ca:73:6e:25:88:d8:6d:84:82:0e:6b:b3:
bf:58:ec:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:59:48 2026 by rpki-client