Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/AwFgeqEkjXom2-0T327HGFL3gi4.roa
File: AwFgeqEkjXom2-0T327HGFL3gi4.roa (raw, json)
Hash identifier: 0oqryPTJmmVhxUPDI8LVI7lYGQf4UgyKUyfm6yQQrMI=
Subject key identifier: 03:01:60:7A:A1:24:8D:7A:26:DB:ED:13:DF:6E:C7:18:52:F7:82:2E
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 1D98
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/AwFgeqEkjXom2-0T327HGFL3gi4.roa
Signing time: Thu 12 Sep 2024 11:20:08 +0000
ROA not before: Thu 12 Sep 2024 11:20:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 139648
IP address blocks: 103.244.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7576 (0x1d98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Sep 12 11:20:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0301607AA1248D7A26DBED13DF6EC71852F7822E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:e7:6e:56:69:a1:10:a3:93:43:86:19:b4:
a3:66:a7:54:ea:8f:c5:7a:92:32:84:96:23:11:9f:
27:7a:e8:80:6a:30:ff:3b:67:6b:d0:8e:24:46:9a:
03:98:e0:d8:66:15:2c:ca:e2:cd:3f:f6:ca:5e:f2:
b9:37:44:dc:1a:53:cc:bf:d9:2e:f2:61:18:5e:6f:
27:50:88:65:2e:03:47:70:17:2f:b8:75:77:7b:e0:
96:78:c6:41:0f:73:51:65:30:5e:69:25:18:5e:f0:
cb:9c:7f:37:fa:9d:bc:ef:2f:77:16:67:20:a0:bc:
c6:90:aa:54:33:7c:45:dc:d6:1b:43:bf:13:8c:c7:
01:62:ed:64:bd:a3:44:92:4d:e9:55:a2:15:48:13:
b1:5b:06:de:4f:d2:26:48:e3:33:c2:b3:8f:be:df:
6d:1e:14:2a:c9:fc:e6:86:97:88:28:22:d1:df:1d:
34:62:6a:c0:2e:fb:cb:0a:2b:f5:d0:98:28:94:2f:
c5:c4:45:af:9b:5e:e3:f6:53:fb:24:f9:9f:44:c1:
a0:99:29:6a:e0:6f:1a:7a:90:9a:ac:64:33:f0:3c:
d3:97:80:19:ea:6e:a1:f2:3e:ce:83:14:a1:e7:66:
c5:58:e5:3c:78:5a:e4:5a:ec:bb:c1:2d:f5:e4:7e:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:01:60:7A:A1:24:8D:7A:26:DB:ED:13:DF:6E:C7:18:52:F7:82:2E
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/AwFgeqEkjXom2-0T327HGFL3gi4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.118.0/24
Signature Algorithm: sha256WithRSAEncryption
29:93:35:8a:14:c6:45:e4:ae:61:da:56:f7:03:c1:d8:30:89:
14:92:ef:da:65:46:74:d6:5b:a3:01:03:6a:95:ae:9d:e2:ad:
5f:8a:77:bd:d3:a3:35:cf:11:d3:da:19:3b:b3:dd:78:2a:2a:
ad:c7:da:12:91:43:5f:76:d0:04:cb:44:9c:a8:53:8f:a7:bd:
15:d7:e4:0b:5b:a5:52:9c:ac:4b:18:eb:da:48:f9:89:ab:70:
c0:c2:86:26:40:a5:55:8d:53:44:21:64:f0:94:fb:b6:f7:78:
65:47:e5:95:86:5e:6d:34:4d:f4:4f:5c:e7:57:9e:dc:45:78:
ca:10:89:01:d2:12:68:4e:a6:9a:a1:f6:c1:c2:a3:23:cc:5e:
ea:bf:3c:d5:5f:7c:2b:eb:0e:aa:12:7d:af:b1:44:c4:80:1c:
8a:b5:d2:c8:ef:19:fe:6d:8f:b0:80:56:a8:f5:ce:c4:b5:25:
f9:19:ae:93:ce:67:b5:e4:39:37:37:c1:49:ea:b3:ba:a9:a0:
b7:1a:de:79:78:99:05:d5:0d:6b:fc:85:9b:ff:42:72:98:14:
c7:08:6c:7a:69:ca:ae:9e:0a:67:ad:c7:33:e4:f6:95:f0:f5:
0a:01:b7:66:35:05:fe:d1:2f:ee:17:4f:5c:61:9c:da:43:95:
c5:80:0b:05
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICHZgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx
MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNDA5MTIx
MTIwMDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDAzMDE2MDdBQTEyNDhE
N0EyNkRCRUQxM0RGNkVDNzE4NTJGNzgyMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCmeduVmmhEKOTQ4YZtKNmp1Tqj8V6kjKEliMRnyd66IBqMP87
Z2vQjiRGmgOY4NhmFSzK4s0/9spe8rk3RNwaU8y/2S7yYRhebydQiGUuA0dwFy+4
dXd74JZ4xkEPc1FlMF5pJRhe8Mucfzf6nbzvL3cWZyCgvMaQqlQzfEXc1htDvxOM
xwFi7WS9o0SSTelVohVIE7FbBt5P0iZI4zPCs4++320eFCrJ/OaGl4goItHfHTRi
asAu+8sKK/XQmCiUL8XERa+bXuP2U/sk+Z9EwaCZKWrgbxp6kJqsZDPwPNOXgBnq
bqHyPs6DFKHnZsVY5Tx4WuRa7LvBLfXkftyfAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUAwFgeqEkjXom2+0T327HGFL3gi4wHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk
yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx
MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvQXdGZ2VxRWtqWG9t
Mi0wVDMyN0hHRkwzZ2k0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGf0djANBgkqhkiG9w0BAQsFAAOCAQEAKZM1ihTGReSuYdpW9wPB2DCJFJLv
2mVGdNZbowEDapWuneKtX4p3vdOjNc8R09oZO7PdeCoqrcfaEpFDX3bQBMtEnKhT
j6e9FdfkC1ulUpysSxjr2kj5iatwwMKGJkClVY1TRCFk8JT7tvd4ZUfllYZebTRN
9E9c51ee3EV4yhCJAdISaE6mmqH2wcKjI8xe6r881V98K+sOqhJ9r7FExIAcirXS
yO8Z/m2PsIBWqPXOxLUl+Rmuk85nteQ5NzfBSeqzuqmgtxreeXiZBdUNa/yFm/9C
cpgUxwhsemnKrp4KZ63HM+T2lfD1CgG3ZjUF/tEv7hdPXGGc2kOVxYALBQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:57 2025 by rpki-client