Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/LPgCeljI_ZVbxoMdtzQXf2nSvzg.roa
File: LPgCeljI_ZVbxoMdtzQXf2nSvzg.roa (raw, json)
Hash identifier: LJPQpknVI2351DLnJTd+3o5hMujraGBO1JYNYtf8ac4=
Subject key identifier: 2C:F8:02:7A:58:C8:FD:95:5B:C6:83:1D:B7:34:17:7F:69:D2:BF:38
Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Certificate serial: 206C
Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/LPgCeljI_ZVbxoMdtzQXf2nSvzg.roa
Signing time: Sat 13 Sep 2025 03:07:31 +0000
ROA not before: Sat 13 Sep 2025 03:07:31 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 23650
IP address blocks: 27.0.204.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8300 (0x206c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Validity
Not Before: Sep 13 03:07:31 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=2CF8027A58C8FD955BC6831DB734177F69D2BF38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:3a:df:03:f4:f4:dc:c5:f2:e3:00:80:af:
48:39:e8:3d:5b:69:69:4e:04:ca:cd:07:fd:ff:af:
ed:ce:98:38:8f:92:ed:06:6d:5b:09:7e:98:6f:a1:
5e:4e:14:d2:7e:eb:20:26:b5:85:66:bc:42:89:c0:
6f:cd:81:15:d0:53:49:83:90:3d:14:35:50:b7:f8:
0c:98:1e:a8:f5:76:4d:40:8b:ce:11:09:ff:a4:f4:
a9:bc:92:9e:c8:f9:d9:95:ce:ab:27:0e:a8:7b:fd:
f6:ec:8b:a2:59:ba:1b:36:8a:62:a5:c2:1a:93:20:
9b:06:18:89:67:0c:63:8f:f3:0d:8c:15:e3:27:39:
b9:6a:92:f8:ac:54:85:41:db:f9:e1:4c:82:0a:2b:
99:d7:80:3a:1c:c0:65:96:3a:bc:40:0a:10:80:12:
b6:a8:ef:53:9a:da:39:fa:a7:f5:66:8d:5e:8a:8a:
68:34:8c:8d:06:ca:38:40:04:fd:e8:e7:24:d6:fe:
d0:35:58:f2:c7:ca:84:9d:f2:92:d2:de:11:c9:2d:
1a:6d:c5:2c:3c:7b:a8:27:9f:99:ef:d1:b7:da:09:
54:fd:87:2c:6d:2c:1b:ac:5e:c1:b1:3f:b9:95:04:
db:6a:a3:7a:b9:c3:65:0e:dd:bd:0f:ca:dc:a2:dc:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F8:02:7A:58:C8:FD:95:5B:C6:83:1D:B7:34:17:7F:69:D2:BF:38
X509v3 Authority Key Identifier:
keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/LPgCeljI_ZVbxoMdtzQXf2nSvzg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.204.0/22
Signature Algorithm: sha256WithRSAEncryption
79:3c:8b:7a:96:44:6d:1d:ea:d8:0d:40:87:13:bc:ed:0e:53:
75:33:40:89:7a:b6:36:bd:e0:2e:85:b0:14:23:28:74:60:8b:
12:e5:f2:9a:25:33:0e:67:05:af:f6:cd:62:19:5e:1b:72:42:
70:34:01:98:33:32:c5:34:a4:23:9d:79:e8:66:a3:85:09:7f:
f0:16:f3:b8:28:83:ff:da:45:e3:a2:91:7e:f6:80:44:e1:4c:
01:6d:c5:24:0a:ac:c2:0f:cc:90:c1:fb:fa:3b:19:2a:4a:e6:
25:bc:ad:90:70:2f:e2:aa:fe:65:8c:c2:46:14:aa:bc:83:7c:
4c:8e:8a:5f:ab:30:0d:f1:ef:d2:06:ec:55:8c:fa:c2:ae:18:
5d:06:00:ee:7d:87:2b:7e:a1:6c:36:5b:b0:19:c5:f9:d8:72:
de:45:5c:c7:89:d3:80:8c:b9:5a:21:d3:46:e9:85:2f:20:c3:
1b:e2:70:12:a3:24:4e:c1:e8:58:b9:e0:2b:f3:8f:ae:bd:a3:
ae:d4:56:c1:85:42:7c:53:31:a3:b3:c7:a1:b5:e1:15:2f:1b:
63:86:4b:4f:ff:6d:f4:01:de:32:3e:75:a8:29:50:e0:52:44:
06:1f:15:70:bf:b2:ef:27:c0:46:9d:2d:79:98:6a:36:59:c6:
7c:88:f9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 09:18:15 2025 by rpki-client