Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1823/1S59-P5SWwas5ZHiepf_RfnweqY.roa
File: 1S59-P5SWwas5ZHiepf_RfnweqY.roa (raw, json)
Hash identifier: sfm0B+UynP7MeHXhur0Hw3inRRYVSvBRKv83Wsg7qyo=
Subject key identifier: D5:2E:7D:F8:FE:52:5B:06:AC:E5:91:E2:7A:97:FF:45:F9:F0:7A:A6
Certificate issuer: /CN=46E7400FC97FC7A2093E054CF0DF42CB77564023
Certificate serial: 28
Authority key identifier: 46:E7:40:0F:C9:7F:C7:A2:09:3E:05:4C:F0:DF:42:CB:77:56:40:23
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RudAD8l_x6IJPgVM8N9Cy3dWQCM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/1S59-P5SWwas5ZHiepf_RfnweqY.roa
Signing time: Tue 01 Oct 2024 13:24:52 +0000
ROA not before: Tue 01 Oct 2024 13:24:52 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59065
IP address blocks: 103.59.123.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46E7400FC97FC7A2093E054CF0DF42CB77564023
Validity
Not Before: Oct 1 13:24:52 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D52E7DF8FE525B06ACE591E27A97FF45F9F07AA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4c:13:b4:52:35:43:7f:78:3c:9f:51:75:07:
8b:29:27:03:8c:5a:82:56:58:3e:fa:92:a3:c8:ed:
03:d9:43:4c:3e:b0:24:69:e2:4c:8d:e3:e9:03:db:
c7:4d:8b:3b:1a:1c:0a:d4:02:32:06:3f:ec:96:9d:
59:c9:44:e0:59:4a:fe:8e:bf:9a:c4:2e:e9:44:56:
cc:90:88:ba:55:f4:6f:ec:db:cb:bc:eb:df:33:d3:
a4:10:4f:33:3d:fb:9b:60:14:75:48:95:be:4e:7d:
48:2c:f0:4f:90:91:fe:0e:fb:45:4f:d4:11:66:8f:
88:c5:f2:94:ca:22:bf:3f:9c:bc:9e:e4:2c:36:d8:
5c:df:1d:e5:aa:6e:77:9e:99:53:c0:0f:8d:20:86:
b6:42:f8:cc:2d:8d:b6:8e:88:81:14:4b:3f:cf:d4:
20:e1:05:d8:cd:87:11:b1:da:49:1a:fa:f8:d4:fb:
f2:7b:85:fd:8f:fa:26:d2:2f:bc:82:8e:10:67:d7:
43:fe:53:e9:ee:59:2c:39:46:3d:8a:ec:cc:6e:5e:
b5:1c:c1:e7:ab:43:8b:fb:97:fc:e0:5c:a8:2d:9e:
46:d2:3d:23:ab:ca:e1:d0:a1:8b:73:d1:85:91:9f:
be:9e:70:00:a7:b3:07:79:12:33:46:d3:e6:0b:28:
05:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2E:7D:F8:FE:52:5B:06:AC:E5:91:E2:7A:97:FF:45:F9:F0:7A:A6
X509v3 Authority Key Identifier:
keyid:46:E7:40:0F:C9:7F:C7:A2:09:3E:05:4C:F0:DF:42:CB:77:56:40:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RudAD8l_x6IJPgVM8N9Cy3dWQCM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/1S59-P5SWwas5ZHiepf_RfnweqY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.59.123.0/24
Signature Algorithm: sha256WithRSAEncryption
67:15:04:1c:e0:16:e1:88:f3:f6:23:ad:6c:72:7d:6c:91:49:
8d:1b:0e:9b:f2:4f:95:09:25:a1:4c:ec:50:e9:68:a0:fc:65:
1c:25:96:28:53:55:a7:0a:ed:b7:84:9d:84:5f:19:4c:cc:46:
42:2f:39:23:79:82:e3:07:78:8d:a4:bb:aa:28:3e:bf:af:b8:
90:5b:b7:83:20:ac:92:95:31:ae:c4:7b:4f:14:4f:93:2a:bd:
bf:08:a5:26:1e:73:f8:2a:f0:95:7c:ae:61:64:16:dc:7d:b8:
47:21:32:05:48:d1:b5:c7:6f:98:d9:7e:8f:51:26:06:67:42:
bc:51:42:8c:19:37:0f:5f:b3:a6:92:e2:b9:e5:50:3b:7f:34:
54:42:e4:d1:25:50:0f:74:bd:a5:82:92:48:ae:f4:3a:c4:ac:
bc:91:6e:2a:2e:05:6e:7d:e7:dd:23:c6:76:a9:9a:6f:a6:19:
d0:24:50:04:02:b4:84:14:a7:58:5d:d2:75:ff:50:0d:e2:ee:
9a:13:22:d2:88:2b:07:67:d1:42:8a:14:31:7e:86:0d:59:0c:
51:ae:80:d2:d2:e8:05:34:1c:98:aa:e8:2a:d6:64:0b:16:c1:
b8:e3:d2:28:ca:d4:6b:84:50:48:f3:7a:b0:d3:3b:10:a8:14:
48:4a:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:43:14 2025 by rpki-client