Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/12FG2u660WWz92ml-VzLLfRZYT0.roa
File: 12FG2u660WWz92ml-VzLLfRZYT0.roa (raw, json)
Hash identifier: pvN18q7eASUUFPShBs5U+OSbz2aTfcrJsYEW3FM1o4Y=
Subject key identifier: D7:61:46:DA:EE:BA:D1:65:B3:F7:69:A5:F9:5C:CB:2D:F4:59:61:3D
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 15
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/12FG2u660WWz92ml-VzLLfRZYT0.roa
Signing time: Tue 27 May 2025 08:11:30 +0000
ROA not before: Tue 27 May 2025 08:11:30 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 56048
IP address blocks: 240a:4090:1000::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:11:30 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=D76146DAEEBAD165B3F769A5F95CCB2DF459613D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:44:b2:0f:07:eb:de:70:01:1c:93:6a:af:45:
33:1d:da:8e:ee:43:7f:ab:5d:52:79:ec:6b:f6:fd:
56:5b:69:81:07:a6:3d:c5:03:6d:9c:20:6e:60:a8:
96:88:21:24:96:c8:f8:11:fa:60:64:e0:c9:71:6a:
73:8c:86:cb:41:bd:63:54:f0:ba:fc:c5:29:e9:47:
da:5b:1f:e7:0e:25:b5:b8:ba:d4:53:0f:fd:92:1b:
d8:68:70:c7:31:5b:f8:44:33:e5:55:1a:56:0c:1b:
3d:3b:c9:46:67:64:af:02:29:cf:16:9f:57:3f:78:
3b:70:16:1c:b0:22:b2:30:2e:17:ba:74:03:b4:03:
4c:c3:d4:87:f1:0d:98:42:7b:72:95:90:f0:50:67:
bd:75:f1:a1:b9:5f:39:29:bb:32:24:84:36:38:81:
71:95:46:a8:29:d7:2b:48:20:f6:ab:47:9c:e1:b9:
8f:b0:2a:3f:14:86:16:47:e6:d6:e8:f7:9a:6e:28:
9d:b2:08:48:4a:01:89:8a:49:99:dd:4a:ec:b4:a3:
3b:11:89:59:96:0c:9b:8e:8b:6a:ee:0e:af:ca:8d:
78:d8:05:68:5f:b5:e2:aa:e8:9c:49:da:5b:3c:79:
98:63:08:6a:25:ca:37:c0:f5:40:a8:bf:fb:1f:d5:
f2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:61:46:DA:EE:BA:D1:65:B3:F7:69:A5:F9:5C:CB:2D:F4:59:61:3D
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/12FG2u660WWz92ml-VzLLfRZYT0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:4090:1000::/40
Signature Algorithm: sha256WithRSAEncryption
46:ad:59:2f:5d:ba:36:46:05:55:23:35:a2:af:61:bc:67:b3:
78:93:d7:ed:fd:91:76:fa:82:59:61:2e:89:6f:eb:4e:83:dc:
e4:5b:6d:f2:97:1a:2d:9a:8c:2d:5c:6b:56:ba:ba:12:82:1c:
c7:25:d8:a3:6b:98:90:4e:28:88:a9:72:64:93:03:67:24:6b:
fe:70:e1:ce:b7:5b:d0:af:36:6c:05:c0:d0:23:b7:4a:97:c7:
0b:44:58:46:c0:f5:7b:0a:75:58:01:ec:d0:29:db:00:78:13:
65:70:41:b4:46:b8:c7:90:bb:4a:0e:e2:a7:08:a4:53:85:d8:
19:1d:d7:ae:a8:2c:99:58:da:8c:8b:15:d3:60:87:53:63:16:
7b:d4:9d:b3:c7:72:fb:19:2e:49:94:d8:f2:a5:57:01:63:5b:
1c:44:e6:d7:9f:bb:1a:ae:4e:0e:7a:4c:f8:e3:e6:90:43:ab:
ad:57:e6:47:2f:52:72:5e:da:f2:8e:90:0b:64:52:2f:85:67:
4d:00:9e:b1:71:8a:b8:a3:8e:08:fc:0d:ff:ec:52:28:cd:77:
2b:d5:fa:da:f1:f4:cb:7e:6b:3f:e6:89:b2:fa:2c:0d:df:6f:
18:62:ed:55:9a:40:ab:85:6f:3f:75:3b:d6:67:5a:0d:b0:c6:
4f:dd:32:34
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgIBFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG
RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4
MTEzMFoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoRDc2MTQ2REFFRUJBRDE2
NUIzRjc2OUE1Rjk1Q0NCMkRGNDU5NjEzRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOBEsg8H695wARyTaq9FMx3aju5Df6tdUnnsa/b9VltpgQemPcUD
bZwgbmCologhJJbI+BH6YGTgyXFqc4yGy0G9Y1TwuvzFKelH2lsf5w4ltbi61FMP
/ZIb2GhwxzFb+EQz5VUaVgwbPTvJRmdkrwIpzxafVz94O3AWHLAisjAuF7p0A7QD
TMPUh/ENmEJ7cpWQ8FBnvXXxoblfOSm7MiSENjiBcZVGqCnXK0gg9qtHnOG5j7Aq
PxSGFkfm1uj3mm4onbIISEoBiYpJmd1K7LSjOxGJWZYMm46Lau4Or8qNeNgFaF+1
4qronEnaWzx5mGMIaiXKN8D1QKi/+x/V8mUCAwEAAaOCAfUwggHxMB0GA1UdDgQW
BBTXYUba7rrRZbP3aaX5XMst9FlhPTAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP
q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy
L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi8xMkZHMnU2NjBXV3o5
Mm1sLVZ6TExmUlpZVDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAJApAkBAwDQYJKoZIhvcNAQELBQADggEBAEatWS9dujZGBVUjNaKvYbxns3iT
1+39kXb6gllhLolv606D3ORbbfKXGi2ajC1ca1a6uhKCHMcl2KNrmJBOKIipcmST
A2cka/5w4c63W9CvNmwFwNAjt0qXxwtEWEbA9XsKdVgB7NAp2wB4E2VwQbRGuMeQ
u0oO4qcIpFOF2Bkd166oLJlY2oyLFdNgh1NjFnvUnbPHcvsZLkmU2PKlVwFjWxxE
5tefuxquTg56TPjj5pBDq61X5kcvUnJe2vKOkAtkUi+FZ00AnrFxirijjgj8Df/s
UijNdyvV+trx9Mt+az/mibL6LA3fbxhi7VWaQKuFbz91O9ZnWg2wxk/dMjQ=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:53:45 2025 by rpki-client