Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/1NRLM4kpgAdltlc50A1CU2GWUDs.roa
File: 1NRLM4kpgAdltlc50A1CU2GWUDs.roa (raw, json)
Hash identifier: plH2/FcKvMRUj0CXEaGr5MiGA4cfpQjpCRmp1UFbZRc=
Subject key identifier: D4:D4:4B:33:89:29:80:07:65:B6:57:39:D0:0D:42:53:61:96:50:3B
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 1A
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/1NRLM4kpgAdltlc50A1CU2GWUDs.roa
Signing time: Tue 27 May 2025 08:11:32 +0000
ROA not before: Tue 27 May 2025 08:11:31 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 56048
IP address blocks: 240a:4090:2041::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:11:31 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=D4D44B338929800765B65739D00D42536196503B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:6e:71:14:9e:81:00:33:87:95:28:69:8e:
dc:21:f3:a0:2d:1c:3d:09:96:3a:ad:f6:e3:55:44:
47:32:0c:94:ee:b6:59:c3:b4:bb:04:d5:89:59:ef:
c7:9a:60:72:ee:cf:e3:f3:05:f7:c1:55:e6:c6:bb:
26:6b:ba:23:bc:92:d5:b3:f5:ba:0c:18:f6:f7:cc:
eb:cb:09:c3:4b:1a:36:c0:2c:8c:7a:6b:c8:df:4b:
b4:4d:a1:2c:87:84:47:41:5a:c9:42:06:81:00:24:
b8:d3:d9:12:e8:7c:72:17:a6:40:70:6b:7b:ed:d9:
90:a7:91:be:e1:7a:95:32:6d:14:92:20:91:7f:7f:
8f:c2:40:a5:6c:23:3d:6f:f3:a4:26:57:de:0d:50:
e5:7b:50:4c:08:69:79:65:10:0d:b4:93:47:23:33:
8d:2c:84:80:38:5e:4e:b8:a3:08:4e:ee:22:83:18:
c6:6d:46:20:52:fd:73:42:12:87:80:0f:e1:ff:e2:
18:c2:aa:db:07:b4:70:8d:19:e1:2c:0b:b2:28:e4:
58:97:6a:71:d2:91:8e:45:46:38:49:1a:2c:03:c1:
f9:3a:df:63:83:1c:b1:e4:5a:44:ac:d2:a4:d8:2d:
9c:b1:23:2e:84:b2:b4:55:c4:ab:63:ea:49:e9:4b:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D4:4B:33:89:29:80:07:65:B6:57:39:D0:0D:42:53:61:96:50:3B
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/1NRLM4kpgAdltlc50A1CU2GWUDs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:4090:2041::/48
Signature Algorithm: sha256WithRSAEncryption
26:d5:3d:7b:d0:38:b5:b1:33:7b:2b:cf:bc:dc:ff:76:5d:ef:
66:bb:a5:9d:5a:61:f6:1c:f1:f1:fc:f4:1a:c6:a0:c2:7e:7a:
97:90:7e:af:37:93:66:d0:20:0f:c4:e6:07:fb:7f:ff:b3:e4:
33:b8:33:90:5b:d2:29:30:ee:c1:6d:68:db:e3:02:5d:7c:fa:
72:73:38:a4:8c:e4:83:e7:b3:59:3c:85:b6:2a:79:d2:4d:56:
d3:0c:93:6b:ca:58:c7:fe:95:07:f8:a1:b3:b8:c2:3d:a8:82:
92:c5:1c:b5:51:ea:e7:85:5c:20:f2:00:71:37:ca:21:b0:7e:
f0:be:83:9a:bb:13:63:50:a4:f9:88:b6:70:38:c4:cd:e1:8f:
a7:77:f6:d7:ec:c1:46:90:fd:bf:f8:f7:a6:63:72:f3:7a:e4:
6a:e4:d3:37:17:18:57:dd:a4:ee:c8:34:af:bf:dd:1c:2d:e2:
05:75:b0:1e:22:dc:27:44:70:97:31:d5:fb:f1:0e:26:63:cb:
8c:e5:89:65:75:a7:8e:3a:5a:ff:e8:ed:54:4c:03:1e:ce:da:
80:dd:92:fc:4b:c5:4f:80:0c:d6:cd:67:8a:ea:6f:6e:d4:1b:
89:09:67:24:48:52:41:51:dc:cc:c2:3e:60:2b:ba:db:00:da:
f4:02:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:10:25 2025 by rpki-client