Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/2cJI6HiE7dX2nW-cwYl1zeJqSJU.roa
File: 2cJI6HiE7dX2nW-cwYl1zeJqSJU.roa (raw, json)
Hash identifier: yyRVh4Vh071KA6CyIasJ7F+FKA2Ceg72r94rh79qDQ0=
Subject key identifier: D9:C2:48:E8:78:84:ED:D5:F6:9D:6F:9C:C1:89:75:CD:E2:6A:48:95
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: CB
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/2cJI6HiE7dX2nW-cwYl1zeJqSJU.roa
Signing time: Fri 06 Jun 2025 02:31:09 +0000
ROA not before: Fri 06 Jun 2025 02:31:09 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 24444
IP address blocks: 240a:40c2:4010::/44 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jun 6 02:31:09 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=D9C248E87884EDD5F69D6F9CC18975CDE26A4895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:1e:8f:da:f4:5d:0f:d1:73:78:94:1e:9d:
ff:e3:f4:18:7b:c1:20:0b:97:8f:12:86:04:a3:26:
ee:a2:67:99:9d:ea:d7:98:48:58:87:d7:08:73:79:
a4:67:3d:3f:b9:54:03:00:a3:f0:26:33:d1:3d:86:
46:46:57:bf:47:8e:2b:89:7c:9b:7c:60:d1:40:61:
9a:b6:8e:55:88:da:63:5e:09:99:6b:ea:ff:81:40:
66:85:54:2c:00:89:dd:14:b8:ca:83:cf:d3:4f:db:
94:33:6a:5e:ec:40:4e:5c:f2:08:1a:8b:66:11:31:
62:f4:bd:a3:9d:de:d8:a5:39:22:d7:ba:56:ce:68:
ef:2c:a3:dc:64:30:22:84:9b:ee:19:ce:00:64:33:
c7:c9:80:76:4d:59:85:82:57:97:90:3c:99:fb:d5:
f5:31:6d:91:7e:ee:e2:c0:19:2b:96:fb:63:27:43:
dc:8e:57:fb:4f:e4:f3:67:6a:42:8c:b7:98:41:ca:
72:d8:2f:b1:d7:f1:fc:a4:4d:f6:e8:50:12:9b:54:
4f:f3:ff:88:93:78:04:ca:c4:01:04:3d:c3:63:1b:
fe:8d:b0:1a:14:88:0f:dc:a4:ef:69:df:6b:1c:c3:
f5:0e:8f:1f:36:cd:65:cc:f0:1b:c3:75:e2:36:82:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C2:48:E8:78:84:ED:D5:F6:9D:6F:9C:C1:89:75:CD:E2:6A:48:95
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/2cJI6HiE7dX2nW-cwYl1zeJqSJU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:40c2:4010::/44
Signature Algorithm: sha256WithRSAEncryption
91:2f:98:f2:78:dd:76:39:c5:9d:b1:6c:83:90:0b:c2:39:3c:
82:11:a0:fe:21:d3:e5:23:0b:ba:3b:8f:44:09:cd:1a:9e:d0:
9a:ab:57:be:c7:56:74:44:cd:fc:4f:8b:f2:11:7a:2b:5c:b7:
ad:0b:70:b1:42:36:08:cf:78:92:02:37:8b:a9:e8:af:88:a7:
c0:e2:7d:f9:da:e1:45:c9:bf:d4:a8:85:f2:b2:25:25:7a:e9:
63:a0:70:d2:0b:78:ec:6c:8c:20:85:7f:01:fa:87:cb:1d:86:
fd:a9:e4:be:e6:55:00:51:b8:c7:31:b0:60:a1:b1:cd:3e:89:
ac:81:41:aa:16:d8:6f:4f:31:95:b3:00:37:55:51:8d:1c:1b:
1a:77:52:63:39:1b:5b:f3:5f:04:aa:09:9c:a7:87:82:16:59:
06:f4:d4:f1:66:a8:95:a0:b0:2d:98:64:46:c7:db:f4:27:2d:
e8:77:b9:1d:09:55:fd:32:b5:44:b7:f1:6a:04:c6:01:a4:a3:
b6:5d:3b:4c:2d:11:1e:41:b7:e2:0e:16:0d:12:ec:8a:bf:03:
af:7a:81:a6:1c:8d:39:ee:2c:b6:90:ff:de:db:65:40:dc:35:
8b:3a:fe:2d:23:0a:73:2e:65:7f:60:c5:52:90:83:ed:28:5a:
34:2a:95:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 8 22:17:25 2025 by rpki-client