Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/7g1F9eaX8YY1TlYkGfdJOiAmEk8.roa
File: 7g1F9eaX8YY1TlYkGfdJOiAmEk8.roa (raw, json)
Hash identifier: mw1MlnkvmgBgF1LUO7H1dkhp/D1Jm6Blg9g9DGB8SNQ=
Subject key identifier: EE:0D:45:F5:E6:97:F1:86:35:4E:56:24:19:F7:49:3A:20:26:12:4F
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 53
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/7g1F9eaX8YY1TlYkGfdJOiAmEk8.roa
Signing time: Tue 27 May 2025 08:36:32 +0000
ROA not before: Tue 27 May 2025 08:36:32 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 56047
IP address blocks: 240a:42c8::/31 maxlen: 31
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:36:32 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=EE0D45F5E697F186354E562419F7493A2026124F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:9e:f1:ed:19:03:03:23:3a:f1:7e:7c:24:
06:19:02:23:fb:90:18:c7:1e:08:91:dc:99:f8:e4:
ee:f9:0e:2a:69:b4:10:7c:7a:97:c0:08:0d:17:7c:
c9:c8:98:35:64:60:53:11:3d:4d:a3:54:25:35:75:
31:53:d5:5e:1e:75:eb:93:77:63:5b:6c:16:87:66:
02:85:d4:54:64:f6:6b:9e:36:2e:5d:18:15:7b:1e:
88:8a:3c:ed:a8:88:a7:96:e4:1f:05:2a:05:5c:fb:
2d:ed:6c:24:4c:07:7f:46:d4:8f:46:85:ad:f0:84:
ee:d3:57:d2:11:dd:ec:aa:63:8d:79:6b:eb:10:04:
ae:8b:f9:ff:d2:9a:45:ae:2b:d6:e6:e2:dd:e6:49:
51:7c:4c:69:88:97:7a:88:70:a2:9d:c8:c3:fd:7f:
ca:19:6f:a6:63:9a:49:82:12:e9:7e:ac:1a:9a:91:
54:84:2f:24:56:eb:3f:b3:54:57:c9:44:7c:f6:29:
3e:f3:a9:6f:da:c9:2e:03:b6:a7:cb:7f:91:61:c2:
9a:27:f7:7b:d4:a5:bd:70:8b:52:4e:e3:a8:88:01:
1f:4a:f9:1c:14:f2:3f:9b:88:c7:b3:9f:4b:1e:18:
89:05:a8:8a:00:e0:c3:2e:b4:d6:35:05:33:74:83:
b9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0D:45:F5:E6:97:F1:86:35:4E:56:24:19:F7:49:3A:20:26:12:4F
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/7g1F9eaX8YY1TlYkGfdJOiAmEk8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:42c8::/31
Signature Algorithm: sha256WithRSAEncryption
4d:6b:e9:01:9f:16:eb:b9:61:d0:63:d8:91:ae:61:14:07:a4:
fa:01:bb:d1:20:78:9c:38:88:19:b9:cf:71:05:c8:8f:65:d4:
61:6d:e9:ae:95:f7:9d:4b:ec:a9:79:81:d1:fe:3e:a7:96:2e:
94:c2:c7:c1:9b:84:a7:08:56:67:5e:75:ab:29:fe:f5:57:79:
52:df:36:55:43:e5:ab:31:0b:28:76:ff:6a:3d:44:7e:30:84:
48:37:2c:3d:7e:92:9e:3f:f2:96:33:66:13:60:cf:1f:19:d8:
b8:ff:59:2d:82:ae:05:fd:6e:cd:94:0b:db:70:6f:03:8d:20:
50:20:c5:04:88:ab:08:fd:93:ef:63:bd:d1:94:70:fb:1f:cf:
8c:20:22:2f:23:37:6d:13:ab:4f:f5:05:d0:1f:8a:e4:99:54:
dc:7f:00:9c:df:59:cd:14:5f:4e:10:b5:72:47:fb:a5:1f:1a:
1f:cf:12:c1:03:89:67:ab:31:53:43:67:a2:ee:8b:ea:20:24:
25:f6:b2:6e:e7:a0:15:73:2c:fb:3b:a9:26:fc:50:7a:99:a0:
c7:31:5b:cb:3a:ac:e2:f3:57:f5:e3:13:d4:f8:af:9d:e8:0b:
d0:fc:67:b4:c5:bf:f9:11:94:fc:41:38:50:19:c3:28:fa:f0:
47:b9:3b:dc
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIBUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG
RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4
MzYzMloXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoRUUwRDQ1RjVFNjk3RjE4
NjM1NEU1NjI0MTlGNzQ5M0EyMDI2MTI0RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMZ6nvHtGQMDIzrxfnwkBhkCI/uQGMceCJHcmfjk7vkOKmm0EHx6
l8AIDRd8yciYNWRgUxE9TaNUJTV1MVPVXh5165N3Y1tsFodmAoXUVGT2a542Ll0Y
FXseiIo87aiIp5bkHwUqBVz7Le1sJEwHf0bUj0aFrfCE7tNX0hHd7KpjjXlr6xAE
rov5/9KaRa4r1ubi3eZJUXxMaYiXeohwop3Iw/1/yhlvpmOaSYIS6X6sGpqRVIQv
JFbrP7NUV8lEfPYpPvOpb9rJLgO2p8t/kWHCmif3e9SlvXCLUk7jqIgBH0r5HBTy
P5uIx7OfSx4YiQWoigDgwy601jUFM3SDuakCAwEAAaOCAfQwggHwMB0GA1UdDgQW
BBTuDUX15pfxhjVOViQZ90k6ICYSTzAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP
q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy
L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi83ZzFGOWVhWDhZWTFU
bFlrR2ZkSk9pQW1Fazgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUBJApCyDANBgkqhkiG9w0BAQsFAAOCAQEATWvpAZ8W67lh0GPYka5hFAek+gG7
0SB4nDiIGbnPcQXIj2XUYW3prpX3nUvsqXmB0f4+p5YulMLHwZuEpwhWZ151qyn+
9Vd5Ut82VUPlqzELKHb/aj1EfjCESDcsPX6Snj/yljNmE2DPHxnYuP9ZLYKuBf1u
zZQL23BvA40gUCDFBIirCP2T72O90ZRw+x/PjCAiLyM3bROrT/UF0B+K5JlU3H8A
nN9ZzRRfThC1ckf7pR8aH88SwQOJZ6sxU0Nnou6L6iAkJfaybuegFXMs+zupJvxQ
epmgxzFbyzqs4vNX9eMT1PivnegL0PxntMW/+RGU/EE4UBnDKPrwR7k73A==
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:14:04 2025 by rpki-client