Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/8TjnHz2fU4VUNaMQrKLy7aGg7Y0.roa
File: 8TjnHz2fU4VUNaMQrKLy7aGg7Y0.roa (raw, json)
Hash identifier: cex9vARX9aOIfkkNCFidmI/SdPQqZFr42+59S+CGL1g=
Subject key identifier: F1:38:E7:1F:3D:9F:53:85:54:35:A3:10:AC:A2:F2:ED:A1:A0:ED:8D
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 90
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/8TjnHz2fU4VUNaMQrKLy7aGg7Y0.roa
Signing time: Fri 06 Jun 2025 01:44:52 +0000
ROA not before: Fri 06 Jun 2025 01:44:52 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 56041
IP address blocks: 240a:42a8::/31 maxlen: 31
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jun 6 01:44:52 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=F138E71F3D9F53855435A310ACA2F2EDA1A0ED8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:71:8e:de:97:ff:2b:f6:cc:9d:9a:07:c5:
1b:c5:e6:38:a0:4d:89:58:78:8a:94:d8:25:d3:01:
d1:43:67:14:93:c0:db:f7:d7:1f:88:93:da:a8:4e:
e9:34:5c:f6:60:d9:0b:55:3f:8f:d2:42:f5:8d:93:
74:fc:55:af:dd:1d:4c:65:4c:50:9e:cc:b8:a8:ec:
4b:39:5d:f1:9d:e8:29:d3:e6:dc:9f:ee:82:29:5d:
5d:01:4b:d7:0a:84:f4:13:36:d3:27:ae:1f:1d:02:
70:86:eb:f7:ce:21:64:90:96:98:dd:cf:70:ca:f9:
57:a0:a2:7d:87:2d:a0:b6:46:41:3e:62:6e:57:8c:
72:e8:d0:74:25:2c:09:8d:b8:5e:f9:69:5b:cb:da:
fa:9d:0a:a0:81:e1:22:eb:05:1d:54:ab:5e:d8:f1:
30:51:eb:3e:c5:59:3f:d7:7a:9e:fd:e3:5c:34:9a:
48:81:9d:26:d6:4a:6c:8e:77:22:d0:09:36:ae:e5:
8e:8c:8d:71:37:96:cd:39:6d:d3:87:8f:2c:8c:3d:
b5:00:ff:80:cc:2c:6e:5c:a4:bc:c7:d6:48:74:25:
24:48:41:d6:ff:d9:06:af:3b:30:8b:2f:66:0b:78:
3d:4b:fb:ef:00:b1:18:71:2d:ef:5b:1c:c3:22:f3:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:38:E7:1F:3D:9F:53:85:54:35:A3:10:AC:A2:F2:ED:A1:A0:ED:8D
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/8TjnHz2fU4VUNaMQrKLy7aGg7Y0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:42a8::/31
Signature Algorithm: sha256WithRSAEncryption
63:3c:85:24:82:35:21:a4:7f:64:eb:69:9e:d0:94:da:76:6d:
d9:3c:92:3d:51:07:2e:ea:99:70:58:98:d5:86:a3:02:98:ee:
7c:6f:da:66:2a:d2:6d:04:09:13:80:8b:94:76:60:76:69:bc:
a8:b9:f4:0e:1f:93:83:a2:3f:31:22:6b:a3:6b:a9:b6:6c:77:
78:83:92:2d:91:2f:2b:bd:4a:e9:d4:66:42:d3:7e:77:8f:5b:
22:6c:33:44:55:1c:05:d8:6a:eb:bc:b0:e4:4e:39:55:58:13:
6e:d6:3d:84:03:c2:a5:46:2c:00:bd:98:92:be:1f:f9:e2:e5:
9b:09:eb:5b:db:49:2e:c0:24:03:2a:09:fe:13:9e:56:12:8d:
4e:56:ac:da:00:57:76:d3:2a:95:31:55:67:54:a0:2b:cf:61:
8e:18:ee:75:8d:26:57:84:0c:95:9e:5c:be:dd:df:96:ad:c6:
8a:33:b0:e5:36:1b:81:89:92:07:f1:a5:a1:4a:62:67:a6:9b:
ab:b2:38:c4:e5:04:0f:70:98:b8:aa:70:80:75:19:46:19:91:
c6:88:de:95:a4:94:b8:89:72:22:77:6c:36:0e:45:db:0d:56:
5a:d8:f5:0e:bb:d1:6c:ca:6f:ab:cf:18:c0:93:a5:cb:e9:d9:
ea:59:48:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:36:18 2025 by rpki-client