Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/8pl3bU8deDrGc8FdC5TWUxlM3_w.roa
File: 8pl3bU8deDrGc8FdC5TWUxlM3_w.roa (raw, json)
Hash identifier: YiqWtBj2Qai/hukWx433tBRu7xd6H0ap+V2x0K9O4O4=
Subject key identifier: F2:99:77:6D:4F:1D:78:3A:C6:73:C1:5D:0B:94:D6:53:19:4C:DF:FC
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 20
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/8pl3bU8deDrGc8FdC5TWUxlM3_w.roa
Signing time: Tue 27 May 2025 08:19:34 +0000
ROA not before: Tue 27 May 2025 08:19:34 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 9808
IP address blocks: 240a:42ac::/31 maxlen: 31
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:19:34 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=F299776D4F1D783AC673C15D0B94D653194CDFFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:c7:bf:41:de:86:6d:c4:4b:ec:50:4b:72:
61:f3:c3:d9:e2:b3:a7:b1:58:be:9f:71:a6:d7:01:
3e:de:6f:e2:bd:43:4c:15:cb:73:80:56:1d:d3:0e:
8d:aa:10:ee:c0:02:23:76:46:66:17:61:5b:b6:cc:
65:dd:14:67:cc:39:41:32:4c:76:af:19:77:40:ce:
dd:fb:69:45:d6:03:46:6c:87:fd:78:a6:0f:c3:62:
2a:ef:ee:14:19:79:3e:02:74:b6:2d:c9:3f:ad:a7:
ec:7a:66:09:ae:a3:25:2c:cc:59:84:68:67:0a:3b:
e7:57:23:52:7a:c7:e5:f5:18:96:5e:19:b1:36:df:
c0:8e:23:57:69:1e:f6:2f:85:ba:dc:b3:a6:53:68:
4f:f1:df:a3:dd:82:b1:7b:9f:79:89:15:1b:1f:6d:
e8:a0:c0:b1:6d:12:aa:9e:6d:20:08:90:91:fa:4d:
bc:05:d4:af:bb:85:93:b7:cb:86:09:00:ff:91:e8:
55:32:cc:cc:cf:3e:61:38:98:cb:78:ad:cb:bc:c0:
b7:4f:1a:4d:a6:a4:49:a2:95:74:5d:2a:03:9d:ec:
b6:4e:fe:d9:93:4b:ba:4f:5b:64:32:c6:2b:07:c7:
60:0c:31:23:f8:d2:9b:29:a7:d1:e3:ed:9b:54:8d:
79:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:99:77:6D:4F:1D:78:3A:C6:73:C1:5D:0B:94:D6:53:19:4C:DF:FC
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/8pl3bU8deDrGc8FdC5TWUxlM3_w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:42ac::/31
Signature Algorithm: sha256WithRSAEncryption
a6:53:6a:eb:32:70:75:86:61:bd:86:ab:89:45:a6:d7:8f:02:
ef:4a:1c:6b:f1:76:9c:82:ee:cc:4c:af:d1:0c:74:de:e8:8b:
c5:7c:65:f2:cd:6d:b6:23:96:82:75:ba:e8:26:18:c0:b2:8b:
42:fd:01:02:83:57:8e:fb:ab:b3:db:f8:31:df:5d:a5:70:65:
3a:40:b8:87:77:80:e5:6a:00:09:7b:2f:2f:cd:2b:76:4c:42:
2b:65:d4:60:95:ec:9e:a9:49:53:ea:38:3d:9d:76:c1:27:06:
da:d2:c6:a8:03:b6:d5:e4:f1:03:a9:ee:4d:99:c5:d1:50:c2:
ba:9e:2e:9d:44:35:33:c2:d1:5a:01:ee:85:c6:b5:ed:8f:29:
52:1c:87:6d:36:8c:99:88:d8:09:9c:18:c2:4d:dd:d0:fc:79:
02:35:b7:f9:2d:69:53:a7:08:9e:2c:39:f5:56:18:06:f8:77:
22:ef:b5:fe:41:4c:82:93:56:2d:71:a9:b6:78:b9:53:b0:a0:
c1:17:53:aa:35:6c:27:93:81:de:5d:dc:e1:74:82:4c:4e:0a:
65:1c:19:96:7e:2e:68:1c:67:d9:86:62:42:38:1a:83:07:1a:
ab:74:74:f5:2a:53:2e:d3:82:0c:8e:00:e2:54:06:46:37:fc:
c4:57:8b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:06:02 2025 by rpki-client