Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/BIkMc74um78SwhA4viNhqCv6KVY.roa
File: BIkMc74um78SwhA4viNhqCv6KVY.roa (raw, json)
Hash identifier: zFIIeJPkutzpVnQzdFxIAjwc1NFTjBjXKWi3NyFeEUg=
Subject key identifier: 04:89:0C:73:BE:2E:9B:BF:12:C2:10:38:BE:23:61:A8:2B:FA:29:56
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 2D
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/BIkMc74um78SwhA4viNhqCv6KVY.roa
Signing time: Tue 27 May 2025 08:19:38 +0000
ROA not before: Tue 27 May 2025 08:19:38 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 38019
IP address blocks: 240a:4286::/31 maxlen: 31
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:19:38 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=04890C73BE2E9BBF12C21038BE2361A82BFA2956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:e8:7d:39:c6:04:09:f4:47:25:56:fb:17:
f9:60:0c:43:63:24:52:92:ba:af:1b:08:94:4f:d0:
da:f9:e6:36:74:ef:46:a4:69:21:98:51:db:9d:3c:
95:8b:27:4a:a9:da:87:e7:c1:8e:2d:fa:80:75:27:
e6:09:bc:3d:e8:d0:ff:6e:f5:0d:dc:93:96:12:1a:
bb:14:e8:34:44:2c:44:ce:a4:c2:44:df:76:8b:1f:
d3:ae:f7:1e:26:fb:7f:07:6f:2e:a2:85:b2:1b:2f:
4b:2b:1e:88:72:64:6c:35:a3:c3:a1:b6:fe:5c:a2:
e3:80:c4:32:94:1f:f8:9d:5f:69:8f:d3:3a:f9:5b:
f3:73:1c:c7:39:27:32:54:26:de:5b:c4:99:df:18:
c3:7c:52:82:cb:aa:7c:73:d4:46:73:b9:9a:ec:a9:
a7:77:4b:08:b8:98:e2:b9:7b:b5:2f:44:4c:3b:dc:
b0:74:07:56:aa:94:34:71:bf:59:46:04:6e:ec:14:
80:92:1a:78:56:ed:ec:c6:24:22:c0:56:0c:db:ae:
ef:e1:70:f0:33:68:1f:2a:7a:2a:47:a8:ac:69:0d:
25:cd:39:fc:e4:7d:63:ff:9f:70:95:86:37:55:c6:
93:04:23:4b:4f:b8:e3:73:ef:7b:33:75:e5:3f:54:
ef:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:89:0C:73:BE:2E:9B:BF:12:C2:10:38:BE:23:61:A8:2B:FA:29:56
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/BIkMc74um78SwhA4viNhqCv6KVY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:4286::/31
Signature Algorithm: sha256WithRSAEncryption
1e:60:2f:e2:ae:73:8a:fe:c6:c0:2e:b7:e2:dd:b5:ec:2b:4c:
b5:66:dc:58:d5:9c:bc:0f:8f:8e:12:95:5e:01:ad:c3:e1:fb:
20:54:ce:28:50:18:85:39:5f:5a:77:41:8c:5f:7b:1e:f1:91:
fc:d8:33:5b:42:99:90:17:79:22:e3:c1:62:05:7d:d2:64:f3:
90:64:08:d7:3f:1f:ee:98:0f:10:37:c0:da:7d:04:f2:f7:4a:
22:e9:aa:f1:e9:08:2c:c1:6c:36:ff:9e:ab:49:3d:12:49:d7:
c6:a5:15:70:3d:24:32:d6:cf:25:87:8b:49:7b:de:56:b9:01:
50:d8:90:70:d9:a6:9e:7d:e9:12:91:85:93:b7:4b:4e:18:f0:
f1:05:4b:c4:6c:1e:14:c6:1a:73:49:21:53:5f:3e:6e:b2:80:
f8:04:fb:31:1d:71:d2:30:51:96:ea:ff:fb:67:08:35:d8:e9:
58:0a:d6:1c:2d:3b:76:7c:a0:52:5f:31:8d:64:e7:b4:00:c6:
ae:cf:c7:6f:4b:e9:da:9b:77:19:29:4b:34:7c:be:5b:ec:41:
68:bf:a7:a1:ef:2d:93:5e:5d:11:cd:6e:5b:66:4a:8f:f5:a4:
c0:9e:13:eb:b9:4b:43:2a:c2:1b:f0:ea:4c:fa:0f:ed:f8:3f:
ef:f4:92:f3
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG
RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4
MTkzOFoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoMDQ4OTBDNzNCRTJFOUJC
RjEyQzIxMDM4QkUyMzYxQTgyQkZBMjk1NjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALoA6H05xgQJ9EclVvsX+WAMQ2MkUpK6rxsIlE/Q2vnmNnTvRqRp
IZhR2508lYsnSqnah+fBji36gHUn5gm8PejQ/271DdyTlhIauxToNEQsRM6kwkTf
dosf0673Hib7fwdvLqKFshsvSyseiHJkbDWjw6G2/lyi44DEMpQf+J1faY/TOvlb
83McxzknMlQm3lvEmd8Yw3xSgsuqfHPURnO5muypp3dLCLiY4rl7tS9ETDvcsHQH
VqqUNHG/WUYEbuwUgJIaeFbt7MYkIsBWDNuu7+Fw8DNoHyp6KkeorGkNJc05/OR9
Y/+fcJWGN1XGkwQjS0+443PvezN15T9U7/kCAwEAAaOCAfQwggHwMB0GA1UdDgQW
BBQEiQxzvi6bvxLCEDi+I2GoK/opVjAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP
q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy
L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9CSWtNYzc0dW03OFN3
aEE0dmlOaHFDdjZLVlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUBJApChjANBgkqhkiG9w0BAQsFAAOCAQEAHmAv4q5ziv7GwC634t217CtMtWbc
WNWcvA+PjhKVXgGtw+H7IFTOKFAYhTlfWndBjF97HvGR/NgzW0KZkBd5IuPBYgV9
0mTzkGQI1z8f7pgPEDfA2n0E8vdKIumq8ekILMFsNv+eq0k9EknXxqUVcD0kMtbP
JYeLSXveVrkBUNiQcNmmnn3pEpGFk7dLThjw8QVLxGweFMYac0khU18+brKA+AT7
MR1x0jBRlur/+2cINdjpWArWHC07dnygUl8xjWTntADGrs/Hb0vp2pt3GSlLNHy+
W+xBaL+noe8tk15dEc1uW2ZKj/WkwJ4T67lLQyrCG/DqTPoP7fg/7/SS8w==
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:13:44 2025 by rpki-client