Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/JwMROxBOzUpMBRJtv0oVqEOy0N8.roa
File: JwMROxBOzUpMBRJtv0oVqEOy0N8.roa (raw, json)
Hash identifier: iri99aIFHiiOaeLbrRDGUe0qgIpdMfPKUnh2WWhKwbA=
Subject key identifier: 27:03:11:3B:10:4E:CD:4A:4C:05:12:6D:BF:4A:15:A8:43:B2:D0:DF
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: CD
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/JwMROxBOzUpMBRJtv0oVqEOy0N8.roa
Signing time: Fri 06 Jun 2025 02:32:42 +0000
ROA not before: Fri 06 Jun 2025 02:32:42 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 134810
IP address blocks: 240a:40c1:4010::/44 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jun 6 02:32:42 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=2703113B104ECD4A4C05126DBF4A15A843B2D0DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:eb:dc:e5:81:87:75:42:4f:1d:76:6d:8f:
23:ca:96:f5:3b:73:fc:14:fe:ef:c8:90:f7:78:d2:
52:98:17:3c:43:77:97:47:62:98:7c:40:bc:35:ce:
5c:05:2c:1b:85:28:e1:5b:ca:dc:e9:db:9c:87:dd:
ae:6b:84:f4:ee:5d:83:52:7a:68:20:39:36:da:23:
a5:69:12:e4:ee:89:f9:44:4a:0d:bf:33:4c:3a:cc:
dc:0e:6e:aa:5e:10:06:c2:ca:c8:1d:eb:d9:75:7f:
61:8d:4a:f0:59:b9:b1:82:e1:f3:ff:81:57:f3:00:
b9:23:64:4a:af:77:b3:94:ba:d8:ef:98:6d:3e:5c:
80:a0:f6:cf:54:d0:ee:4c:0a:a9:58:bb:ea:5c:41:
fa:bb:50:b6:79:10:cd:fd:86:be:6b:a2:d4:89:cc:
1b:17:9a:af:d9:17:e7:b9:77:73:bb:a6:3c:ea:e6:
59:4f:25:9f:e4:a9:5b:0a:89:51:78:20:24:48:8a:
97:b5:f5:57:14:88:dc:81:02:5b:47:b8:8b:ba:1b:
2c:fe:1f:73:15:d9:31:b3:29:da:b3:72:21:cb:27:
16:cf:11:9e:2b:0b:02:3a:15:23:da:43:f1:a2:b1:
d4:a0:0a:e7:a2:76:0f:84:3e:81:5d:2e:b8:34:5f:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:03:11:3B:10:4E:CD:4A:4C:05:12:6D:BF:4A:15:A8:43:B2:D0:DF
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/JwMROxBOzUpMBRJtv0oVqEOy0N8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:40c1:4010::/44
Signature Algorithm: sha256WithRSAEncryption
d7:dd:93:38:05:e3:5f:af:2b:5d:ca:e7:2e:fe:8f:94:33:dc:
04:3c:de:ef:07:d9:ba:82:3d:e4:de:f8:7d:2a:10:14:4e:2a:
7c:fc:29:17:8d:e0:27:be:7a:36:35:56:10:c2:9f:e2:c4:6a:
ae:d3:3a:59:7e:1c:9c:29:39:74:ac:0b:18:78:be:4e:5f:d2:
c5:ac:45:a5:4d:5d:bf:88:4a:d2:ee:f3:cd:3b:e5:68:0a:95:
d2:8e:72:43:c1:31:f1:60:f5:77:62:61:ba:1e:bb:98:51:ec:
dd:ff:b7:97:5e:bc:ca:a4:d9:38:43:8c:4f:84:ef:82:be:0c:
f9:47:f0:5b:6b:eb:c8:15:97:3c:94:d9:e5:36:e8:e5:be:8c:
d9:7c:a8:9c:29:03:3a:df:14:d8:d1:29:38:ed:a8:dd:00:4b:
4c:c8:a1:d7:14:55:c8:cc:3c:8e:7a:07:c8:d3:ca:f3:22:e3:
ea:6d:36:0a:34:26:2a:3f:7f:4e:6c:9c:cb:ea:0a:24:85:67:
47:2f:62:f5:dc:d2:77:dd:69:da:3f:d5:0d:43:bd:7f:55:f5:
7f:6d:3d:29:e0:6a:9c:d4:90:1e:75:c2:58:f1:26:cf:f3:0d:
68:8e:4b:8e:d4:9d:3c:f6:d4:88:6d:e1:ee:ed:6c:a1:5e:93:
b0:3c:90:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 10 04:36:42 2025 by rpki-client