Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/XUdhSB33gcGkxGdPueRyoNTUx1M.roa
File: XUdhSB33gcGkxGdPueRyoNTUx1M.roa (raw, json)
Hash identifier: 0el+reVik78/paEHgy0LmEqnEmu87SHd0zpd+HoMaW0=
Subject key identifier: 5D:47:61:48:1D:F7:81:C1:A4:C4:67:4F:B9:E4:72:A0:D4:D4:C7:53
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 22
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/XUdhSB33gcGkxGdPueRyoNTUx1M.roa
Signing time: Tue 27 May 2025 08:19:35 +0000
ROA not before: Tue 27 May 2025 08:19:35 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 9808
IP address blocks: 240a:42b2::/31 maxlen: 31
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:19:35 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=5D4761481DF781C1A4C4674FB9E472A0D4D4C753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:27:38:9d:cd:72:cb:2f:79:c5:2f:b5:14:24:
3a:59:b1:22:5c:72:b6:bc:66:14:23:8c:3a:e9:75:
5b:9a:79:8a:e2:00:72:44:18:b8:89:fa:16:8e:da:
20:dc:20:97:89:4c:6b:dc:d6:48:1f:b2:e6:2b:63:
10:ac:8e:7c:d5:60:34:d2:93:68:1a:a7:1f:1f:a3:
b3:67:19:55:72:6f:ed:f9:cc:55:6d:5e:26:1b:c1:
03:b3:a8:cb:89:52:a2:57:56:8d:77:0c:10:77:f6:
6a:25:60:fe:7f:6c:ff:40:80:c8:e7:7f:08:4f:b4:
f4:1a:71:91:6f:6e:46:91:16:99:85:bb:36:44:32:
59:ef:56:dc:71:86:78:d1:1e:95:71:7f:0d:c2:bb:
cd:f8:9b:37:0f:d9:2e:29:7b:78:f9:6e:e7:d8:f2:
0e:c5:f4:f5:68:e3:4a:79:e8:2d:af:8a:27:3f:53:
36:b9:2c:c8:6d:0d:31:6f:fc:28:26:c3:83:9a:d6:
e6:87:82:07:47:ab:50:a2:c1:1f:6b:d5:4a:6f:1c:
df:c3:91:09:6e:de:37:f3:2f:f5:3a:f4:f6:77:1d:
c7:1d:c2:9e:3e:f1:22:44:0c:aa:a2:c7:fc:09:25:
d9:07:d1:14:0c:71:c2:98:e0:61:95:1e:7d:11:92:
2e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:47:61:48:1D:F7:81:C1:A4:C4:67:4F:B9:E4:72:A0:D4:D4:C7:53
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/XUdhSB33gcGkxGdPueRyoNTUx1M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:42b2::/31
Signature Algorithm: sha256WithRSAEncryption
43:24:a6:0a:06:ae:70:f6:b1:77:12:7a:be:66:2f:8e:bd:fa:
71:43:99:ae:c9:7b:b4:24:78:a0:a8:ff:fd:ba:d3:fb:80:15:
c1:ce:02:b1:f1:cf:53:fa:0c:75:6f:d6:ea:e9:56:86:b7:7b:
22:b7:74:95:89:d3:b0:1e:d1:f9:86:1e:34:82:2a:0c:c1:1d:
9f:ca:7b:d9:00:16:a7:cb:d2:91:39:66:56:7a:09:7a:e7:b7:
ec:72:87:9e:31:7e:33:3d:be:34:ef:47:ed:9e:70:fa:14:31:
d2:fe:c5:3d:45:0d:38:31:39:e5:5d:5b:56:f4:80:02:62:c8:
a3:79:2b:f6:5c:25:c8:ba:29:69:6a:52:7f:5f:2c:ef:8f:dc:
cc:81:de:d7:ee:ad:db:a4:96:17:7a:c2:4b:92:53:77:94:62:
85:9e:66:f6:45:54:93:31:7a:bf:ce:b6:30:6a:ba:1f:53:69:
16:39:9a:e0:65:79:a9:9c:eb:5b:d0:5c:d0:a2:87:f5:a5:4c:
cf:b5:7f:db:4e:68:73:61:64:e6:f7:5d:b8:a0:80:6f:ce:d4:
02:a5:4c:c9:0b:f6:53:67:86:c2:c0:b7:92:28:e5:76:a1:d3:
d1:ee:a9:23:cc:00:ff:7b:ea:81:56:24:7e:f8:8a:f7:9f:73:
f2:75:09:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:55:35 2025 by rpki-client