Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/ZGd8ZsNfXfAeMW1r6GKqtpXzIZY.roa
File: ZGd8ZsNfXfAeMW1r6GKqtpXzIZY.roa (raw, json)
Hash identifier: vU9UWCzWFfxgaT6x7e50mP3YzOm0/XgS1xFaG3dzjFo=
Subject key identifier: 64:67:7C:66:C3:5F:5D:F0:1E:31:6D:6B:E8:62:AA:B6:95:F3:21:96
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 3F
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/ZGd8ZsNfXfAeMW1r6GKqtpXzIZY.roa
Signing time: Tue 27 May 2025 08:25:30 +0000
ROA not before: Tue 27 May 2025 08:25:30 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 9808
IP address blocks: 240a:42e2::/31 maxlen: 31
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:25:30 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=64677C66C35F5DF01E316D6BE862AAB695F32196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:13:3c:de:d4:41:74:8b:2b:58:67:64:b5:
b7:f9:4b:6d:75:eb:d1:6d:d6:f5:b9:5b:30:d1:50:
48:13:b0:16:bd:f8:43:e1:9d:f2:87:93:dd:9e:cc:
42:0e:aa:f2:6a:c6:8c:1f:eb:2b:d4:87:b6:7c:43:
63:16:15:9e:7b:88:e1:d5:d8:ea:9c:47:df:ee:db:
36:83:e4:e7:1d:f2:57:c2:79:a6:e0:c1:6f:64:d8:
2c:b8:2a:da:46:90:5a:00:60:cd:d5:7b:0f:b4:da:
c9:d7:04:49:d0:f0:26:d7:f5:00:93:26:cd:ce:d3:
fc:62:1d:c0:03:9e:c7:c9:20:84:15:2b:aa:55:c3:
fc:8d:8c:30:76:c8:b6:d3:92:51:21:29:89:26:94:
19:41:65:5b:e9:35:cc:e9:78:a4:34:f4:6b:dd:14:
17:67:fa:eb:95:b6:37:f7:99:27:69:26:00:ae:15:
0a:36:b1:b4:9a:19:7b:99:36:28:8d:f9:d6:c6:5d:
f8:55:df:7e:e5:09:e4:6e:80:a9:73:cb:b8:1a:b4:
78:2a:69:66:96:7c:29:ae:2e:dd:d7:61:fd:6b:a1:
0e:ad:a5:f0:7a:76:5f:01:23:2c:b5:8b:42:01:12:
48:90:c4:8f:ea:31:8b:a9:76:42:30:d4:50:db:72:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:67:7C:66:C3:5F:5D:F0:1E:31:6D:6B:E8:62:AA:B6:95:F3:21:96
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/ZGd8ZsNfXfAeMW1r6GKqtpXzIZY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:42e2::/31
Signature Algorithm: sha256WithRSAEncryption
c6:f0:61:18:78:8f:8b:5d:a6:cb:b0:b7:d4:8d:95:31:fe:5b:
b7:0e:95:25:b2:e9:18:a3:04:71:0e:e2:3b:17:cf:32:9c:f9:
e5:b1:74:ba:09:27:4f:88:b2:2d:ab:a7:c2:ec:ab:50:b5:0c:
b1:ec:e8:46:d5:e0:05:b1:85:eb:37:af:28:94:95:fd:7c:98:
e6:36:b3:33:56:f2:c3:16:8f:1d:39:a3:e1:62:75:62:30:f1:
bc:f9:c2:68:d6:50:ef:a9:66:ea:70:92:89:9a:99:fd:4f:0a:
f7:cd:c4:4a:88:a0:d6:4d:7d:a2:14:0b:ea:21:43:e6:b2:e5:
93:d6:2d:2a:bf:d9:c0:b7:21:1a:b0:e4:6f:7e:4d:86:ae:ad:
a9:f1:bc:97:b7:11:37:cd:75:58:c5:73:c4:c0:47:a9:f5:22:
2d:13:dd:99:db:3e:9e:98:42:ef:57:79:a0:5d:0f:50:b9:e8:
31:f2:04:02:21:ec:6f:5a:76:45:f6:1c:df:3e:b1:20:58:c0:
e1:be:8f:51:a9:77:e6:d1:a4:0c:1e:71:6c:d7:85:fe:9a:ff:
44:6a:a7:90:a2:e3:32:e5:a0:78:95:11:e6:5a:a4:0f:91:18:
ca:24:5b:6a:4e:e8:87:ba:e2:9c:0b:5a:eb:ad:87:87:21:ec:
2d:f1:ed:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:08:07 2025 by rpki-client