Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/lrxmavibqQZzPTGaTbkm9SGJJ3E.roa
File: lrxmavibqQZzPTGaTbkm9SGJJ3E.roa (raw, json)
Hash identifier: AyvQhYndwh/2blDSfrUVGtBs+z0270fC/QKusWD1kaA=
Subject key identifier: 96:BC:66:6A:F8:9B:A9:06:73:3D:31:9A:4D:B9:26:F5:21:89:27:71
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 99
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lrxmavibqQZzPTGaTbkm9SGJJ3E.roa
Signing time: Fri 06 Jun 2025 01:44:56 +0000
ROA not before: Fri 06 Jun 2025 01:44:56 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 24445
IP address blocks: 240a:42bc::/31 maxlen: 31
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jun 6 01:44:56 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=96BC666AF89BA906733D319A4DB926F521892771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:af:cf:cf:67:c3:fb:3d:d1:8b:7a:8d:58:56:
9d:52:81:18:ba:90:e4:3d:0f:52:36:ce:db:c8:55:
a8:0b:d0:da:1e:2b:f9:51:22:69:05:f3:ca:d8:7d:
ca:1f:c8:7a:19:dd:2b:0b:ff:ba:6c:a7:00:94:78:
b3:25:ef:a3:7a:ef:fb:b4:a9:84:1e:7b:74:af:0c:
7c:f2:e8:39:30:91:1a:ed:7f:3e:78:5f:76:4d:f6:
6c:2b:4a:90:29:7d:dd:50:3e:3b:1e:5c:9e:8d:20:
82:23:6f:93:e3:d8:02:be:f7:2d:36:c6:c9:a6:c1:
df:44:ec:14:00:5b:51:e1:25:df:5d:a7:24:4c:f7:
78:25:b5:c0:2b:03:93:dd:94:79:53:69:1a:b7:cc:
19:06:6c:53:24:fe:9e:85:29:2d:76:3f:58:93:36:
af:a7:18:5a:82:ce:62:e1:22:49:66:9d:c7:fb:25:
1f:79:4d:3a:55:ef:d6:b5:07:d3:41:02:89:22:25:
db:23:4b:76:29:03:e8:2a:7e:b2:6c:e8:32:3a:4a:
64:cf:82:ef:7c:fe:97:c9:95:9a:7a:5c:85:8f:63:
1e:8f:40:06:97:8e:fd:b4:fb:7a:30:0d:37:2a:c6:
98:e4:c1:f9:3d:99:78:ae:93:5c:d8:f7:53:18:bc:
98:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BC:66:6A:F8:9B:A9:06:73:3D:31:9A:4D:B9:26:F5:21:89:27:71
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lrxmavibqQZzPTGaTbkm9SGJJ3E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:42bc::/31
Signature Algorithm: sha256WithRSAEncryption
d2:b9:e6:fb:e1:c8:ba:f1:0a:bb:4d:a1:49:96:a4:24:39:35:
06:0f:05:de:ad:79:49:52:a8:c1:f2:8f:41:a4:33:42:04:f2:
b5:4f:a4:00:4d:7b:30:c4:f5:a4:a1:46:74:3e:c0:29:5a:37:
7f:b0:ed:ae:58:2f:85:95:67:61:1d:df:1a:db:d4:6b:8c:ba:
31:7d:a0:15:95:e4:b4:01:cf:ee:43:22:d1:11:44:db:f5:f5:
f6:be:cb:e7:90:9a:5d:21:e8:4e:8d:8b:ea:f2:db:58:46:12:
c7:e2:d6:d6:6a:2e:55:25:38:c1:0e:06:75:45:28:b2:78:b3:
e7:ef:91:2a:e3:fd:d9:76:55:45:03:f4:b4:fb:38:fb:43:e7:
9f:54:20:cf:48:49:15:17:d1:55:05:03:6a:e5:09:21:3e:a8:
c3:15:38:8a:da:41:6d:39:c7:a1:9f:1b:14:2e:cb:45:7e:87:
12:1d:39:f9:06:a1:c0:c0:83:81:40:5e:92:c9:5b:81:b8:d8:
75:e5:81:4c:3a:02:82:3a:67:e1:f0:cd:9b:36:be:78:ed:3d:
1e:df:b3:f3:61:93:ed:8e:6e:2e:a6:fe:27:4f:9c:e8:c1:94:
5c:b0:e7:a6:56:1a:e4:dc:0c:a3:c0:89:72:59:63:42:44:f1:
86:71:ec:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:48:18 2025 by rpki-client