Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/nz52tmPEZrlORFg817Xgp_vJAPU.roa
File: nz52tmPEZrlORFg817Xgp_vJAPU.roa (raw, json)
Hash identifier: g/HS+Cn6D3BJwxlcIbKeRQOMeFwSIJp37IvG9uN5KA4=
Subject key identifier: 9F:3E:76:B6:63:C4:66:B9:4E:44:58:3C:D7:B5:E0:A7:FB:C9:00:F5
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: BE
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/nz52tmPEZrlORFg817Xgp_vJAPU.roa
Signing time: Fri 06 Jun 2025 02:29:16 +0000
ROA not before: Fri 06 Jun 2025 02:29:16 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 56041
IP address blocks: 240a:40c1:c000::/44 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jun 6 02:29:16 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=9F3E76B663C466B94E44583CD7B5E0A7FBC900F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:85:3c:eb:be:1b:49:f2:33:09:6a:98:14:
ad:43:08:52:c1:d7:88:4f:cb:3c:61:c2:5b:5e:4e:
1a:c8:de:99:5f:f9:cb:c1:f4:5c:e1:1e:ed:31:09:
f4:58:f9:50:9f:3d:21:5b:fc:b6:cf:f5:cd:f2:3b:
a9:a6:8a:dd:8c:60:8c:b6:37:ec:b9:ea:3f:28:0d:
5a:9e:2b:6b:0d:86:57:c5:aa:af:87:22:1b:ba:07:
42:b6:32:29:4b:65:c0:40:91:d4:b3:87:71:63:62:
f0:8e:a6:5c:22:6f:b9:39:c4:74:95:b6:90:4c:01:
65:8d:c2:57:dc:42:c2:84:56:28:ce:6e:9a:7c:2c:
d6:41:8a:61:29:c0:a1:73:fc:6f:57:83:09:8e:e8:
29:f2:ef:51:08:b5:d4:ce:43:3d:eb:64:14:77:63:
88:5d:35:5b:e2:0c:20:12:24:0a:2f:88:5f:05:6f:
1a:c6:6b:e9:f3:92:e9:29:c9:77:f2:f8:93:9e:f1:
6b:ec:04:01:c9:e5:67:a4:14:aa:db:87:9d:3b:3d:
9f:d4:f3:43:34:40:4a:a3:81:c8:3f:96:8e:5c:33:
b0:40:29:fa:5e:ae:26:20:36:3d:1c:e5:f3:e8:5c:
91:33:7e:7b:df:55:ed:08:8c:a3:4f:18:8f:d6:04:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3E:76:B6:63:C4:66:B9:4E:44:58:3C:D7:B5:E0:A7:FB:C9:00:F5
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/nz52tmPEZrlORFg817Xgp_vJAPU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:40c1:c000::/44
Signature Algorithm: sha256WithRSAEncryption
37:ae:e5:cb:6e:4a:ab:b0:70:c9:6f:3d:48:68:0b:5e:d0:ab:
a7:1c:05:15:0c:3e:f9:2b:9f:ca:20:71:1b:52:a2:e3:cb:6b:
3a:b0:65:4a:69:69:11:04:55:9e:b8:0c:80:12:c4:e6:0b:f0:
46:21:1f:4e:9d:d2:67:05:78:d5:a2:dc:ae:2b:4c:57:b8:62:
56:df:63:f1:7c:40:49:a7:b9:2a:97:a0:e4:f0:42:d7:bc:42:
bb:5a:be:e0:ab:8f:a3:68:f2:20:63:2a:09:6b:69:5a:d5:a3:
86:2e:11:84:f9:be:3b:6c:a9:90:96:ce:41:85:7a:82:9e:d1:
40:81:65:2a:94:6c:2a:9a:00:58:36:8c:9e:b5:28:2e:e6:94:
d5:4b:16:11:c5:22:68:b7:c5:35:2f:75:9c:b7:cf:a5:de:e1:
f1:2b:ff:96:0d:88:af:61:b2:fe:fb:4e:8b:5a:e6:74:ed:69:
a6:dc:96:0c:26:e3:1c:f0:f9:58:6f:b9:31:50:df:a2:36:cb:
a0:d7:42:02:c5:87:ef:62:6a:1a:0d:a8:20:d4:51:e8:ce:ab:
75:70:d5:df:44:00:ad:1f:8e:78:be:da:42:47:60:07:98:73:
67:0c:4d:cf:00:83:b9:21:24:3c:e4:02:4b:e9:70:51:41:9a:
03:39:b2:1e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 10 04:35:01 2025 by rpki-client