Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/pgX3Im21HRz-W8muHuK96T624L4.roa
File: pgX3Im21HRz-W8muHuK96T624L4.roa (raw, json)
Hash identifier: sYRzSvfPMutNjaXYDXa4JVKTyK/9bIiPfVHUR1ejudU=
Subject key identifier: A6:05:F7:22:6D:B5:1D:1C:FE:5B:C9:AE:1E:E2:BD:E9:3E:B6:E0:BE
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 0A
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/pgX3Im21HRz-W8muHuK96T624L4.roa
Signing time: Tue 27 May 2025 08:11:27 +0000
ROA not before: Tue 27 May 2025 08:11:27 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 56040
IP address blocks: 240a:4090:1200::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:11:27 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=A605F7226DB51D1CFE5BC9AE1EE2BDE93EB6E0BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:45:af:e6:30:b3:9f:05:d6:af:8b:25:db:a4:
62:5e:1e:a9:a3:59:5b:7e:88:9c:aa:b5:85:6e:c0:
2b:4a:b5:11:c2:b6:1d:9d:18:33:eb:db:6f:24:86:
73:d6:5b:e6:e1:8e:2a:df:4a:c2:a1:a5:15:57:87:
26:e4:5e:4b:5a:5b:e3:49:ed:fe:03:2c:54:43:8c:
ef:b8:96:49:a9:ca:29:fc:a2:0b:92:6d:02:14:14:
b7:1b:71:76:bd:94:fd:4f:83:66:47:6a:b8:eb:a6:
aa:e5:b4:f4:39:2a:be:1f:88:2f:a0:e8:2c:99:e7:
fc:7b:3e:4c:20:bc:21:6d:10:b0:51:8e:cc:90:cb:
5a:c5:0a:4a:4b:96:b4:69:58:ec:60:cf:da:27:a0:
10:dc:d2:e6:f5:a7:04:8b:6e:e8:08:e3:84:2b:ad:
f7:1e:40:26:9c:b2:0c:85:00:3c:c6:4b:af:84:55:
d2:85:63:50:6a:4d:b7:30:28:93:c5:de:d9:e7:11:
bf:56:0c:c0:06:0e:05:d6:27:e5:84:dc:c3:f0:3c:
d0:be:d8:da:3f:58:ea:10:9c:76:45:12:3a:06:6e:
24:dc:a1:82:2f:d2:0f:6b:a2:5f:17:38:49:d8:11:
66:26:5c:76:a2:4b:68:e7:e5:50:c9:86:53:ea:66:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:05:F7:22:6D:B5:1D:1C:FE:5B:C9:AE:1E:E2:BD:E9:3E:B6:E0:BE
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/pgX3Im21HRz-W8muHuK96T624L4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:4090:1200::/40
Signature Algorithm: sha256WithRSAEncryption
33:0f:1f:76:06:34:e8:e2:5a:be:2b:97:4c:db:60:8d:eb:6f:
a6:89:31:60:e7:76:0c:50:7b:d6:fe:95:d1:04:2a:e2:00:87:
37:b0:10:87:ac:25:60:69:be:8b:f7:bb:72:80:e1:37:b0:14:
cf:5d:93:9d:30:1f:fa:fc:4c:23:d3:d8:d4:e9:f1:48:2f:a3:
ad:4a:79:6b:60:84:6e:d2:33:4c:61:dc:26:4d:36:00:ab:2a:
16:70:d9:fa:3f:12:df:e0:a1:e6:23:98:ee:4c:d3:36:53:cb:
62:a3:35:d6:e6:df:50:80:75:c2:23:c3:1e:e8:e1:e5:1e:aa:
49:03:20:d8:b7:f9:6a:51:34:ae:9a:8e:70:f8:80:ad:b3:81:
0e:73:18:0a:cd:5c:04:00:41:e2:ab:53:14:3c:a8:5a:8e:ed:
6a:61:b7:1a:67:0c:8c:37:da:5c:58:ec:c6:a2:6c:bf:91:49:
ac:39:e6:9f:98:37:8a:c1:c3:40:0f:b1:4f:6a:dd:3d:a2:b5:
61:6d:23:e0:5a:53:68:8b:0a:13:e7:bb:54:bd:5a:d1:89:28:
9e:6e:1e:6f:e4:dc:48:34:e1:3e:eb:e1:d5:56:fa:e7:b9:ce:
12:91:5e:89:5d:51:a1:64:a7:b8:c7:44:2d:1f:6c:8b:74:7f:
e5:85:28:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 03:35:16 2025 by rpki-client