Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/xeVaT29WvFejpElpyFsQ71-iRuQ.roa
File: xeVaT29WvFejpElpyFsQ71-iRuQ.roa (raw, json)
Hash identifier: anhf44qRs/xIdJZiyCpgKkDhYQ/oPBvlUB5TkhW498U=
Subject key identifier: C5:E5:5A:4F:6F:56:BC:57:A3:A4:49:69:C8:5B:10:EF:5F:A2:46:E4
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 92
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/xeVaT29WvFejpElpyFsQ71-iRuQ.roa
Signing time: Fri 06 Jun 2025 01:44:53 +0000
ROA not before: Fri 06 Jun 2025 01:44:53 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 56041
IP address blocks: 240a:42aa::/31 maxlen: 31
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jun 6 01:44:53 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=C5E55A4F6F56BC57A3A44969C85B10EF5FA246E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:b9:0b:8c:ce:9c:b4:d7:33:d6:f3:97:c2:
10:59:92:67:73:33:dd:ac:2b:08:23:94:47:e3:e9:
5f:5a:ac:aa:aa:e9:6e:a7:5d:31:75:f8:31:0d:c4:
89:98:68:52:f8:ce:a7:e3:72:91:78:bd:55:dd:58:
46:f3:43:a5:1b:8f:8b:34:69:4f:cd:2b:16:76:fa:
68:dc:9d:70:f0:93:93:e5:c3:dd:3a:40:cd:60:ce:
30:48:4d:a8:63:e1:d8:42:b6:d5:61:8b:f9:32:5a:
3e:51:44:ba:ec:15:c4:22:ce:9a:37:da:d1:54:b6:
9d:fe:52:7f:20:4d:39:6b:7c:80:4c:ad:10:fb:7c:
ff:6b:df:71:0b:19:10:0b:ba:e3:a1:90:c2:f0:51:
b3:08:20:fb:76:94:ea:40:d6:41:04:3d:50:93:98:
33:c0:82:25:e0:19:21:19:b9:6b:85:e9:4c:9f:44:
ff:b5:6a:ff:11:53:eb:e4:4e:cb:45:6b:cb:f8:df:
09:fa:a5:9d:15:c2:22:60:33:4c:50:07:cb:c4:9b:
25:cc:dc:5b:c0:40:1b:94:c5:28:ac:46:9a:d9:a0:
c9:46:d7:c3:70:c1:5d:7d:b4:1f:50:06:1e:8c:c6:
c9:37:29:fd:af:1e:cd:98:fa:f1:a3:ee:18:61:f9:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E5:5A:4F:6F:56:BC:57:A3:A4:49:69:C8:5B:10:EF:5F:A2:46:E4
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/xeVaT29WvFejpElpyFsQ71-iRuQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:42aa::/31
Signature Algorithm: sha256WithRSAEncryption
33:b1:39:46:ab:ce:8c:e0:3c:a8:0f:3b:68:56:36:7a:05:f9:
22:ed:d1:1b:49:69:79:81:ac:66:08:8b:8a:a2:a2:8d:2f:6f:
e1:e3:3b:f2:da:45:d6:a4:0b:e8:61:3a:a9:7c:a2:d5:de:0d:
e3:84:d9:30:c6:18:df:b9:44:6d:aa:bd:c1:af:1d:ca:06:34:
1b:c2:a0:40:0d:6e:4c:c7:40:df:65:38:25:3d:b2:37:7a:73:
d0:8f:f5:03:52:e5:02:54:ef:a0:ea:73:2c:16:58:ed:e2:fb:
d6:e6:75:b5:be:79:b9:02:69:90:dc:3c:5a:c8:31:27:c8:33:
82:90:68:97:0e:8a:98:ce:d3:f8:4f:e8:20:2c:27:92:84:a0:
41:9a:de:db:ef:3f:60:b8:85:f3:4d:24:28:80:56:18:20:4b:
e2:d7:d8:ed:30:c3:12:4f:c4:c2:a0:81:f0:f9:e9:1b:7c:45:
51:b2:b5:69:42:cd:77:4e:3f:78:cc:d7:d9:9a:7d:d7:d7:14:
f1:f5:58:e8:6d:bc:c1:5b:d7:a9:c9:c0:52:61:03:6f:c8:52:
b0:fd:28:bc:f6:37:3c:06:92:37:58:03:57:75:3d:ac:c6:3e:
7d:64:85:c7:95:ac:28:96:72:01:2b:60:5b:3c:b7:b8:d0:f1:
fa:01:32:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:50:37 2025 by rpki-client