Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/snatyuWsFSZzK5vGm6qsS-IIVAU.roa
File: snatyuWsFSZzK5vGm6qsS-IIVAU.roa (raw, json)
Hash identifier: 4YvjozQGgdv4XL+O1fkM/nvc/ouZfW1B9xa4puoDW2E=
Subject key identifier: B2:76:AD:CA:E5:AC:15:26:73:2B:9B:C6:9B:AA:AC:4B:E2:08:54:05
Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB
Certificate serial: 1C5F
Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/snatyuWsFSZzK5vGm6qsS-IIVAU.roa
Signing time: Sun 07 Apr 2024 11:10:04 +0000
ROA not before: Sun 07 Apr 2024 11:10:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 4538
IP address blocks: 103.152.186.0/24 maxlen: 24
103.152.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7263 (0x1c5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB
Validity
Not Before: Apr 7 11:10:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B276ADCAE5AC1526732B9BC69BAAAC4BE2085405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:ca:62:85:de:3b:78:b6:62:28:66:30:72:
b7:43:43:a4:4f:b2:ea:ff:ec:d4:d0:41:d6:73:21:
ab:63:59:91:b5:80:9c:ef:aa:d4:fe:c5:93:de:ac:
eb:ca:b7:7d:dc:60:9f:cd:d9:51:c9:2d:ad:9d:e2:
de:7b:1b:79:0f:ec:be:24:e9:5f:a9:ea:9a:54:72:
3a:21:12:43:3e:b4:3d:1b:3e:d6:ff:5f:8f:58:81:
1d:d4:9d:e7:51:36:53:d2:af:48:ce:1b:ae:9e:5a:
c0:98:c8:fe:01:7a:11:1e:65:3a:ea:e9:1d:73:b6:
17:fc:9e:9b:16:92:21:e6:c0:da:c9:c9:f9:3b:e8:
9d:d8:89:df:7b:87:1f:f0:ed:2c:b1:fb:10:40:cc:
85:f0:30:72:d9:66:26:c6:4b:38:42:91:3a:b3:5f:
61:37:e2:71:30:97:d8:df:1e:6f:f5:9b:e6:77:39:
43:f0:95:e4:e3:fe:19:24:b4:98:82:9d:f9:4b:00:
80:67:cb:bc:f1:7b:c3:a2:3f:dd:72:3d:e0:ed:a0:
b6:1a:0c:69:4c:ca:d5:d4:1f:3a:b2:83:0b:fb:cf:
23:95:ef:2e:eb:2f:5c:83:8f:9f:8c:43:39:e3:79:
40:59:3f:c0:4b:3b:9c:19:16:d9:f0:55:27:af:11:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:76:AD:CA:E5:AC:15:26:73:2B:9B:C6:9B:AA:AC:4B:E2:08:54:05
X509v3 Authority Key Identifier:
keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/snatyuWsFSZzK5vGm6qsS-IIVAU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.186.0/23
Signature Algorithm: sha256WithRSAEncryption
60:43:b4:78:32:74:db:23:11:28:d9:8b:ce:ca:38:3e:f9:47:
43:9c:5d:9b:8e:d4:f4:73:03:73:9a:0e:ed:72:db:1d:94:57:
a9:55:57:55:21:65:e4:6c:a3:05:ea:bd:ed:1e:91:61:c0:62:
a4:18:e0:e1:48:d6:31:7f:c5:f9:18:0e:f7:ca:0e:61:a6:56:
ca:1b:8f:07:e3:ef:8e:32:fd:9a:b9:8d:2e:88:59:55:84:5f:
82:74:0d:44:74:45:ad:b2:58:ec:57:a0:d2:32:57:05:ff:cc:
f8:f9:08:d4:05:3c:cd:70:29:df:31:72:85:1e:a9:e3:8c:fb:
1b:58:66:af:38:38:45:81:18:04:43:18:71:c6:19:c4:c9:9b:
b2:8f:a9:06:a5:8d:fb:eb:bf:ca:2b:5b:65:9e:40:d4:70:c1:
90:07:7b:96:f5:30:1f:f3:24:0f:87:d5:6d:2a:89:1c:bc:3a:
69:2d:75:23:6c:49:4c:85:0b:d2:43:6a:c1:4e:1c:34:b2:e9:
95:bf:ab:44:e5:65:1b:41:9e:5d:4c:bf:f2:31:54:ea:71:db:
6f:53:80:d4:2a:b6:95:9c:2d:cf:e5:a2:dc:97:b8:4d:c6:57:
bc:25:e1:b5:a3:a7:f5:29:f1:3a:ad:f5:e3:58:d4:cf:cb:f2:
2b:d2:12:93
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICHF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy
RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNDA0MDcx
MTEwMDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEIyNzZBRENBRTVBQzE1
MjY3MzJCOUJDNjlCQUFBQzRCRTIwODU0MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJNcpihd47eLZiKGYwcrdDQ6RPsur/7NTQQdZzIatjWZG1gJzv
qtT+xZPerOvKt33cYJ/N2VHJLa2d4t57G3kP7L4k6V+p6ppUcjohEkM+tD0bPtb/
X49YgR3UnedRNlPSr0jOG66eWsCYyP4BehEeZTrq6R1zthf8npsWkiHmwNrJyfk7
6J3Yid97hx/w7Syx+xBAzIXwMHLZZibGSzhCkTqzX2E34nEwl9jfHm/1m+Z3OUPw
leTj/hkktJiCnflLAIBny7zxe8OiP91yPeDtoLYaDGlMytXUHzqygwv7zyOV7y7r
L1yDj5+MQznjeUBZP8BLO5wZFtnwVSevEVfNAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUsnatyuWsFSZzK5vGm6qsS+IIVAUwHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J
D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4
OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvc25hdHl1V3NGU1p6
SzV2R202cXNTLUlJVkFVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWeYujANBgkqhkiG9w0BAQsFAAOCAQEAYEO0eDJ02yMRKNmLzso4PvlHQ5xd
m47U9HMDc5oO7XLbHZRXqVVXVSFl5GyjBeq97R6RYcBipBjg4UjWMX/F+RgO98oO
YaZWyhuPB+PvjjL9mrmNLohZVYRfgnQNRHRFrbJY7Feg0jJXBf/M+PkI1AU8zXAp
3zFyhR6p44z7G1hmrzg4RYEYBEMYccYZxMmbso+pBqWN++u/yitbZZ5A1HDBkAd7
lvUwH/MkD4fVbSqJHLw6aS11I2xJTIUL0kNqwU4cNLLplb+rROVlG0GeXUy/8jFU
6nHbb1OA1Cq2lZwtz+Wi3Je4TcZXvCXhtaOn9SnxOq3141jUz8vyK9ISkw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:01 2025 by rpki-client