Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/2T70_NZVzykunlbfMU7wZT0gl6Y.roa
File: 2T70_NZVzykunlbfMU7wZT0gl6Y.roa (raw, json)
Hash identifier: hZFeJWM1apjIhXzAB0KdgK0LQf9Gfun0ofWh9dC6RKI=
Subject key identifier: D9:3E:F4:FC:D6:55:CF:29:2E:9E:56:DF:31:4E:F0:65:3D:20:97:A6
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 15D1
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/2T70_NZVzykunlbfMU7wZT0gl6Y.roa
Signing time: Sat 13 Sep 2025 03:06:49 +0000
ROA not before: Sat 13 Sep 2025 03:06:49 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 55990
IP address blocks: 113.45.104.0/21 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5585 (0x15d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Sep 13 03:06:49 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=D93EF4FCD655CF292E9E56DF314EF0653D2097A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:0b:c4:1f:ef:bf:bd:fa:be:17:60:2f:05:
4b:90:74:76:2e:9a:9c:69:06:45:69:bc:f1:f8:9b:
66:e5:a0:97:32:b7:64:82:be:8a:dd:a9:2f:2c:32:
29:89:55:e2:ce:a7:1f:f6:36:77:72:20:02:9f:34:
56:55:93:c5:15:e5:ab:fa:21:22:78:83:42:d2:3c:
2c:21:64:d4:3d:86:87:f3:1f:27:63:c2:77:e7:3d:
28:37:be:b2:8e:8d:af:a2:dd:90:2d:2f:e2:86:fa:
97:94:4d:8c:b5:db:d0:ab:d8:20:30:a0:30:42:d9:
b2:9c:b7:9d:cc:f9:7f:89:43:e7:58:0c:69:04:a4:
9d:cd:08:d8:c7:cf:6a:7a:1f:4e:44:f3:37:7a:93:
f5:4e:78:2e:dd:89:18:87:93:60:46:aa:1a:da:97:
45:ee:ae:14:d3:b3:23:a4:c0:cc:74:d6:05:1e:b4:
d5:77:bb:b9:a8:5f:ff:01:52:f1:1d:2f:6b:07:be:
bb:a2:2a:d9:42:49:15:06:d4:c2:f3:c4:fa:fb:3c:
ea:9d:00:dc:8d:bd:8b:9e:e8:a4:33:1e:64:c8:f2:
1d:86:81:69:fb:37:ec:c6:ff:02:da:1f:68:5a:5c:
e0:7f:a5:b7:5a:c4:5d:7a:73:19:6b:a8:4e:47:33:
ab:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3E:F4:FC:D6:55:CF:29:2E:9E:56:DF:31:4E:F0:65:3D:20:97:A6
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/2T70_NZVzykunlbfMU7wZT0gl6Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.45.104.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:4e:36:ce:f5:61:89:6e:5c:3e:cf:5e:b7:de:61:09:99:2a:
8a:fc:a0:c7:c4:46:2b:72:aa:17:62:ce:6a:18:ce:e4:16:95:
2b:eb:34:c4:ff:59:80:6f:2f:79:90:c1:2a:91:09:bd:29:6b:
12:8e:e9:f0:69:36:b3:13:8a:fc:bd:b0:50:27:fa:80:3c:f4:
9b:98:21:af:26:1f:9b:5d:ff:a5:e4:2f:c5:68:ea:ed:98:48:
1c:de:92:66:17:3a:70:c1:a4:49:f3:e0:13:b6:d2:c8:8d:ce:
11:1d:c2:5e:8a:47:79:f1:29:aa:a0:f9:c1:39:2e:74:41:e4:
57:56:ff:23:b9:c0:68:00:e6:30:e3:25:a2:4b:29:fc:15:2c:
27:b1:70:c1:86:29:49:41:e0:cf:bc:81:4b:9e:81:23:ae:a1:
af:f4:b9:fd:60:fd:58:29:e9:e3:31:26:3f:ae:98:24:5c:11:
ea:03:82:c2:2d:e6:07:ad:ac:5b:6a:68:e2:82:bc:82:69:f0:
4d:0e:df:a9:32:ce:50:de:98:d6:03:57:3d:76:eb:a6:9a:8a:
91:dc:c0:59:29:4d:19:4b:c9:38:70:2c:9e:6c:30:86:76:14:
28:6a:b3:31:f6:e2:f1:49:03:42:b8:7f:45:ce:1d:49:ba:c8:
6e:cc:7d:b7
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD
RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw
MzA2NDlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQ5M0VGNEZDRDY1NUNG
MjkyRTlFNTZERjMxNEVGMDY1M0QyMDk3QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhyQvEH++/vfq+F2AvBUuQdHYumpxpBkVpvPH4m2bloJcyt2SC
vordqS8sMimJVeLOpx/2NndyIAKfNFZVk8UV5av6ISJ4g0LSPCwhZNQ9hofzHydj
wnfnPSg3vrKOja+i3ZAtL+KG+peUTYy129Cr2CAwoDBC2bKct53M+X+JQ+dYDGkE
pJ3NCNjHz2p6H05E8zd6k/VOeC7diRiHk2BGqhral0XurhTTsyOkwMx01gUetNV3
u7moX/8BUvEdL2sHvruiKtlCSRUG1MLzxPr7POqdANyNvYue6KQzHmTI8h2GgWn7
N+zG/wLaH2haXOB/pbdaxF16cxlrqE5HM6sRAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU2T70/NZVzykunlbfMU7wZT0gl6YwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb
RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx
NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvMlQ3MF9OWlZ6eWt1
bmxiZk1VN3daVDBnbDZZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3EtaDANBgkqhkiG9w0BAQsFAAOCAQEAO042zvVhiW5cPs9et95hCZkqivyg
x8RGK3KqF2LOahjO5BaVK+s0xP9ZgG8veZDBKpEJvSlrEo7p8Gk2sxOK/L2wUCf6
gDz0m5ghryYfm13/peQvxWjq7ZhIHN6SZhc6cMGkSfPgE7bSyI3OER3CXopHefEp
qqD5wTkudEHkV1b/I7nAaADmMOMloksp/BUsJ7FwwYYpSUHgz7yBS56BI66hr/S5
/WD9WCnp4zEmP66YJFwR6gOCwi3mB62sW2po4oK8gmnwTQ7fqTLOUN6Y1gNXPXbr
ppqKkdzAWSlNGUvJOHAsnmwwhnYUKGqzMfbi8UkDQrh/Rc4dSbrIbsx9tw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 05:13:06 2025 by rpki-client