Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/2cJoua_1H9g3xx7wrPsIsvGgSYk.roa
File: 2cJoua_1H9g3xx7wrPsIsvGgSYk.roa (raw, json)
Hash identifier: 7agL3fJ7xCXpdMilZBE+caHsjIU5iXVZsNisqQjvHb0=
Subject key identifier: D9:C2:68:B9:AF:F5:1F:D8:37:C7:1E:F0:AC:FB:08:B2:F1:A0:49:89
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 14AE
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/2cJoua_1H9g3xx7wrPsIsvGgSYk.roa
Signing time: Wed 30 Jul 2025 02:47:59 +0000
ROA not before: Wed 30 Jul 2025 02:47:59 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 55990
IP address blocks: 115.32.48.0/21 maxlen: 21
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5294 (0x14ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Jul 30 02:47:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D9C268B9AFF51FD837C71EF0ACFB08B2F1A04989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:90:1a:42:bc:13:b8:cd:a2:53:64:a0:07:40:
1f:0c:48:de:23:c1:1f:a8:02:f6:58:15:47:f9:ea:
4e:67:28:9d:94:8c:fd:4c:62:cf:ae:2f:f5:f2:04:
d5:b3:6d:85:69:3f:68:3c:26:16:16:c4:66:02:1f:
bc:30:ff:c3:12:49:9c:03:ba:26:75:59:9e:15:ea:
96:df:71:e0:8d:37:d8:02:41:ee:1a:47:5c:13:32:
0c:c8:e6:e1:48:03:0f:ec:f2:52:d4:41:d6:b7:68:
aa:40:31:d5:98:81:dc:61:24:2b:a2:7c:94:dc:f4:
84:7f:0f:1a:bc:17:77:d2:86:30:b2:9c:5a:ca:8e:
81:76:fd:76:71:a7:5e:de:e0:c6:8b:4f:96:be:50:
ff:b4:0b:bf:7b:44:8f:1e:f1:d2:ea:0a:fe:5d:30:
be:4c:4f:a1:57:43:02:a8:8d:90:6d:62:12:d8:75:
12:17:dd:8d:5e:15:0f:5b:e4:05:a4:e0:c3:40:91:
6b:a6:b3:33:9c:b5:d0:3f:3f:42:50:ff:5d:d9:11:
9a:ab:79:47:24:c8:05:17:47:98:cf:1b:15:8a:d9:
8f:13:f2:5f:3b:fb:05:ee:4a:19:53:97:63:e1:88:
00:22:8c:e6:41:5b:eb:36:60:81:65:77:7e:02:88:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C2:68:B9:AF:F5:1F:D8:37:C7:1E:F0:AC:FB:08:B2:F1:A0:49:89
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/2cJoua_1H9g3xx7wrPsIsvGgSYk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.32.48.0/21
Signature Algorithm: sha256WithRSAEncryption
22:2b:f9:fb:18:e6:18:30:d7:01:81:a1:ed:75:56:ca:89:a2:
35:34:1a:e7:76:0f:69:f3:c3:ec:14:3d:cb:48:e7:9d:94:c1:
70:98:dd:1d:d6:d7:fd:fd:20:0e:4f:af:61:9b:f6:c5:72:43:
55:45:e3:65:0f:26:2a:4e:02:8e:d7:03:1b:c8:aa:94:f0:63:
59:1d:be:53:f4:e9:b3:b8:ae:57:6d:07:e2:91:cf:6e:94:fe:
0a:60:96:3d:20:25:33:1a:73:f9:47:f3:7e:ba:d1:08:bd:38:
ee:d7:03:90:0e:81:cd:b2:3e:67:92:1b:d6:93:8d:de:e3:22:
4d:83:85:c3:4f:9d:99:37:96:1b:0d:ba:6c:71:5a:12:9c:fe:
77:7c:76:fe:85:e5:65:02:c0:62:88:5e:b0:4c:ff:e8:dc:a4:
86:df:f1:ae:8d:84:c1:76:49:19:d2:2a:1a:f5:27:d5:4a:74:
b3:30:db:16:f1:4d:ac:28:62:65:1c:2a:91:02:a2:19:59:42:
f4:30:49:54:1c:83:06:13:89:56:f0:14:1b:5b:68:49:b6:f5:
0b:55:bc:68:85:1b:1c:59:99:26:fb:d6:cc:1c:be:3d:8f:d2:
f4:37:56:43:b5:cb:b2:61:78:20:fc:af:20:2c:9f:f0:07:01:
be:c1:42:bc
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD
RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA3MzAw
MjQ3NTlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQ5QzI2OEI5QUZGNTFG
RDgzN0M3MUVGMEFDRkIwOEIyRjFBMDQ5ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrkBpCvBO4zaJTZKAHQB8MSN4jwR+oAvZYFUf56k5nKJ2UjP1M
Ys+uL/XyBNWzbYVpP2g8JhYWxGYCH7ww/8MSSZwDuiZ1WZ4V6pbfceCNN9gCQe4a
R1wTMgzI5uFIAw/s8lLUQda3aKpAMdWYgdxhJCuifJTc9IR/Dxq8F3fShjCynFrK
joF2/XZxp17e4MaLT5a+UP+0C797RI8e8dLqCv5dML5MT6FXQwKojZBtYhLYdRIX
3Y1eFQ9b5AWk4MNAkWumszOctdA/P0JQ/13ZEZqreUckyAUXR5jPGxWK2Y8T8l87
+wXuShlTl2PhiAAijOZBW+s2YIFld34CiOQxAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU2cJoua/1H9g3xx7wrPsIsvGgSYkwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb
RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx
NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvMmNKb3VhXzFIOWcz
eHg3d3JQc0lzdkdnU1lrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3MgMDANBgkqhkiG9w0BAQsFAAOCAQEAIiv5+xjmGDDXAYGh7XVWyomiNTQa
53YPafPD7BQ9y0jnnZTBcJjdHdbX/f0gDk+vYZv2xXJDVUXjZQ8mKk4CjtcDG8iq
lPBjWR2+U/Tps7iuV20H4pHPbpT+CmCWPSAlMxpz+UfzfrrRCL047tcDkA6BzbI+
Z5Ib1pON3uMiTYOFw0+dmTeWGw26bHFaEpz+d3x2/oXlZQLAYohesEz/6Nykht/x
ro2EwXZJGdIqGvUn1Up0szDbFvFNrChiZRwqkQKiGVlC9DBJVByDBhOJVvAUG1to
Sbb1C1W8aIUbHFmZJvvWzBy+PY/S9DdWQ7XLsmF4IPyvICyf8AcBvsFCvA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 05:23:20 2025 by rpki-client