Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/2lRzj_uw2Vl282FwlU2nIGNpc8M.roa
File: 2lRzj_uw2Vl282FwlU2nIGNpc8M.roa (raw, json)
Hash identifier: GOEPENas9qfdmY1X70LnI/X6g9l5cpr+F5/a6lDPlGM=
Subject key identifier: DA:54:73:8F:FB:B0:D9:59:76:F3:61:70:95:4D:A7:20:63:69:73:C3
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 15C7
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/2lRzj_uw2Vl282FwlU2nIGNpc8M.roa
Signing time: Sat 13 Sep 2025 03:06:47 +0000
ROA not before: Sat 13 Sep 2025 03:06:47 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 55990
IP address blocks: 113.46.0.0/19 maxlen: 19
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5575 (0x15c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Sep 13 03:06:47 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=DA54738FFBB0D95976F36170954DA720636973C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:81:21:4a:71:80:c1:7c:71:8d:cf:f6:8a:
8d:91:d6:6a:4a:85:ac:6f:ef:9d:a2:38:78:65:aa:
33:11:cb:88:a0:13:09:05:d4:42:3f:59:0d:18:21:
80:26:34:64:0e:15:bf:9c:09:ae:0d:f1:bc:a9:c3:
c9:26:2c:fa:f1:a1:87:2d:37:82:08:a1:5d:51:b3:
ec:ae:1d:fb:b3:52:6c:b2:e5:54:34:14:84:1f:5a:
88:4d:d3:81:85:fb:0c:41:52:d7:29:c5:5c:14:87:
cd:f1:17:31:64:f0:66:b4:33:b5:3f:c6:9c:8f:7e:
25:b6:f0:24:e3:4b:43:f1:88:d6:56:ff:17:8a:dd:
98:16:6a:c6:61:68:a9:c2:a9:2a:9a:96:db:f4:f3:
00:05:4f:0a:ea:1b:73:a0:0e:3a:f5:3d:6c:ae:e1:
99:95:0a:85:8b:2f:6e:6a:2e:30:f3:70:f0:36:7f:
a8:f0:9f:66:18:f6:48:e1:50:3e:e3:fd:af:1a:f2:
c0:c0:4e:f4:ca:fa:ea:8e:ca:53:af:6f:c3:f7:2e:
04:69:0a:87:a0:94:5f:3c:5d:47:ab:d9:ca:28:a5:
ce:15:46:90:1f:43:48:31:e9:86:98:3a:a5:79:80:
d2:cf:4b:9b:84:e8:f4:37:5b:2b:13:52:3c:72:58:
7b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:54:73:8F:FB:B0:D9:59:76:F3:61:70:95:4D:A7:20:63:69:73:C3
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/2lRzj_uw2Vl282FwlU2nIGNpc8M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.46.0.0/19
Signature Algorithm: sha256WithRSAEncryption
41:e2:a8:6c:ca:2d:4b:71:93:68:b9:31:c4:43:3a:ee:b3:f5:
f8:5c:8c:59:aa:ac:b0:a9:a0:7b:53:b3:98:03:02:65:cf:21:
9e:9d:78:b4:ba:4e:22:f2:40:b2:6e:59:c7:c6:c6:cf:a6:a6:
69:5b:5f:1d:73:18:b9:d4:df:d7:25:e0:3e:16:29:d4:c3:15:
10:d6:e5:01:16:3d:49:cb:c2:6d:c3:93:81:4e:ad:e2:08:91:
9b:ae:4a:9e:c5:50:7a:37:3d:b5:5d:e6:11:3f:3f:4a:4c:9c:
64:6e:c8:5c:86:ea:36:21:02:e0:22:5f:b8:97:98:9e:6d:da:
22:5a:ba:e2:ad:d9:d4:f7:32:70:d9:73:b2:d2:9d:ef:2c:e8:
f1:b9:16:88:71:1b:5a:78:95:00:e4:7b:e4:f3:82:56:43:83:
27:fd:51:cb:6e:51:c0:6e:a3:63:6c:a1:33:b3:56:4f:ab:af:
92:94:cb:97:62:29:20:c0:97:07:6b:db:ae:ee:dc:c8:d9:ac:
aa:5e:d5:4b:80:f4:cb:1e:80:f4:36:94:25:7c:6e:a7:5a:e0:
17:46:b6:0a:6d:95:71:84:08:c1:de:8e:08:e2:2e:18:3b:ee:
b6:fe:cc:7a:9f:ba:a4:77:a0:e7:af:98:3c:10:48:cf:64:6f:
84:9a:21:72
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFccwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD
RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw
MzA2NDdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKERBNTQ3MzhGRkJCMEQ5
NTk3NkYzNjE3MDk1NERBNzIwNjM2OTczQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJ6IEhSnGAwXxxjc/2io2R1mpKhaxv752iOHhlqjMRy4igEwkF
1EI/WQ0YIYAmNGQOFb+cCa4N8bypw8kmLPrxoYctN4IIoV1Rs+yuHfuzUmyy5VQ0
FIQfWohN04GF+wxBUtcpxVwUh83xFzFk8Ga0M7U/xpyPfiW28CTjS0PxiNZW/xeK
3ZgWasZhaKnCqSqaltv08wAFTwrqG3OgDjr1PWyu4ZmVCoWLL25qLjDzcPA2f6jw
n2YY9kjhUD7j/a8a8sDATvTK+uqOylOvb8P3LgRpCoeglF88XUer2coopc4VRpAf
Q0gx6YaYOqV5gNLPS5uE6PQ3WysTUjxyWHuLAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU2lRzj/uw2Vl282FwlU2nIGNpc8MwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb
RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx
NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvMmxSempfdXcyVmwy
ODJGd2xVMm5JR05wYzhNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBXEuADANBgkqhkiG9w0BAQsFAAOCAQEAQeKobMotS3GTaLkxxEM67rP1+FyM
WaqssKmge1OzmAMCZc8hnp14tLpOIvJAsm5Zx8bGz6amaVtfHXMYudTf1yXgPhYp
1MMVENblARY9ScvCbcOTgU6t4giRm65KnsVQejc9tV3mET8/SkycZG7IXIbqNiEC
4CJfuJeYnm3aIlq64q3Z1PcycNlzstKd7yzo8bkWiHEbWniVAOR75POCVkODJ/1R
y25RwG6jY2yhM7NWT6uvkpTLl2IpIMCXB2vbru7cyNmsql7VS4D0yx6A9DaUJXxu
p1rgF0a2Cm2VcYQIwd6OCOIuGDvutv7Mep+6pHeg56+YPBBIz2RvhJohcg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 05:12:20 2025 by rpki-client