Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/74C64usb54oZXamcImdW-1Fi-g8.roa
File: 74C64usb54oZXamcImdW-1Fi-g8.roa (raw, json)
Hash identifier: g9c6MJH1Rl3euJ6FsWM8LvGhUL/h7TtQq5UOJ2T6e6c=
Subject key identifier: EF:80:BA:E2:EB:1B:E7:8A:19:5D:A9:9C:22:67:56:FB:51:62:FA:0F
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 159B
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/74C64usb54oZXamcImdW-1Fi-g8.roa
Signing time: Sat 13 Sep 2025 03:06:37 +0000
ROA not before: Sat 13 Sep 2025 03:06:38 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 55990
IP address blocks: 113.46.92.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5531 (0x159b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Sep 13 03:06:38 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=EF80BAE2EB1BE78A195DA99C226756FB5162FA0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:31:54:7f:b7:2e:6a:3b:59:f5:fd:5b:0b:
2f:14:d5:fa:ff:43:c2:06:1a:fc:fb:df:f2:d7:30:
7c:37:e8:f9:e4:5a:81:d3:ac:83:38:c7:cd:26:e5:
2c:1f:27:1f:be:c9:8b:75:f7:45:87:83:27:c4:9f:
c4:f9:cf:60:d0:d4:02:26:66:b5:55:cf:1f:18:de:
c1:94:02:cc:e4:bc:48:8f:b0:a6:92:de:f3:2e:98:
ff:44:8d:1f:fe:51:b1:7c:f2:ec:ac:c4:3e:9b:2a:
42:2c:07:90:78:1d:82:11:12:9f:16:2a:03:30:e3:
81:9c:41:51:6b:87:76:35:95:bc:03:71:1c:f2:3c:
5e:4c:b8:6f:b5:23:8e:fe:f3:03:64:15:76:8b:01:
d0:e5:bc:05:87:51:cf:01:37:42:24:22:7f:4e:7d:
ab:fd:98:63:b1:ec:ad:98:df:21:53:fc:67:81:d8:
1b:29:0d:48:35:90:01:d7:34:88:2a:f8:48:5e:1c:
20:56:e8:b8:16:0f:e9:60:b6:fd:c6:84:c9:57:fc:
f3:bd:0f:99:59:be:3f:11:10:1f:ac:d5:85:b9:79:
69:e1:50:1a:84:15:e7:64:15:53:f7:fb:1f:16:26:
f8:ed:b9:00:b8:34:f9:57:53:03:33:8f:d7:f9:b2:
d6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:80:BA:E2:EB:1B:E7:8A:19:5D:A9:9C:22:67:56:FB:51:62:FA:0F
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/74C64usb54oZXamcImdW-1Fi-g8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.46.92.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:ed:00:5f:cb:79:00:04:8e:d7:a1:e1:fc:c1:de:73:a7:6a:
04:86:cc:1f:19:d1:07:75:20:1f:f1:fd:af:99:92:75:e8:98:
4d:8a:1a:b1:80:ad:8d:28:58:d4:61:80:3c:67:61:7b:e0:57:
8a:b2:18:64:78:89:dd:8f:90:75:df:5c:03:13:6b:49:12:6c:
a4:90:1d:b8:fa:a6:b5:8b:a2:07:b7:e9:b2:78:f7:93:e8:35:
cd:e2:90:55:4e:05:07:e2:6e:79:1e:1c:a5:03:cd:76:1c:df:
92:85:38:36:af:48:14:ad:e6:56:29:3a:c9:ae:cf:c9:24:89:
ff:2e:db:be:b6:37:47:6c:35:15:93:4f:92:de:11:7a:95:2a:
e6:8d:f9:89:0d:08:8a:13:26:07:42:8a:83:97:a0:6a:de:93:
e9:39:09:28:da:d5:41:85:2e:d5:ad:ff:07:7e:94:bc:c0:82:
6b:48:b0:2f:ec:2c:f3:d0:72:3e:d1:28:fe:d0:cd:de:dc:f7:
9c:d4:d7:4d:06:c5:79:9f:ed:f8:04:70:e3:75:d4:c0:95:50:
4a:56:c3:0a:92:eb:bd:0b:79:9e:a7:2b:51:bd:61:8d:86:a4:
bc:1b:5b:8d:7a:a9:f2:fd:cf:59:bb:35:f1:d9:2f:24:81:10:
8e:21:9f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:13:06 2025 by rpki-client