Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/9Dh-CAnjxfIXTpByOevRUoejWjg.roa
File: 9Dh-CAnjxfIXTpByOevRUoejWjg.roa (raw, json)
Hash identifier: rtV+E04PKS5dj6gzsb6GjOxgllves1sucZlR/B4SUf8=
Subject key identifier: F4:38:7E:08:09:E3:C5:F2:17:4E:90:72:39:EB:D1:52:87:A3:5A:38
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 15B3
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/9Dh-CAnjxfIXTpByOevRUoejWjg.roa
Signing time: Sat 13 Sep 2025 03:06:42 +0000
ROA not before: Sat 13 Sep 2025 03:06:42 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 55990
IP address blocks: 113.47.220.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5555 (0x15b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Sep 13 03:06:42 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=F4387E0809E3C5F2174E907239EBD15287A35A38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:88:ae:65:9e:35:11:f3:8b:b8:12:83:ec:
87:c3:a3:f3:4d:d8:a6:c0:28:68:f5:e1:b8:4a:c7:
8c:37:64:89:e6:fc:c7:b4:b2:f7:3d:47:ea:2b:f6:
97:51:25:24:d7:7e:87:9a:58:30:ef:3e:44:11:4b:
28:e9:bf:a4:8a:aa:89:07:bd:3f:69:72:83:d7:4d:
0a:2f:33:59:ac:8b:10:70:22:e0:57:8a:7e:20:6f:
44:a8:42:f4:ac:3a:5f:80:bb:56:3c:01:23:53:d7:
e9:40:57:07:6c:66:0f:17:0b:35:65:5e:c3:f8:81:
7f:c9:1c:dc:88:d8:01:2f:8c:50:05:2f:0c:65:e9:
62:ee:b1:12:22:a0:71:79:2b:20:68:44:01:d0:69:
0a:75:22:43:86:80:a7:85:aa:a5:be:fa:82:03:cd:
54:8d:86:e5:67:8c:0b:03:b6:b8:55:32:84:79:9a:
b2:93:3d:1e:bf:e3:06:74:1a:00:2c:c8:a7:b2:40:
f9:25:88:66:aa:44:1f:7b:55:be:2d:96:76:4a:6b:
1b:24:76:66:dd:e5:d6:f7:bf:a3:92:60:2b:ed:7e:
e0:25:33:f9:36:8d:09:f0:c1:4d:9d:9d:ec:39:66:
46:04:b3:8d:e2:94:26:41:0a:21:66:d7:b1:c5:7e:
5a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:38:7E:08:09:E3:C5:F2:17:4E:90:72:39:EB:D1:52:87:A3:5A:38
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/9Dh-CAnjxfIXTpByOevRUoejWjg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.47.220.0/23
Signature Algorithm: sha256WithRSAEncryption
99:c9:46:72:cd:a9:02:a0:c6:b2:74:55:a1:d1:70:0b:a6:a2:
20:10:80:4f:7c:b5:34:5e:87:19:60:3a:a6:ae:da:6b:db:51:
9c:f2:3c:49:73:f1:8f:6b:04:89:e0:71:98:8a:6f:da:9d:6b:
63:b1:e7:ce:66:f1:42:65:8c:a8:40:4b:f7:9c:1c:51:3e:92:
b4:51:dd:da:c6:5d:8e:5f:cf:d8:f5:11:6b:d1:3b:4b:f6:4b:
e5:69:c6:67:b9:51:77:4d:9a:d4:f4:d3:6f:ec:68:c0:fe:1b:
3d:80:d4:e1:eb:4f:ab:e2:36:d4:53:65:cd:8b:76:32:82:81:
53:a0:5d:1a:a3:91:12:17:19:27:a2:85:fb:d8:6a:99:eb:11:
7e:c1:87:b0:42:1a:4f:71:e6:09:a4:e7:d6:d9:8d:d4:61:c6:
b1:2f:e6:11:40:47:d4:96:86:37:29:ec:82:74:98:f3:9a:1a:
84:4f:b5:00:61:4a:27:3d:aa:c5:78:35:e2:a5:bc:28:91:58:
94:ac:87:f5:c0:8c:f9:1d:66:09:66:73:36:ef:f6:ca:2b:3d:
4c:30:3e:57:6e:b8:73:04:7b:d5:8d:b7:06:d8:59:1f:eb:50:
c6:bd:b2:fb:a2:08:95:f6:25:a2:65:28:df:84:b9:ef:d9:a6:
12:0d:7a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:13:06 2025 by rpki-client