Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/Bi18dOmDeZQNDtNGVo5byrnswKY.roa
File: Bi18dOmDeZQNDtNGVo5byrnswKY.roa (raw, json)
Hash identifier: knpVfGhOj1Ecw9ryrPsK/VbChIWJEvb4evNkjf5bECk=
Subject key identifier: 06:2D:7C:74:E9:83:79:94:0D:0E:D3:46:56:8E:5B:CA:B9:EC:C0:A6
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 15D2
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Bi18dOmDeZQNDtNGVo5byrnswKY.roa
Signing time: Sat 13 Sep 2025 03:06:50 +0000
ROA not before: Sat 13 Sep 2025 03:06:50 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 55990
IP address blocks: 113.47.238.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5586 (0x15d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Sep 13 03:06:50 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=062D7C74E98379940D0ED346568E5BCAB9ECC0A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:77:8b:59:b8:ac:24:d3:81:28:d8:a3:84:d1:
ae:e6:84:ab:10:de:0a:87:22:57:0f:4e:74:64:a8:
fd:c2:78:a1:05:a7:e2:77:13:95:f2:d7:8a:0b:89:
05:a1:b6:6c:24:84:84:3b:ba:87:c7:a4:c6:c8:db:
d9:30:69:be:4b:0c:0d:a7:dd:95:05:e7:ba:91:12:
34:4f:d7:8e:8e:e6:1d:ab:c9:1f:dd:b3:b5:df:0f:
dc:60:4b:0f:51:b0:e5:13:5f:ba:2a:0b:79:11:d9:
48:65:90:72:94:46:fa:88:28:08:1c:81:ff:30:f6:
aa:9a:24:9a:f4:e0:c9:8c:51:02:11:f5:37:a4:6d:
12:df:06:f6:52:cb:dc:f7:d8:da:b9:78:a7:ad:87:
e6:ea:6f:6b:6d:d2:de:aa:e0:60:2b:67:25:0c:33:
d3:fe:06:11:3e:51:d0:37:12:64:3c:66:8b:b2:9d:
c5:8b:95:d4:84:21:6a:43:dc:5b:9d:43:c9:a6:42:
98:e0:99:91:11:b7:32:3b:83:76:a8:6f:27:e7:5a:
90:f6:9b:fa:06:90:c7:34:9e:d1:63:5b:be:f7:7e:
a6:e3:be:f1:0d:ec:a5:56:a2:04:eb:32:f3:d2:03:
74:01:a6:88:05:ce:9d:e5:df:3b:d1:7b:87:37:cd:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2D:7C:74:E9:83:79:94:0D:0E:D3:46:56:8E:5B:CA:B9:EC:C0:A6
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Bi18dOmDeZQNDtNGVo5byrnswKY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.47.238.0/23
Signature Algorithm: sha256WithRSAEncryption
65:0e:e9:d2:e5:19:72:32:ba:28:7f:58:ef:08:1b:cd:00:80:
f1:4c:f6:a3:b9:48:af:e3:4c:6c:17:4b:91:4d:37:f0:a8:a7:
84:92:2e:72:53:1a:6b:a3:d6:04:01:d4:49:93:db:e6:43:2c:
c2:d1:bf:c8:e8:9c:28:7c:6a:7f:97:ec:2b:d5:d6:df:b2:0a:
46:e5:f9:e2:97:a3:16:29:ed:9e:bc:14:98:54:bd:62:22:66:
43:3c:90:32:7f:71:9a:a4:b4:45:0a:0b:f8:2a:e2:3b:cf:03:
4c:5e:72:be:6a:f9:7b:e7:cc:66:c7:45:f7:d2:83:cb:c7:ed:
0c:d9:04:b4:ac:6e:14:30:d9:5a:74:52:f6:a2:5f:cb:87:33:
08:98:8a:5e:d3:cd:8c:a9:ae:9b:9f:d4:41:03:36:e3:e5:94:
c7:9b:aa:bf:b6:e7:5d:94:ff:95:e1:e4:b5:40:0d:e7:3d:9d:
22:29:fb:c9:71:fa:5b:00:cf:99:8b:c1:c3:49:c5:ca:b0:24:
52:71:ee:f7:3b:e0:f8:24:ff:39:0b:6f:1f:13:ec:6f:26:28:
91:97:e6:bf:95:8a:ff:09:f5:49:a4:65:cb:b8:81:a1:20:4e:
be:11:a5:7f:db:70:1e:12:0f:4a:fd:8a:3f:48:7b:d3:15:ae:
b3:be:a2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:13:08 2025 by rpki-client