Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/FUjmoblRSrpuSS49mPXkS-sv7To.roa
File: FUjmoblRSrpuSS49mPXkS-sv7To.roa (raw, json)
Hash identifier: NnhSZfzRoZIR5ypL2YH1WCxEfPC0ozXgzCfEa8RAels=
Subject key identifier: 15:48:E6:A1:B9:51:4A:BA:6E:49:2E:3D:98:F5:E4:4B:EB:2F:ED:3A
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 1345
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/FUjmoblRSrpuSS49mPXkS-sv7To.roa
Signing time: Thu 22 May 2025 09:04:44 +0000
ROA not before: Thu 22 May 2025 09:04:44 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 55990
IP address blocks: 101.245.96.0/19 maxlen: 19
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4933 (0x1345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: May 22 09:04:44 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1548E6A1B9514ABA6E492E3D98F5E44BEB2FED3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:2f:4b:7c:7e:ba:32:dd:76:0c:12:60:c6:
b9:5e:fa:f4:39:6d:53:dc:55:56:8c:29:7a:f9:bf:
15:58:8f:b1:a8:36:b5:15:db:57:e3:3f:b8:a6:55:
c9:a6:86:b2:0f:3a:08:53:2c:b9:3b:2e:fe:f2:5a:
92:46:0d:86:61:fd:ad:15:65:bd:fe:e1:e9:ec:59:
d6:6e:fe:ba:24:a8:dc:1e:5d:31:e6:47:10:f9:66:
2e:42:8f:9a:5d:49:32:e4:7e:f6:1f:55:13:87:26:
44:2f:66:9e:dd:58:7c:ce:ea:08:1d:70:d6:84:43:
c9:11:3a:e9:59:15:0d:eb:26:e1:e2:65:c0:40:d7:
6d:39:07:9a:b6:8c:58:3e:01:16:be:30:c1:ea:d3:
43:3f:4c:30:7c:e3:a6:30:fa:0e:64:1b:d5:64:33:
bc:cf:74:1c:c1:cf:b6:43:7f:fe:a8:9b:15:1a:0f:
d8:ff:7d:97:c8:b9:7b:d7:4e:ca:0c:0d:0a:0a:24:
62:c3:30:80:4f:da:e3:7f:01:2f:41:eb:7e:7f:4d:
bb:f5:df:08:86:56:42:2b:2f:14:cd:b7:57:ab:ff:
76:5c:f5:21:8d:5f:c0:f1:55:64:c6:20:12:6e:27:
56:65:3b:89:49:e4:85:c5:9e:62:1a:41:b8:b8:f5:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:48:E6:A1:B9:51:4A:BA:6E:49:2E:3D:98:F5:E4:4B:EB:2F:ED:3A
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/FUjmoblRSrpuSS49mPXkS-sv7To.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.245.96.0/19
Signature Algorithm: sha256WithRSAEncryption
6e:e0:5b:3d:a0:eb:b1:64:39:bc:f1:ad:57:5c:a2:48:8b:74:
e6:ae:fd:6c:95:93:b2:a9:83:2f:06:1a:af:e6:c5:07:a8:30:
ec:79:cd:5b:7e:7a:71:4a:a9:31:3a:9a:0e:63:22:33:c1:af:
43:b2:bf:b6:92:b0:43:32:c0:c0:fe:0f:9e:9c:7c:89:f3:25:
76:19:91:75:7a:e3:96:0a:ea:fc:65:90:17:7d:b6:2f:f1:5f:
0e:86:1f:18:d8:e4:0d:a2:2f:e5:2a:3b:6f:65:60:7a:29:c2:
f1:8b:cf:99:a3:eb:c2:4e:09:a3:fb:72:bc:d5:62:a6:be:f5:
fc:95:be:59:72:07:a3:6e:fd:72:8d:24:b8:98:d6:ab:e4:20:
bb:33:c4:b5:65:95:2d:32:ef:68:b9:5f:27:f5:5c:02:07:58:
ab:40:2e:bc:7a:4d:78:b6:16:72:7a:23:eb:cb:20:94:0e:4f:
4a:ce:7e:84:bc:25:a9:e4:03:39:e1:5b:08:82:de:49:71:d9:
85:55:c3:42:b8:a4:bc:77:6c:74:de:ce:45:b5:4b:34:81:69:
5b:57:01:03:a8:3e:1c:0d:f8:de:07:79:22:28:50:03:9e:95:
6d:fe:e4:37:e4:a3:ee:50:96:ef:da:84:63:e6:9f:ac:ac:35:
b6:5b:c5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:23:21 2025 by rpki-client