Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/K97GW7Z3yYfpS2EbhPkPpvsCypY.roa
File: K97GW7Z3yYfpS2EbhPkPpvsCypY.roa (raw, json)
Hash identifier: tdL6fBNASuSmwqKhMeVdk2w33yRLpmC7kCsz7wN9gu4=
Subject key identifier: 2B:DE:C6:5B:B6:77:C9:87:E9:4B:61:1B:84:F9:0F:A6:FB:02:CA:96
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 15B2
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/K97GW7Z3yYfpS2EbhPkPpvsCypY.roa
Signing time: Sat 13 Sep 2025 03:06:42 +0000
ROA not before: Sat 13 Sep 2025 03:06:42 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 55990
IP address blocks: 113.45.98.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5554 (0x15b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Sep 13 03:06:42 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=2BDEC65BB677C987E94B611B84F90FA6FB02CA96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:5b:ce:c5:b1:b7:b6:64:2e:10:68:08:2b:
f1:d1:8c:2c:a6:72:50:6b:9b:aa:6c:5b:55:b2:d7:
b2:b7:17:b7:f1:c6:f6:96:6a:b4:f1:5b:8a:1b:41:
c4:b5:13:01:8b:c3:62:19:3e:22:b2:0d:96:88:f2:
45:9a:b4:1d:56:71:5b:c0:f7:6b:7b:42:1c:c3:8e:
bf:6b:3a:f4:d9:c9:38:47:b7:59:18:85:70:8b:e5:
d7:13:1b:f9:4c:1c:e9:95:8b:f6:0a:52:61:a3:a8:
e8:90:29:2b:5c:33:18:5b:72:59:21:a8:5a:50:7f:
67:c7:b4:96:30:e5:ca:7f:7d:43:57:29:fc:8b:62:
f9:e0:e0:bc:20:84:bf:7d:83:42:eb:95:ac:ae:c0:
46:f1:73:dc:3c:f0:5b:dd:80:a6:1c:d5:51:c6:3a:
43:b6:97:05:0d:02:a3:b2:e2:26:c3:82:f3:7a:ae:
18:83:7d:25:b8:df:35:a7:52:d2:f3:c4:45:41:b5:
9e:8a:0b:c3:54:d1:43:e2:42:4b:4f:55:f9:ec:27:
6f:f1:5f:27:c9:52:c8:d6:59:0c:f5:70:e5:bf:a7:
30:40:4e:a5:80:45:38:73:52:01:e0:65:6e:43:a8:
3c:a1:30:7b:d2:93:f8:e5:91:31:9f:65:15:bf:80:
e3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DE:C6:5B:B6:77:C9:87:E9:4B:61:1B:84:F9:0F:A6:FB:02:CA:96
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/K97GW7Z3yYfpS2EbhPkPpvsCypY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.45.98.0/23
Signature Algorithm: sha256WithRSAEncryption
60:b0:85:10:48:6e:ee:e3:eb:29:39:ee:c2:97:db:89:df:cb:
e3:be:ec:e8:5b:2d:b1:63:9a:5f:55:71:a4:1f:80:94:96:2c:
c9:7d:d8:7c:1e:5f:ec:78:bc:ad:b4:ab:ab:53:19:35:da:d8:
17:1e:b9:ab:74:13:40:7d:4d:9b:67:5b:52:31:0b:7e:49:16:
55:81:f5:c2:14:5a:79:17:a9:49:3f:1b:4d:90:63:e7:f8:6d:
87:7e:13:1d:6e:f9:b0:a0:43:c3:ff:22:53:33:3e:1c:a1:5a:
83:5f:f2:b2:0d:8f:c6:86:f7:c0:46:87:29:58:2c:f4:39:59:
79:b6:d2:78:6a:be:e7:d2:0c:a6:ea:0f:41:11:6f:b2:8b:96:
3a:81:40:5a:8d:38:96:13:da:9b:ec:55:e4:89:da:f9:e8:90:
8a:bc:b9:7a:d9:d3:a7:ba:a1:44:01:1c:58:18:ca:53:71:00:
af:57:f3:75:24:a2:c8:68:95:6a:53:06:bf:f0:d9:d8:69:13:
a7:76:8c:c3:50:af:17:3c:45:30:2b:a9:e7:b4:4a:15:be:ab:
63:93:d6:34:9a:c1:ac:ea:a2:42:5b:bd:3d:8d:20:c0:57:b5:
77:b2:5e:08:cb:92:b6:7a:6d:e6:f3:cc:0a:56:6c:90:19:03:
75:5a:22:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:12:19 2025 by rpki-client