Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/Nk2Q4rOKtjfV0JH-uEShV4JLCVc.roa
File: Nk2Q4rOKtjfV0JH-uEShV4JLCVc.roa (raw, json)
Hash identifier: wRIoziJHgWcSiSM0A667hiliuwoNgonAxTXXcg7B0gQ=
Subject key identifier: 36:4D:90:E2:B3:8A:B6:37:D5:D0:91:FE:B8:44:A1:57:82:4B:09:57
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 15AC
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Nk2Q4rOKtjfV0JH-uEShV4JLCVc.roa
Signing time: Sat 13 Sep 2025 03:06:41 +0000
ROA not before: Sat 13 Sep 2025 03:06:41 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 55990
IP address blocks: 113.45.127.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5548 (0x15ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Sep 13 03:06:41 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=364D90E2B38AB637D5D091FEB844A157824B0957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:39:99:58:b6:90:dd:01:f1:4c:f5:53:5d:
a0:ac:e2:91:86:a1:f1:a9:32:00:41:db:b4:ee:e9:
1d:c5:a0:f8:6d:03:50:9d:57:fe:56:83:26:45:ed:
2c:51:3b:e3:7b:8b:74:05:3b:1b:eb:13:9a:a0:bc:
f1:17:30:a7:3e:58:53:96:c9:ca:48:65:f7:d4:ca:
93:c3:ba:71:c3:3c:8c:dc:ad:aa:3a:97:ed:9c:b3:
df:15:85:7c:df:f6:e4:1e:66:ce:7a:ca:e1:ce:20:
16:07:44:1f:10:13:64:84:27:25:34:f6:5c:4b:7c:
4d:20:b7:57:75:a2:16:3c:66:c1:5e:3a:ef:c5:1b:
3e:fc:c1:2f:59:b6:0d:49:76:3b:fc:db:7a:80:cc:
c3:ac:c9:e6:4f:06:f9:ad:04:c9:e0:e6:bb:2d:07:
34:e2:66:30:30:3c:92:1c:f7:d4:16:9a:b8:cb:f9:
c3:6e:57:c5:04:da:37:9b:cf:00:c7:fb:ad:5b:91:
b9:b4:47:97:b5:f1:32:cd:70:8f:a0:0a:78:e6:24:
3d:67:a0:81:fd:02:3e:d9:f9:c9:27:2f:37:fe:e1:
41:af:de:78:ed:83:41:68:80:cb:c6:70:e2:58:56:
d0:6b:6e:ae:e3:0e:a6:b8:de:c1:f5:65:d5:a2:0a:
07:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4D:90:E2:B3:8A:B6:37:D5:D0:91:FE:B8:44:A1:57:82:4B:09:57
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Nk2Q4rOKtjfV0JH-uEShV4JLCVc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.45.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:99:e0:a3:07:b8:a3:39:4e:ad:e6:18:de:b3:5c:03:b1:bf:
ab:f5:b2:f6:ae:86:f9:5a:92:6b:d2:25:67:d1:c1:74:24:67:
9d:9d:de:53:68:d2:29:00:ce:6d:89:fe:79:51:20:3d:d9:b5:
3b:31:bd:75:0f:5d:83:48:a1:ab:1b:cb:84:fc:56:fb:2b:0b:
c6:26:09:47:57:55:96:ef:16:ba:8d:19:6c:bb:20:85:63:e6:
85:b9:88:0b:e3:f5:7d:2b:23:5f:ef:94:2f:69:84:0a:bc:ed:
cb:65:11:42:a8:58:bb:c3:4e:ae:9b:d8:80:13:63:f4:51:60:
20:9c:9c:07:dc:3c:6e:f1:1b:65:6b:2a:b2:fd:ab:bc:0d:33:
30:e2:55:af:d1:79:fd:2c:44:bd:48:e1:42:0a:9f:07:d6:0a:
28:2e:5b:e3:fd:7f:1b:2c:2a:8b:a3:48:f3:f6:1e:73:f2:1b:
76:91:c1:f6:c8:0b:d1:b4:55:93:97:08:c5:00:8b:2e:0d:35:
2d:58:a6:d0:7e:ee:d2:00:de:d0:ac:9f:45:da:c0:f6:39:69:
f7:92:66:7d:7b:ae:82:60:e4:17:be:81:e1:90:fa:ab:b8:6a:
7b:cb:26:5e:03:a1:d3:68:18:5b:a9:6f:b5:7f:3c:dd:1d:69:
e9:d8:c5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:13:05 2025 by rpki-client