Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/bETfHoBRGz7N_jpDuNUhbPqrRGk.roa
File: bETfHoBRGz7N_jpDuNUhbPqrRGk.roa (raw, json)
Hash identifier: llcWeOCVKVRJwhVTOpj0CxGKs+pdhKdSi8C6fQrtAh8=
Subject key identifier: 6C:44:DF:1E:80:51:1B:3E:CD:FE:3A:43:B8:D5:21:6C:FA:AB:44:69
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 15B8
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/bETfHoBRGz7N_jpDuNUhbPqrRGk.roa
Signing time: Sat 13 Sep 2025 03:06:44 +0000
ROA not before: Sat 13 Sep 2025 03:06:44 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 55990
IP address blocks: 113.47.0.0/19 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5560 (0x15b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Sep 13 03:06:44 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=6C44DF1E80511B3ECDFE3A43B8D5216CFAAB4469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bb:f4:da:86:a1:32:3b:c8:cb:d2:82:90:bb:
a1:b2:bc:2a:d7:af:44:d8:dd:24:8f:12:9b:c8:3e:
72:2e:c1:33:ec:68:a4:6b:9c:b5:9d:a0:da:69:d1:
a7:a2:d5:b7:4e:6a:76:87:97:9f:f7:47:b1:f7:28:
d3:f6:05:a0:ad:39:73:4f:2f:7f:bf:56:a4:1b:10:
b5:b0:71:1a:84:e0:b5:78:a8:d6:b3:05:5b:07:36:
11:a7:24:2f:38:ee:9f:ed:6e:fb:27:35:db:78:ba:
a5:38:01:a8:04:f2:be:10:4f:81:a9:74:7b:63:cc:
6e:91:7f:fd:c0:a3:4c:c5:7e:70:20:cf:bb:8e:d6:
d6:26:8b:45:f6:fc:7b:20:51:12:85:21:fb:2a:e0:
1f:7b:24:16:8c:66:67:14:1d:1c:ea:92:93:f5:4e:
a6:b6:39:77:55:42:8f:fd:42:40:9d:f4:80:e2:04:
e9:ea:6b:8f:7e:8d:59:ba:6d:ec:dc:f7:81:59:8e:
2f:c8:b1:38:d7:28:bc:fe:4f:92:ca:ed:b0:05:c7:
90:e3:23:a5:1f:ae:07:e7:02:3f:13:89:c2:7d:53:
fa:12:2d:4a:26:80:4c:4f:1e:be:33:5e:80:eb:27:
5e:59:10:f5:f2:32:5e:37:a8:9c:d9:80:69:6a:f2:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:44:DF:1E:80:51:1B:3E:CD:FE:3A:43:B8:D5:21:6C:FA:AB:44:69
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/bETfHoBRGz7N_jpDuNUhbPqrRGk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.47.0.0/19
Signature Algorithm: sha256WithRSAEncryption
02:83:d6:b3:14:5e:fd:29:5a:2d:3c:8f:bd:cc:ea:82:15:40:
e9:a2:e6:c9:60:6e:f2:5d:83:2a:21:94:01:6f:c4:2c:22:2d:
6c:f1:f2:5b:62:1d:6e:79:1b:23:3e:84:01:83:70:85:60:c9:
02:f6:6a:2b:bd:0d:f0:70:f8:c2:6c:2f:fa:2f:34:60:9b:86:
d2:bb:b3:95:7b:33:1c:88:99:31:c3:a3:8b:eb:bd:0c:02:84:
4a:1d:4e:8f:be:76:8d:f4:90:64:bf:09:22:cd:e3:b2:a9:53:
c9:70:38:c6:8e:35:ec:07:a3:d2:4c:ae:0c:d9:29:22:78:8a:
c5:df:20:1d:e2:f1:86:17:19:de:f9:9d:fd:9f:5a:8d:82:6b:
80:20:28:65:e7:ca:e7:b4:30:af:c0:20:d1:74:52:da:18:23:
91:50:47:fd:b1:ae:2c:85:31:85:e4:19:0d:f2:b1:f6:24:01:
9e:cd:7c:1f:09:51:2d:79:c0:c5:95:e3:bd:f9:df:86:65:d2:
ac:54:c4:c4:0a:8e:9f:fa:76:65:a0:0a:de:25:7a:b2:77:dc:
f9:69:b1:71:79:21:fe:a3:21:49:3d:60:7a:d0:25:ee:bd:3a:
20:b7:94:d7:0b:64:66:3b:6e:e6:43:ac:b6:33:6b:ef:7e:f8:
05:96:68:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:13:07 2025 by rpki-client