Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/jlnK3OiC8FEcR6J_9EWl8zMYsWs.roa
File: jlnK3OiC8FEcR6J_9EWl8zMYsWs.roa (raw, json)
Hash identifier: rBAM+PNNQaehki8g6sOU8uepcEi2evR9HuQ6XCxC4L4=
Subject key identifier: 8E:59:CA:DC:E8:82:F0:51:1C:47:A2:7F:F4:45:A5:F3:33:18:B1:6B
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 160B
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/jlnK3OiC8FEcR6J_9EWl8zMYsWs.roa
Signing time: Mon 22 Sep 2025 09:57:15 +0000
ROA not before: Mon 22 Sep 2025 09:57:15 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 55990
IP address blocks: 101.245.128.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5643 (0x160b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Sep 22 09:57:15 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=8E59CADCE882F0511C47A27FF445A5F33318B16B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9d:1d:48:89:98:8e:f9:ac:ca:6e:fd:5a:51:
6b:a7:e5:52:b0:a1:10:af:07:93:23:3d:54:4a:eb:
c6:d5:b7:4d:dd:9e:61:cf:7e:34:34:f7:38:49:c0:
92:fd:34:b9:f1:45:48:2f:59:bf:db:4b:b9:12:e0:
ba:57:8b:4c:5b:32:c6:0f:e7:a4:9f:52:e9:58:1d:
93:a5:c8:63:e4:13:8d:d6:13:f1:7f:f0:7f:87:16:
12:b8:4c:dd:3f:ce:fe:33:71:3c:1b:17:16:0c:40:
ab:06:aa:9f:aa:9e:0e:ad:f1:dc:cc:73:bc:52:a1:
25:ee:0f:de:8f:98:c3:ce:66:1b:fc:cb:6a:df:0e:
8d:44:55:00:70:6a:91:53:75:b7:e6:57:b7:17:88:
6c:e9:f8:30:4c:34:b4:2a:55:50:5d:1b:a9:eb:07:
5f:ea:1c:3c:67:af:55:c6:3c:72:23:ac:0c:f8:88:
06:0b:4a:9f:81:e4:d0:2f:99:cb:b0:1f:d2:dd:13:
cf:7f:d3:0d:b6:2d:ac:d2:eb:6f:9b:80:eb:2f:33:
4c:3e:44:5b:8f:10:a6:5d:a4:61:30:2a:e7:4c:55:
d1:61:c5:da:c1:7d:f5:0f:92:1a:f0:02:9f:d9:f4:
ef:e4:fc:bf:3f:d9:0f:fc:ac:11:33:e7:ee:9b:84:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:59:CA:DC:E8:82:F0:51:1C:47:A2:7F:F4:45:A5:F3:33:18:B1:6B
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/jlnK3OiC8FEcR6J_9EWl8zMYsWs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.245.128.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:25:be:51:9d:fd:cd:62:ca:51:bc:80:a0:04:6d:66:f4:75:
4f:bd:15:f6:75:49:27:df:f3:57:8e:c1:ad:66:01:74:44:45:
7f:73:de:4a:1d:67:4b:dc:42:7e:05:ac:6e:c0:66:5b:1d:cf:
d2:f1:61:aa:4b:fb:f6:bb:66:d4:04:c9:23:1c:f4:ca:4d:8e:
ad:66:58:fa:7e:c7:3b:85:d5:bf:09:71:30:27:02:d6:e4:06:
78:34:b4:a1:ed:c0:a9:54:d9:aa:e3:2d:d1:8d:91:ad:5e:c0:
9e:9d:68:6c:39:0f:1a:d4:ee:27:69:93:03:87:90:e4:c2:3e:
d1:c4:d5:21:25:91:c9:71:3f:3a:e0:03:33:82:21:10:b5:0a:
1f:46:28:29:99:ef:3b:db:7f:c8:f7:c9:94:27:6d:2f:d0:c9:
3f:45:73:63:85:09:aa:28:6b:fc:a9:5d:05:80:96:b7:2c:b9:
31:6c:86:7a:4f:d1:8e:e2:d6:56:21:38:73:f3:5a:2b:48:ca:
be:f7:a6:4d:7f:c0:2a:09:82:4d:a3:48:5c:47:d1:31:0d:d0:
2a:68:e6:12:33:6e:ab:81:20:70:5c:ad:9f:71:c3:cf:4f:e2:
92:a4:97:8b:ba:58:9f:f3:71:de:2f:ae:50:af:5e:b0:d0:fa:
ae:6c:9e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:13:08 2025 by rpki-client