Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/ufKRIfT0jHvFFrGG74xV7dyupQg.roa
File: ufKRIfT0jHvFFrGG74xV7dyupQg.roa (raw, json)
Hash identifier: JTt1tjuu+NEVMQEjzah5F0Bun+ZLmNhE+dVmOmw05M0=
Subject key identifier: B9:F2:91:21:F4:F4:8C:7B:C5:16:B1:86:EF:8C:55:ED:DC:AE:A5:08
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 1342
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/ufKRIfT0jHvFFrGG74xV7dyupQg.roa
Signing time: Thu 22 May 2025 09:04:43 +0000
ROA not before: Thu 22 May 2025 09:04:43 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 55990
IP address blocks: 115.175.128.0/19 maxlen: 19
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4930 (0x1342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: May 22 09:04:43 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B9F29121F4F48C7BC516B186EF8C55EDDCAEA508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:b1:4b:4a:ec:61:ee:cf:b9:88:bf:01:cb:
c9:c3:90:1d:37:94:95:51:f9:26:b7:48:ad:58:22:
1b:d4:9f:cd:e6:2e:89:4d:bf:59:92:7c:63:8e:ce:
f6:1b:79:24:cb:20:4c:2a:4d:12:37:0c:9c:52:6e:
8c:27:6c:4e:0c:9b:ca:79:b5:7d:11:b9:67:15:76:
34:1f:88:c2:17:65:e4:69:2d:33:14:8c:21:6b:9b:
28:6f:bc:e5:a0:92:1b:d3:93:58:ab:78:c6:b1:8f:
e9:4e:79:f0:33:bc:c9:68:db:96:89:a4:20:a9:98:
6e:41:0a:e7:f6:bf:d9:0c:cd:2c:eb:7b:77:f0:2c:
cb:01:49:cd:9f:bd:67:ce:34:42:56:1c:7b:bc:e1:
d1:ac:47:20:18:89:b2:8a:b6:23:56:94:31:8f:a5:
c1:02:4b:ff:18:3a:58:7a:f6:0b:7c:c3:f3:6c:40:
3e:cc:31:77:f7:e3:f3:c0:b0:06:be:90:42:8d:62:
34:6b:94:29:9f:50:fd:e9:18:92:e6:71:1e:73:0c:
ab:c1:17:e3:9d:9d:58:12:14:e3:cc:07:c9:6d:24:
b2:4e:6a:d3:52:01:c8:63:d1:5f:dc:48:fb:f6:61:
48:96:54:b8:ed:cf:bc:13:16:d8:03:d9:d8:67:0d:
fe:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F2:91:21:F4:F4:8C:7B:C5:16:B1:86:EF:8C:55:ED:DC:AE:A5:08
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/ufKRIfT0jHvFFrGG74xV7dyupQg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.175.128.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:e6:8d:fc:87:10:9d:da:65:1c:dc:48:41:20:5a:9d:73:b5:
43:df:a7:29:ad:cf:95:ac:1f:b7:ff:e9:3d:db:cb:2d:81:33:
a6:9e:11:f3:0b:49:1f:5f:f3:38:2c:7f:b7:35:9c:9e:45:9f:
f5:ad:0a:63:66:7f:45:a5:c5:5c:33:04:a9:e8:89:82:76:67:
5b:02:7b:c5:43:86:bb:95:af:0b:9f:a1:9a:2f:91:4c:90:bd:
93:ea:2b:71:04:61:b1:24:1c:ca:8a:5f:76:14:50:e1:df:c0:
01:e2:40:68:0f:ba:d3:af:00:45:87:63:e0:49:7c:06:45:cd:
27:a2:4c:c5:7a:c0:50:3a:ca:6e:76:ac:3d:0b:ff:06:f5:c8:
58:86:e0:c5:e8:f1:be:03:69:4e:d3:ed:93:ff:d3:79:ae:13:
40:42:ca:e8:71:e3:ff:30:b8:26:23:bc:94:ca:33:99:82:06:
a5:5b:13:fa:73:6a:b5:c0:62:70:62:53:73:3a:7c:00:6d:0c:
34:5d:13:b2:8c:e7:73:ff:ee:b3:fa:05:85:04:41:9c:ac:74:
6a:9d:10:dd:e8:dd:ee:f3:c3:74:9d:7a:73:de:c8:35:0c:46:
f8:df:4d:48:0c:43:50:46:db:f3:94:a8:ca:80:ef:17:f9:4a:
94:c2:9e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:23:13 2025 by rpki-client