Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/vVR3IlQeeu2c7CmzlfefqhLOHtE.roa
File: vVR3IlQeeu2c7CmzlfefqhLOHtE.roa (raw, json)
Hash identifier: kaaoAT5vhU9u9lGqGojABvuvZCzpJaQ9ynxiXdhdexg=
Subject key identifier: BD:54:77:22:54:1E:7A:ED:9C:EC:29:B3:95:F7:9F:AA:12:CE:1E:D1
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 15A2
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/vVR3IlQeeu2c7CmzlfefqhLOHtE.roa
Signing time: Sat 13 Sep 2025 03:06:39 +0000
ROA not before: Sat 13 Sep 2025 03:06:39 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 55990
IP address blocks: 113.47.242.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5538 (0x15a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Sep 13 03:06:39 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=BD547722541E7AED9CEC29B395F79FAA12CE1ED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:0f:b5:26:91:61:d6:9b:1e:8a:06:c0:b4:
fc:78:9c:b7:9d:c4:89:d3:7b:4e:33:d9:65:f5:64:
51:8b:86:62:21:a8:9c:4a:c8:b1:4d:c8:27:c0:b0:
d7:3c:51:b6:20:80:2d:19:fa:fc:6a:66:a2:13:e2:
74:a7:e4:e9:0a:c1:9e:31:18:40:2a:6f:0e:d5:a6:
78:46:cc:9e:0a:5f:9d:3f:55:f1:13:6d:f8:79:d1:
e8:03:0f:c1:72:15:ff:2b:ab:dc:28:28:ec:d4:c4:
b2:ba:31:a6:cc:bc:29:ac:db:03:c2:31:31:e3:06:
d8:5b:6b:c7:47:d5:bf:fa:5b:47:b7:8c:7a:0c:ba:
38:e8:9a:a9:28:f7:7b:90:be:61:48:ad:8d:ce:68:
76:33:92:43:db:66:20:d7:69:58:f1:06:37:47:a5:
cc:70:93:3f:97:f1:7d:96:11:6e:72:fc:df:88:d8:
b8:a3:e7:5e:d9:20:46:d8:b6:23:df:f2:80:3a:e1:
fc:02:f5:b9:74:4e:a3:94:8d:bd:6d:69:cb:17:f0:
6a:79:27:6d:ce:7b:9b:ce:6f:60:44:a3:1f:7b:35:
7f:67:d2:22:cf:6e:d8:02:46:19:83:6e:b0:34:77:
27:46:b7:ff:92:45:f2:c3:b5:c0:89:45:1a:b7:ed:
07:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:54:77:22:54:1E:7A:ED:9C:EC:29:B3:95:F7:9F:AA:12:CE:1E:D1
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/vVR3IlQeeu2c7CmzlfefqhLOHtE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.47.242.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:69:d0:64:90:97:5b:bb:f0:54:29:d3:42:2e:d9:e6:ce:fe:
27:2c:10:d5:2c:8b:7f:5a:3a:1d:e5:62:46:65:a1:b7:98:59:
7f:f5:72:35:1f:1d:a1:fc:f2:b9:e8:3e:25:4f:86:0c:44:ce:
d5:b1:f3:96:63:c4:70:bb:a2:82:d2:f2:db:87:3a:1b:ea:77:
71:ff:22:6a:5e:6f:b6:1d:8c:57:0d:56:ae:df:99:9d:bb:48:
a4:18:b8:dd:3a:f5:40:d0:ea:c0:bc:06:fd:b0:bc:b1:a7:27:
52:bb:22:6a:96:d4:1a:88:3c:d4:15:a1:19:20:b7:5f:98:c8:
f5:e9:23:84:b6:53:27:5b:6d:3b:8e:b7:12:63:08:bb:b0:9b:
a5:38:07:a8:c6:d5:a7:2f:00:21:af:5a:9f:01:c9:6d:6f:4b:
72:3c:26:93:fb:08:09:93:9b:b5:f5:c8:fc:17:77:b1:18:34:
66:a0:c4:7f:c0:08:7a:84:3d:a0:44:3e:25:9f:31:22:cb:76:
1c:7e:80:6f:50:52:64:d0:d0:dd:c9:fa:0d:df:61:0d:21:7e:
8f:53:a2:23:7d:16:9a:b5:59:bd:f6:a6:d8:74:ec:22:dc:03:
d5:fc:d7:0a:5d:ae:25:b1:8c:06:c8:7c:03:71:fd:41:47:c2:
f8:c1:c9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:12:11 2025 by rpki-client