Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/1ySI3jBnajWatU70tsq1f6s6Eng.roa
File: 1ySI3jBnajWatU70tsq1f6s6Eng.roa (raw, json)
Hash identifier: 6QckF70I3VSEr81dkehqMtOEyhEC85qv3c4lTdJnr1Y=
Subject key identifier: D7:24:88:DE:30:67:6A:35:9A:B5:4E:F4:B6:CA:B5:7F:AB:3A:12:78
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 21D6
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/1ySI3jBnajWatU70tsq1f6s6Eng.roa
Signing time: Sat 13 Sep 2025 03:09:02 +0000
ROA not before: Sat 13 Sep 2025 03:09:02 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4811
IP address blocks: 180.184.144.0/21 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8662 (0x21d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Sep 13 03:09:02 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=D72488DE30676A359AB54EF4B6CAB57FAB3A1278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:2b:f8:18:29:f3:00:84:40:5a:7b:60:71:
96:bf:eb:16:83:20:f3:23:51:1a:9b:69:76:37:12:
29:97:7b:9d:5e:c3:58:9d:d7:98:0b:6d:5a:be:52:
04:e4:d6:1b:e7:11:94:d6:04:82:d5:15:17:ca:6d:
32:e2:78:08:f0:0d:42:7b:a1:4e:26:1c:9f:81:f8:
59:2c:1e:ef:a8:0e:e4:76:ca:bf:67:21:6a:85:8a:
9d:34:ad:8a:f0:66:1e:c2:92:fa:c4:1b:d2:81:08:
77:16:7d:4f:0f:97:39:d9:59:56:e0:76:a6:26:6f:
f1:aa:64:55:6b:6d:c2:ab:3b:fa:f2:c8:2b:77:d1:
92:f7:62:fb:d0:a1:d8:ec:04:ca:6a:a3:fc:7b:4d:
0f:ee:84:47:f1:9f:2d:f6:ea:40:59:ea:fb:64:f9:
7d:54:cc:0c:2f:87:e8:b0:dc:00:41:31:0e:6d:e8:
60:95:4e:4f:e2:53:3d:b5:fa:91:bb:7d:a0:f1:51:
44:8b:21:c6:eb:3d:f4:a3:c4:77:02:c7:e2:ed:0e:
69:ad:85:f8:6f:40:73:a0:03:ba:e7:6f:46:ee:f8:
b5:ec:a1:a9:d5:27:12:1b:3b:83:7e:24:ff:7a:c6:
4a:fd:4f:b9:14:d8:0a:bc:bd:65:99:12:9c:51:0d:
23:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:24:88:DE:30:67:6A:35:9A:B5:4E:F4:B6:CA:B5:7F:AB:3A:12:78
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/1ySI3jBnajWatU70tsq1f6s6Eng.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.144.0/21
Signature Algorithm: sha256WithRSAEncryption
62:a4:3d:22:76:0c:ca:84:5c:4d:47:42:8f:e2:34:d6:da:42:
97:68:42:e2:e0:97:51:17:f6:9d:96:e7:89:af:34:f3:1d:e4:
35:04:40:82:ef:ae:e6:98:6c:22:84:27:02:ba:b9:13:33:61:
66:93:ae:3f:16:13:dd:e8:f5:75:6e:6c:bb:58:fe:27:d0:57:
18:5a:68:af:d2:2b:29:fd:b2:98:39:6d:7e:85:57:05:cf:a0:
2e:16:4a:11:e7:eb:c2:47:25:cb:d0:23:03:1e:43:b3:01:cd:
57:e8:cc:c2:28:8c:8c:ee:66:5e:7b:94:2d:4e:92:ff:5c:83:
b9:ae:88:df:8e:1b:1a:ab:b1:bf:10:36:71:46:a1:ef:05:95:
a9:72:15:33:b1:63:1d:c1:84:86:a8:87:a3:39:67:34:8d:87:
51:b7:fe:00:e0:33:22:f2:b0:23:b2:2c:01:d9:e9:88:d7:8b:
c6:1b:46:c4:d1:18:c3:72:17:f6:fe:3b:5b:52:85:70:87:dd:
2b:37:f4:11:67:69:76:5d:4b:61:e9:ad:de:77:d7:e8:04:e4:
63:01:57:a0:74:6a:84:b3:2f:a5:92:c7:a8:c7:55:e0:61:3c:
98:1b:ff:d7:0d:0a:6a:79:77:c6:af:e6:8d:fa:cc:30:96:7a:
66:60:f8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 09:34:00 2025 by rpki-client