Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/IZ4YCHgcjpkkOwClRI4xgO5kW-8.roa
File: IZ4YCHgcjpkkOwClRI4xgO5kW-8.roa (raw, json)
Hash identifier: dHShnRgenGZw938sHM37JJd11wNzAwCG8LhiuALmcKc=
Subject key identifier: 21:9E:18:08:78:1C:8E:99:24:3B:00:A5:44:8E:31:80:EE:64:5B:EF
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 21EF
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/IZ4YCHgcjpkkOwClRI4xgO5kW-8.roa
Signing time: Sat 13 Sep 2025 03:09:08 +0000
ROA not before: Sat 13 Sep 2025 03:09:08 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4811
IP address blocks: 14.103.8.0/21 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8687 (0x21ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Sep 13 03:09:08 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=219E1808781C8E99243B00A5448E3180EE645BEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:8f:24:85:d8:91:93:db:e6:49:d4:58:b8:
58:d9:be:d9:6b:48:30:19:ff:f9:b6:b2:ab:0e:95:
82:2a:1c:af:3e:f5:a9:57:ec:b3:14:6f:05:80:8b:
aa:14:97:3a:f4:2b:e1:ba:d7:62:af:f4:6c:7e:69:
37:5c:11:bb:d0:a1:51:ad:f4:ce:10:d6:1b:ee:09:
60:f0:60:78:16:59:48:4c:47:64:6e:b2:35:4b:0a:
dc:e8:6b:9d:5e:a2:7b:d9:89:16:37:c8:b1:66:88:
87:fa:f1:f6:f3:0e:60:14:5b:29:ce:65:17:a5:4a:
c0:af:81:f4:78:05:1d:79:4b:02:83:07:97:c1:7f:
73:f3:c9:a2:a0:53:8b:2f:61:aa:62:1b:24:21:38:
ef:46:8e:e7:18:8c:07:c9:a6:d1:47:16:c3:f2:aa:
45:7a:15:89:e5:9a:bd:8c:f3:c5:ae:39:05:8f:0a:
72:4f:b6:77:14:29:c0:17:0f:fa:bc:f7:80:f1:5d:
0c:5c:aa:c7:79:d1:ae:2c:44:2f:3b:ee:d7:76:48:
8b:cc:aa:91:6a:f9:9d:ca:bc:0b:57:b1:b4:2c:87:
8a:02:88:89:7a:b9:4f:a6:a7:35:43:72:27:35:01:
a2:08:be:43:02:12:d2:b3:f1:e5:bb:f9:20:5b:b9:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9E:18:08:78:1C:8E:99:24:3B:00:A5:44:8E:31:80:EE:64:5B:EF
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/IZ4YCHgcjpkkOwClRI4xgO5kW-8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
14.103.8.0/21
Signature Algorithm: sha256WithRSAEncryption
c4:92:eb:fb:a8:dc:62:02:91:20:d0:01:58:f3:4a:f1:6d:83:
e6:75:61:5e:4d:42:72:fb:d2:8b:13:ed:a2:64:6a:db:d7:3c:
36:36:44:53:98:19:f0:f0:ab:bc:e5:e4:dc:e8:0f:c5:a0:a2:
85:fa:0d:a1:6f:0c:b6:ae:12:46:74:c3:13:9d:71:65:f2:e6:
bd:f1:00:5b:17:d5:f7:0d:7b:33:7a:64:5a:41:b3:64:d1:05:
e0:18:5c:0d:61:57:4a:5d:ab:92:cb:ca:b7:17:4b:30:55:cd:
f2:e5:e0:5b:f7:ad:03:03:01:ea:8f:9b:c7:2e:f3:31:52:de:
4a:76:96:f0:1f:0b:4f:fb:e8:da:ea:5f:43:31:48:8e:95:a9:
d7:92:82:31:c5:6e:ca:a5:0e:97:cd:df:00:2d:a0:f0:0f:4a:
9b:ee:a5:b5:ba:e4:45:60:7f:9c:ba:4a:24:8a:a7:54:86:e3:
6b:af:d3:35:c6:dc:65:fc:1f:0e:3a:a7:92:ae:fc:a9:75:f5:
ad:8e:9e:5f:22:0a:58:02:b6:3c:ec:54:48:3b:3e:b8:5e:24:
50:e2:73:4e:c3:12:81:9a:8f:71:14:35:6e:33:ac:9d:1b:27:
0b:d3:26:c4:6a:5d:27:5e:ef:ac:2c:4d:2a:ab:5c:92:02:8c:
e7:2f:79:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 09:34:00 2025 by rpki-client