Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/L8FIC0D50FTzJv7_QFKjRNqd8oM.roa
File: L8FIC0D50FTzJv7_QFKjRNqd8oM.roa (raw, json)
Hash identifier: XhPqa1fT2/P0W8hhq7rzeHTGziJSJK4gqUUg/f5hKWQ=
Subject key identifier: 2F:C1:48:0B:40:F9:D0:54:F3:26:FE:FF:40:52:A3:44:DA:9D:F2:83
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 21DF
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/L8FIC0D50FTzJv7_QFKjRNqd8oM.roa
Signing time: Sat 13 Sep 2025 03:09:04 +0000
ROA not before: Sat 13 Sep 2025 03:09:04 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4811
IP address blocks: 115.190.0.0/15 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8671 (0x21df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Sep 13 03:09:04 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=2FC1480B40F9D054F326FEFF4052A344DA9DF283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:d2:47:96:f7:25:5a:b9:2d:52:b4:e2:2e:
db:94:61:1a:05:45:bd:55:1a:64:05:fa:cd:61:56:
9a:de:35:55:f7:62:96:6f:22:09:fa:bd:e9:f7:bf:
d6:61:70:a0:c8:ed:90:be:23:75:89:16:99:4e:22:
ec:84:de:55:11:4e:bc:e7:89:bf:54:aa:5e:2a:9d:
fd:4c:ab:ae:1b:a8:b6:d8:ea:62:99:bf:3c:4c:03:
d0:21:5d:54:ad:7a:7e:90:db:3e:13:94:99:19:2e:
aa:e5:78:76:d1:80:fe:27:01:83:f4:74:39:5d:b4:
60:5c:a0:1e:4a:32:0c:3e:fc:38:79:ad:5b:d3:76:
a4:32:88:c5:8b:25:d1:c0:f3:4b:8c:75:56:17:6d:
d6:82:23:4d:66:9f:59:a0:61:11:0a:24:ee:39:b6:
b9:33:25:58:8b:d8:1b:be:c0:cb:a7:1e:a5:98:fd:
f6:f9:3b:51:89:08:39:82:2b:7d:c5:19:7f:af:21:
63:a8:bb:a9:0a:4c:0b:7a:ff:89:17:9d:65:61:c4:
b7:72:6e:4d:28:df:07:84:68:87:2c:d5:40:00:5a:
ae:02:3d:01:c0:1e:65:72:26:ba:a9:c1:be:2a:ec:
29:66:d2:28:14:0b:eb:a2:67:cb:f9:44:3c:d2:25:
23:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C1:48:0B:40:F9:D0:54:F3:26:FE:FF:40:52:A3:44:DA:9D:F2:83
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/L8FIC0D50FTzJv7_QFKjRNqd8oM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.190.0.0/15
Signature Algorithm: sha256WithRSAEncryption
06:27:3d:3b:51:00:9f:fd:fa:c6:d5:1d:1e:55:47:8c:ee:46:
2c:fa:b2:5e:2f:55:79:8f:32:44:e3:b4:2a:e5:05:6a:bc:73:
02:fd:33:40:c6:66:dd:31:3a:bf:83:03:44:83:70:ed:a7:fb:
a5:3c:d5:78:72:2f:2b:55:87:c4:52:42:2a:2c:94:35:4c:bc:
66:f9:45:e7:53:23:04:67:c5:d4:55:a5:4c:24:29:db:b1:c4:
57:d5:ae:f9:ac:92:36:1f:35:69:25:61:53:d7:98:f2:3c:3d:
4f:05:ea:9e:6b:5d:e4:71:62:83:b6:1b:3c:2f:d7:7c:8a:cb:
b4:69:8c:7b:2c:a3:3e:50:06:28:4d:2f:36:18:4a:19:87:0f:
9f:bc:91:dd:ec:00:ae:82:af:5a:a0:0a:db:0a:17:db:b1:c2:
e3:b9:f8:c0:0b:54:82:36:19:23:ef:d1:64:a1:99:c1:a6:da:
b2:a9:33:f9:cb:9f:10:f8:f1:ec:79:ff:3d:16:04:a1:12:6c:
1e:6f:ea:75:a9:ff:b1:54:f3:cd:1f:6e:c3:5f:00:5d:89:2a:
25:84:8d:65:5c:e6:d6:0c:b4:d3:24:e4:ee:7a:ad:2e:de:aa:
ec:9f:0c:0f:59:e5:ed:5b:79:d0:c5:e2:63:02:0f:8f:ef:4f:
5a:34:3f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 09:30:45 2025 by rpki-client