Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/ZacAFC-vejIYocTUXbOxVXw5ibE.roa
File: ZacAFC-vejIYocTUXbOxVXw5ibE.roa (raw, json)
Hash identifier: fsh7dJ1/BvK82kfwRxQYMNDOmNbq3w6U80nX7K+hWzI=
Subject key identifier: 65:A7:00:14:2F:AF:7A:32:18:A1:C4:D4:5D:B3:B1:55:7C:39:89:B1
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 21E8
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/ZacAFC-vejIYocTUXbOxVXw5ibE.roa
Signing time: Sat 13 Sep 2025 03:09:06 +0000
ROA not before: Sat 13 Sep 2025 03:09:06 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 23724
IP address blocks: 180.184.56.0/21 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8680 (0x21e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Sep 13 03:09:06 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=65A700142FAF7A3218A1C4D45DB3B1557C3989B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7b:5d:d5:c1:96:57:ee:99:03:c5:e8:19:b5:
15:ea:03:19:a3:cd:b1:c7:7e:23:2b:7c:07:43:d4:
1a:4b:52:eb:cb:27:1c:b9:f7:58:54:d6:43:64:52:
5b:a1:5b:88:8f:e7:cf:31:aa:6d:13:21:43:72:9d:
92:81:a5:45:dd:02:f4:5e:1d:57:e0:1b:d4:35:ed:
54:82:fc:c6:c4:34:86:9a:7a:64:f7:97:fb:21:e8:
2e:58:9b:40:42:bb:37:8e:c9:51:1c:19:66:bc:04:
08:ba:ec:4d:f2:05:fd:fd:2e:7f:3d:bd:ae:f0:02:
d4:9e:7a:11:1b:fb:7a:9c:79:44:dc:6c:c1:3e:0b:
83:b0:94:57:29:61:5b:fd:b9:0b:19:ff:ed:fc:25:
90:af:f1:94:a6:3d:2a:12:53:db:f1:51:2a:e1:12:
01:68:a7:96:48:84:e1:e0:3c:dd:5c:77:56:63:27:
66:e2:be:04:27:14:58:75:f3:88:51:de:1a:3e:13:
b9:6f:e9:d6:b4:af:28:54:9c:5e:05:98:cb:e4:f1:
37:9b:7d:87:ca:48:eb:d8:10:b1:41:9b:a2:e8:6f:
33:2a:c2:2c:6c:19:35:0d:78:6f:37:09:83:61:4d:
3d:43:14:58:b5:3a:0d:8b:9b:a6:99:3e:b3:1e:d6:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A7:00:14:2F:AF:7A:32:18:A1:C4:D4:5D:B3:B1:55:7C:39:89:B1
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/ZacAFC-vejIYocTUXbOxVXw5ibE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.56.0/21
Signature Algorithm: sha256WithRSAEncryption
96:12:20:67:b5:13:46:5b:55:84:99:5b:4d:ae:67:36:11:f5:
89:07:74:b8:15:c8:26:59:7b:9a:f9:2e:5b:67:fd:96:e3:d6:
a9:3e:40:69:0b:6f:e6:78:c8:d9:a9:c3:d3:f7:3f:4b:14:96:
48:98:b1:f9:06:48:81:7c:86:71:1e:72:64:b0:1c:af:72:84:
b0:c8:5a:e9:eb:65:91:f7:a3:0a:22:b3:99:b8:0e:85:cf:a4:
d3:ec:b4:f7:41:2e:a3:02:72:4c:58:42:36:45:55:8c:f7:48:
91:be:fe:de:be:74:de:98:d1:05:67:d4:26:5b:37:37:8b:d8:
74:25:9d:c0:73:cc:dc:82:ec:20:40:bd:94:e1:36:93:15:69:
cc:72:f9:7b:83:e0:3e:2c:ab:85:5e:1b:3c:3c:a1:d1:31:87:
28:95:c6:3a:97:c1:0e:64:41:bd:a9:e6:46:d2:cd:2f:57:31:
df:79:9e:bd:88:c7:94:5e:18:38:b8:00:e8:dc:cf:a8:a8:cd:
57:ae:b9:90:b9:51:ff:64:8d:58:9a:80:56:e0:ca:c1:73:a6:
96:5b:a9:61:7f:91:c4:53:0f:39:9c:98:6a:48:1c:3b:43:91:
b7:1a:06:a1:11:83:b1:aa:ea:16:8c:3b:13:f6:cf:ec:84:15:
ae:46:38:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 09:18:19 2025 by rpki-client