Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/f4xz75YJ0CsbQdGDsqIHk7YiyN4.roa
File: f4xz75YJ0CsbQdGDsqIHk7YiyN4.roa (raw, json)
Hash identifier: IH6eh9ssqqy1jmKk6bmphAQ503e9w0A5X09zCc6p028=
Subject key identifier: 7F:8C:73:EF:96:09:D0:2B:1B:41:D1:83:B2:A2:07:93:B6:22:C8:DE
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 21D2
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/f4xz75YJ0CsbQdGDsqIHk7YiyN4.roa
Signing time: Sat 13 Sep 2025 03:09:01 +0000
ROA not before: Sat 13 Sep 2025 03:09:01 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4811
IP address blocks: 180.184.152.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8658 (0x21d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Sep 13 03:09:01 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=7F8C73EF9609D02B1B41D183B2A20793B622C8DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:2b:a2:18:ff:64:8a:0c:07:93:6f:92:f4:
76:82:df:9b:19:95:b3:36:43:db:78:56:ad:d6:b6:
00:ca:7f:f1:5c:1d:36:bd:e4:3c:b7:01:0e:47:12:
32:0e:53:93:d4:46:4e:b3:9f:0f:9f:ee:e0:28:29:
95:cd:89:5a:fc:0c:70:17:f2:aa:28:ec:ea:ac:01:
20:58:69:01:3e:4c:9a:a4:c4:86:fb:28:f1:d7:c9:
82:be:1d:1d:71:1c:e1:dd:81:a4:4b:c6:77:b9:07:
1c:0e:65:f6:1a:5d:0f:a1:35:68:31:88:d3:43:56:
d4:fd:95:35:45:15:23:4f:74:f9:11:56:cc:94:a7:
67:e5:8f:a3:03:88:42:8c:94:3a:5e:38:bb:28:fc:
d8:bf:8a:35:cc:b9:6e:ec:b3:d4:f1:ac:f2:d1:c6:
86:ae:39:ef:cd:84:a6:37:ea:94:50:de:2c:8f:a8:
91:06:b3:41:96:76:fa:4e:22:64:11:a5:49:de:cf:
27:cb:39:8e:8b:71:25:fa:1e:24:cb:83:26:1b:ac:
76:5e:d9:71:ee:e3:34:06:a0:c2:95:20:aa:98:db:
2a:0d:dc:a2:37:22:c3:02:d8:25:fa:de:0c:18:5f:
79:52:bc:69:ac:ab:0e:74:ba:d4:5a:36:c1:00:23:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8C:73:EF:96:09:D0:2B:1B:41:D1:83:B2:A2:07:93:B6:22:C8:DE
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/f4xz75YJ0CsbQdGDsqIHk7YiyN4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.152.0/22
Signature Algorithm: sha256WithRSAEncryption
28:40:f3:ab:07:24:33:dd:ec:9c:07:2f:7d:d4:f2:90:26:fb:
9e:46:48:ab:ba:be:c9:1e:06:d0:56:1a:78:79:96:ac:58:df:
cf:42:3e:2b:e4:88:3f:2f:55:8f:00:cf:2b:1f:79:93:8d:c5:
e5:ca:12:3d:3b:da:86:c9:66:97:b5:c2:a6:df:4a:2a:8d:3d:
ae:26:43:9b:4f:31:9e:22:a3:f0:53:4a:1c:13:17:a9:3e:4a:
74:c7:c1:30:74:41:ad:13:bb:ae:ad:4a:0e:ec:ae:f6:2b:55:
84:d5:c8:14:cb:28:ea:fc:25:79:12:90:93:fb:3f:1f:9f:0d:
9e:c1:74:94:78:57:81:31:07:9a:40:38:97:92:0d:89:d9:4b:
af:18:77:d6:ed:3b:7b:e1:91:a3:8b:93:5a:3d:70:98:a2:a3:
0c:d4:6c:02:6d:19:41:b7:3e:99:a2:1f:20:bf:fa:ac:2d:89:
03:7e:37:79:19:e9:4b:22:81:8b:16:2e:23:48:b4:7f:45:6a:
85:44:04:8c:97:58:77:d9:ef:85:0c:b0:45:7a:fe:fb:db:fb:
47:ee:ab:06:cd:02:51:12:11:57:97:34:f6:b2:2e:4b:c2:9b:
ae:64:3b:37:20:82:e5:cb:92:e5:a0:b3:05:c1:d7:d9:83:23:
21:72:43:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 09:30:47 2025 by rpki-client