Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3070/zZRym3sAEvXMrbGWy6aM-nia49Y.roa
File: zZRym3sAEvXMrbGWy6aM-nia49Y.roa (raw, json)
Hash identifier: 8wcckbKfbYd4haPADmGgIisC8XOKMSGdbXZl/xyBpIc=
Subject key identifier: CD:94:72:9B:7B:00:12:F5:CC:AD:B1:96:CB:A6:8C:FA:78:9A:E3:D6
Certificate issuer: /CN=C8662F2B48ACC077E95800E5AA92CE16D26E1DEA
Certificate serial: 04
Authority key identifier: C8:66:2F:2B:48:AC:C0:77:E9:58:00:E5:AA:92:CE:16:D2:6E:1D:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yGYvK0iswHfpWADlqpLOFtJuHeo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3070/zZRym3sAEvXMrbGWy6aM-nia49Y.roa
Signing time: Fri 11 Jul 2025 10:03:39 +0000
ROA not before: Fri 11 Jul 2025 10:03:39 +0000
ROA not after: Sat 11 Jul 2026 09:56:02 +0000
asID: 133033
IP address blocks: 103.248.152.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8662F2B48ACC077E95800E5AA92CE16D26E1DEA
Validity
Not Before: Jul 11 10:03:39 2025 GMT
Not After : Jul 11 09:56:02 2026 GMT
Subject: CN=CD94729B7B0012F5CCADB196CBA68CFA789AE3D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:56:e3:33:0b:01:86:74:98:c5:27:3a:d9:
00:38:d1:5a:f8:b2:ae:8d:f1:4c:c3:d4:b9:63:ad:
fb:40:21:7b:99:3c:2d:5e:12:85:6c:c1:ab:32:26:
6f:77:e5:c6:80:d9:10:48:e8:ae:9b:0f:38:c2:8a:
9f:d9:bb:71:d5:81:46:16:b7:52:ca:ce:0a:b2:6b:
d4:2c:52:63:8b:99:6a:a7:cb:d0:fd:c1:9d:ba:9c:
6a:44:2d:11:46:e6:89:70:a8:40:cd:6d:23:ea:b0:
a0:fb:52:01:1e:70:9a:82:9e:24:e8:50:91:10:63:
d4:fe:ec:ea:db:3c:86:3d:91:1b:89:f9:e4:6e:20:
83:a4:d3:e9:76:7d:70:7e:65:f8:2b:28:7e:23:ac:
7a:c6:58:69:97:c2:6a:42:50:16:0c:3d:6f:92:7b:
65:5b:ef:cd:c1:78:1c:0d:4c:14:a5:f6:2a:33:81:
66:6d:a7:a3:a3:e4:64:3e:6f:15:54:c8:20:a5:7c:
3f:5e:7d:9d:ff:1a:68:3a:32:28:23:2a:2d:a8:ee:
b9:82:84:7b:e9:2b:b6:68:d9:09:81:cd:ea:10:22:
78:59:d5:09:28:8e:65:e6:77:52:4a:07:d1:4c:8f:
b4:8c:b8:02:fc:21:78:de:b8:56:5b:53:2b:f8:91:
92:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:94:72:9B:7B:00:12:F5:CC:AD:B1:96:CB:A6:8C:FA:78:9A:E3:D6
X509v3 Authority Key Identifier:
keyid:C8:66:2F:2B:48:AC:C0:77:E9:58:00:E5:AA:92:CE:16:D2:6E:1D:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3070/yGYvK0iswHfpWADlqpLOFtJuHeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yGYvK0iswHfpWADlqpLOFtJuHeo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3070/zZRym3sAEvXMrbGWy6aM-nia49Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.248.152.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:54:20:61:c8:69:2e:9c:38:34:2d:34:d1:ac:0a:cb:4a:12:
4b:b1:0e:0d:19:67:d1:9a:fb:5c:4b:fc:c0:e3:e8:04:7f:f6:
f5:99:43:09:a0:4a:90:66:61:a7:7a:ed:57:9f:57:9c:90:4a:
91:5d:21:2e:97:7f:b0:67:4a:10:cb:c1:f7:44:7d:ca:22:02:
29:35:84:bf:41:d5:e3:04:6d:80:3f:33:53:f0:fa:c6:0f:98:
03:00:8b:0d:e0:f1:19:d6:02:a0:40:a6:86:f2:a5:17:f8:5d:
7a:c5:50:e8:59:5a:ba:7d:41:61:ee:d4:5f:dd:c1:2f:a3:82:
00:84:99:1a:96:af:ac:1a:9d:55:7d:3f:7a:0d:78:70:fa:45:
53:66:ec:65:04:ee:94:a0:92:69:c9:d9:16:66:1a:85:80:24:
ea:06:ab:41:ee:6f:5f:0e:3b:8f:0b:5f:f6:b4:23:57:ae:b6:
ee:4d:00:63:61:6d:3b:18:a5:9e:14:9a:f1:34:7f:6d:de:e0:
32:ea:b5:f0:a5:70:e5:ad:8a:da:f2:e8:0a:2a:ec:74:d6:75:
b7:7d:c0:d9:c0:88:40:96:d3:cc:73:76:b0:6a:a3:34:42:7b:
44:bd:f5:59:c4:44:78:7b:1d:ab:0e:18:fe:39:58:78:b5:5d:
06:44:c1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:54:52 2025 by rpki-client