Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/o_xepNmijsdAK38MCi72lykQTLw.roa
File: o_xepNmijsdAK38MCi72lykQTLw.roa (raw, json)
Hash identifier: jJMnJ2JsZLtj1cBY+MTQrOlLOD/DIWgAuulArXltvJY=
Subject key identifier: A3:FC:5E:A4:D9:A2:8E:C7:40:2B:7F:0C:0A:2E:F6:97:29:10:4C:BC
Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Certificate serial: 30
Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/o_xepNmijsdAK38MCi72lykQTLw.roa
Signing time: Sat 17 May 2025 03:40:37 +0000
ROA not before: Sat 17 May 2025 03:40:37 +0000
ROA not after: Sun 10 May 2026 04:51:55 +0000
asID: 151270
IP address blocks: 110.40.20.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Validity
Not Before: May 17 03:40:37 2025 GMT
Not After : May 10 04:51:55 2026 GMT
Subject: CN=A3FC5EA4D9A28EC7402B7F0C0A2EF69729104CBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:30:b2:67:64:f5:69:9f:12:19:b0:0b:1f:2b:
df:96:1e:f9:51:f5:fd:c1:d6:d4:90:ab:1b:26:24:
fd:52:78:ff:a6:a3:87:05:fa:74:8f:bb:a2:22:5b:
e7:be:21:8c:b8:ab:f9:60:96:53:11:55:0c:48:c8:
98:80:77:65:62:f4:71:ae:fa:73:8f:0a:28:1e:ab:
82:52:ad:a0:1f:3d:32:47:40:16:9b:c4:d7:41:a0:
6b:79:b6:f0:41:c9:08:f6:07:be:9c:df:ab:02:4c:
c5:7b:b3:6a:44:9c:d8:2c:90:75:fc:ed:13:ab:c4:
44:6a:46:53:84:c2:b6:6e:13:95:f3:e1:fe:f9:98:
6e:ff:f2:2b:3d:11:bd:c4:25:a0:04:3c:19:82:9c:
0f:d4:85:3b:4c:5d:93:52:49:06:c8:20:8f:32:c8:
85:d9:4c:75:82:16:8f:0a:12:7a:c0:65:bd:6d:9d:
ea:47:a4:26:fb:3f:95:9f:ab:f0:95:9a:7f:b2:ca:
8c:0f:ea:5b:c5:dc:cb:6a:89:cc:de:7d:55:10:3a:
ac:74:7f:7c:a2:49:f7:51:c8:11:f6:01:98:d4:82:
57:34:b8:cd:9e:ac:6b:6a:07:b6:3f:f1:0f:4b:1d:
a3:76:f6:07:e3:d9:d8:ab:74:8b:9c:68:d1:29:69:
40:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FC:5E:A4:D9:A2:8E:C7:40:2B:7F:0C:0A:2E:F6:97:29:10:4C:BC
X509v3 Authority Key Identifier:
keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/o_xepNmijsdAK38MCi72lykQTLw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.40.20.0/24
Signature Algorithm: sha256WithRSAEncryption
25:75:58:ec:4a:ea:74:20:90:9f:00:ba:b8:95:2a:7b:01:b9:
a5:8b:0a:89:e7:b6:8f:c1:ed:93:94:02:55:7d:81:bf:a3:83:
ef:90:e7:9f:2e:e0:0f:a5:50:85:f1:c2:e6:8e:b2:d9:fa:6d:
c4:93:0c:1a:c9:26:26:1b:9b:1e:50:61:34:d9:5a:cf:a1:fd:
ee:a0:77:94:60:34:73:3d:b6:5d:5b:07:c7:50:b1:ef:aa:47:
af:bf:33:2a:e2:d2:51:c4:aa:7f:26:b7:d2:02:1a:11:b0:e7:
e8:f8:03:d3:88:d3:79:1b:b3:06:02:31:65:dd:54:d6:06:3f:
1f:9a:33:97:c3:b5:e2:7f:62:6c:e0:0c:4c:a9:12:22:f2:74:
02:f1:58:c6:b2:54:5c:cc:f5:1f:75:02:dc:c5:ca:a6:e5:48:
7d:d9:b4:2e:ab:0c:7c:36:7c:cf:71:3b:e3:5f:ba:85:62:25:
4a:25:c8:d2:b0:ae:f6:15:5e:64:f8:5b:83:07:c7:dc:0c:ef:
3d:a1:e5:ff:ec:a3:ec:c1:23:6d:65:67:4c:4b:4e:29:fb:b9:
3c:22:f3:ee:42:3b:e3:2d:4b:a7:6c:3c:b6:55:a0:ca:ec:b7:
fa:53:50:f0:88:e7:9c:1c:f3:93:2a:4e:95:8f:e7:0a:94:29:
ec:78:d7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:44 2025 by rpki-client