Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/BJ-O3PDAitrk2WmrvlNUc42anOk.roa
File: BJ-O3PDAitrk2WmrvlNUc42anOk.roa (raw, json)
Hash identifier: psYNF8zopnBB3hw2V1psj7j4j7AFQdU9GdITGNN72fU=
Subject key identifier: 04:9F:8E:DC:F0:C0:8A:DA:E4:D9:69:AB:BE:53:54:73:8D:9A:9C:E9
Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Certificate serial: 0CB6
Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/BJ-O3PDAitrk2WmrvlNUc42anOk.roa
Signing time: Wed 09 Jul 2025 10:27:20 +0000
ROA not before: Wed 09 Jul 2025 10:27:20 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 37968
IP address blocks: 202.46.224.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3254 (0xcb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Validity
Not Before: Jul 9 10:27:20 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=049F8EDCF0C08ADAE4D969ABBE5354738D9A9CE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:b3:cf:c3:77:95:3b:f9:61:1b:55:a4:5a:
40:83:ae:2a:8e:c9:e2:94:0f:84:2a:76:3f:19:5e:
df:c2:53:a5:10:d3:8f:6a:9b:6c:9a:9f:cd:cb:a2:
3c:ff:4d:ba:a7:90:50:05:63:29:ff:b3:81:12:e3:
26:ab:1e:c4:8b:44:17:7b:aa:ab:80:b2:d2:23:d0:
f4:13:e0:98:c7:d6:cb:11:6b:7e:19:04:55:dc:c7:
29:5f:b7:e5:b4:69:2b:9b:32:37:d6:2a:70:36:e5:
8e:75:e6:ab:dd:20:c0:71:39:3c:28:45:eb:87:38:
d4:4c:01:63:04:f7:1e:5c:83:1a:48:76:cc:47:c4:
75:0b:72:97:0f:d8:f5:67:e3:8e:22:bf:62:b7:fd:
23:2a:47:28:eb:86:7f:14:3e:1a:8b:39:d2:ee:a2:
f9:33:48:5e:e4:e1:7a:5b:76:f5:05:c2:f3:b5:f7:
80:18:f0:e6:4f:31:c9:dc:76:6b:17:7e:e9:b2:17:
bd:38:0d:49:94:f5:02:91:2a:ab:b2:5a:a9:c6:ff:
1b:eb:6e:86:b0:a0:d1:55:5e:e7:06:b0:8d:12:80:
5f:e6:78:7c:4f:83:e6:d6:45:30:ed:3e:5f:b8:e7:
7a:46:0f:e7:dd:32:13:2d:e6:58:fe:e8:88:69:91:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9F:8E:DC:F0:C0:8A:DA:E4:D9:69:AB:BE:53:54:73:8D:9A:9C:E9
X509v3 Authority Key Identifier:
keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/BJ-O3PDAitrk2WmrvlNUc42anOk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.46.224.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:7d:44:d5:65:a9:8d:31:57:56:88:0b:ca:34:c9:e9:90:c1:
3b:8f:dd:3d:4a:7d:3a:7c:4d:51:44:d7:43:f8:d0:69:78:9d:
34:b9:3b:01:7f:35:49:c3:70:c1:cb:34:31:3f:3c:85:e1:95:
60:32:e0:1a:80:50:c6:9f:5f:2e:7b:12:f8:6b:69:30:d8:ec:
97:c0:f0:e6:dc:4c:09:67:d6:b0:76:6e:cc:b8:81:89:00:7b:
ff:f8:c2:b4:17:19:31:f8:dc:e3:53:b4:8f:1c:9b:b3:0a:5f:
90:ba:06:d7:84:74:e7:28:e8:69:5e:ec:fd:d2:51:a2:88:84:
44:ff:29:6d:ae:8e:d9:db:8b:38:15:16:ba:48:11:c0:cb:1a:
77:8f:49:f9:39:7b:34:94:18:d8:94:89:dd:95:9f:6b:da:2d:
33:c3:a0:4e:75:4d:2a:93:c7:c8:72:36:84:66:63:41:00:af:
83:48:f8:cc:e8:48:d0:ab:3e:d1:bf:a3:c6:fd:8a:41:04:10:
f0:e2:b4:b6:bc:ed:7f:90:36:8b:25:6b:7b:12:b3:79:76:21:
f1:fb:35:d3:91:f0:09:49:b6:09:0d:0c:0e:69:4c:bc:85:e1:
d4:9b:2b:2f:ea:89:1a:5a:42:ac:31:e2:88:1b:1f:cb:91:4e:
3e:9c:89:b0
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ix
NjcwN0VBRjBCREZEMTMyNkFGRDlCREVDNkFGRkE2RTYzQkE5ODAeFw0yNTA3MDkx
MDI3MjBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDA0OUY4RURDRjBDMDhB
REFFNEQ5NjlBQkJFNTM1NDczOEQ5QTlDRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWebPPw3eVO/lhG1WkWkCDriqOyeKUD4Qqdj8ZXt/CU6UQ049q
m2yan83Lojz/TbqnkFAFYyn/s4ES4yarHsSLRBd7qquAstIj0PQT4JjH1ssRa34Z
BFXcxylft+W0aSubMjfWKnA25Y515qvdIMBxOTwoReuHONRMAWME9x5cgxpIdsxH
xHULcpcP2PVn444iv2K3/SMqRyjrhn8UPhqLOdLuovkzSF7k4XpbdvUFwvO194AY
8OZPMcncdmsXfumyF704DUmU9QKRKquyWqnG/xvrboawoNFVXucGsI0SgF/meHxP
g+bWRTDtPl+453pGD+fdMhMt5lj+6Ihpkdl9AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUBJ+O3PDAitrk2WmrvlNUc42anOkwHwYDVR0jBBgwFoAUyxZwfq8L39Eyav2b
3sav+m5jupgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
NS95eFp3ZnE4TDM5RXlhdjJiM3Nhdi1tNWp1cGcuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3l4WndmcThMMzlFeWF2MmIzc2F2LW01anVwZy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTUvQkotTzNQREFpdHJr
MldtcnZsTlVjNDJhbk9rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMou4DANBgkqhkiG9w0BAQsFAAOCAQEAP31E1WWpjTFXVogLyjTJ6ZDBO4/d
PUp9OnxNUUTXQ/jQaXidNLk7AX81ScNwwcs0MT88heGVYDLgGoBQxp9fLnsS+Gtp
MNjsl8Dw5txMCWfWsHZuzLiBiQB7//jCtBcZMfjc41O0jxybswpfkLoG14R05yjo
aV7s/dJRooiERP8pba6O2duLOBUWukgRwMsad49J+Tl7NJQY2JSJ3ZWfa9otM8Og
TnVNKpPHyHI2hGZjQQCvg0j4zOhI0Ks+0b+jxv2KQQQQ8OK0trztf5A2iyVrexKz
eXYh8fs105HwCUm2CQ0MDmlMvIXh1JsrL+qJGlpCrDHiiBsfy5FOPpyJsA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:41:20 2025 by rpki-client