Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/C3rraOFQOzyr2t_liETQ7LXyT_s.roa
File: C3rraOFQOzyr2t_liETQ7LXyT_s.roa (raw, json)
Hash identifier: KvWCQOvwuyDnltKjiO/WIke3NfDmO4O9idygqvPUVZ0=
Subject key identifier: 0B:7A:EB:68:E1:50:3B:3C:AB:DA:DF:E5:88:44:D0:EC:B5:F2:4F:FB
Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Certificate serial: 0CCF
Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/C3rraOFQOzyr2t_liETQ7LXyT_s.roa
Signing time: Thu 10 Jul 2025 09:33:34 +0000
ROA not before: Thu 10 Jul 2025 09:33:34 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4816
IP address blocks: 202.46.224.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3279 (0xccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Validity
Not Before: Jul 10 09:33:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0B7AEB68E1503B3CABDADFE58844D0ECB5F24FFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:66:76:94:d5:a4:8e:ff:a3:76:22:03:94:
3b:6c:bf:3e:4a:67:d7:2a:e6:b2:9d:ab:74:a1:a5:
36:13:fe:d1:91:d2:47:20:f4:e6:3b:99:fd:e2:81:
77:ea:03:aa:20:7b:34:15:ac:e4:bc:43:37:c7:e6:
b5:c8:ea:10:13:81:89:19:84:30:b2:8f:8c:9a:3e:
3e:55:7d:e0:23:61:c6:de:2c:b6:d1:32:2e:a5:37:
18:da:e6:f2:72:59:60:57:9b:65:ef:be:0a:51:f5:
8f:56:41:37:b4:20:16:d1:96:47:0b:e3:76:9e:58:
df:65:b0:3d:05:46:f5:3e:3f:61:6a:0b:7b:e7:da:
47:4c:31:b6:92:8c:e4:f4:a6:96:31:07:c9:39:17:
06:e1:a6:d1:02:3e:c4:fd:77:ab:e2:a2:a0:f8:c2:
9a:b0:fb:36:0e:88:cc:ce:6b:01:19:8c:18:40:31:
2b:4a:1a:3a:f6:1c:7a:ee:db:c6:bf:13:2b:1b:ea:
8e:14:36:b3:c8:78:33:ea:86:09:d2:e7:ae:38:91:
c1:b8:42:07:e8:ee:ca:ac:9d:9e:95:63:7e:1b:92:
03:ed:59:83:e5:0e:7f:c6:21:8b:11:f8:a5:c5:ed:
e1:f6:fd:0c:ed:24:0f:b0:08:e4:95:38:da:e3:50:
66:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7A:EB:68:E1:50:3B:3C:AB:DA:DF:E5:88:44:D0:EC:B5:F2:4F:FB
X509v3 Authority Key Identifier:
keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/C3rraOFQOzyr2t_liETQ7LXyT_s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.46.224.0/20
Signature Algorithm: sha256WithRSAEncryption
30:a0:df:8e:af:10:ae:58:12:50:6c:01:f7:45:2a:b9:da:33:
60:aa:7f:52:5c:d5:29:82:43:ea:2d:7e:18:cb:39:35:ea:50:
fc:fd:b7:cd:d6:08:50:7a:0a:69:d9:35:c1:4f:1a:48:00:09:
f9:6f:dd:75:8f:9d:c0:cb:8a:2c:5c:b6:b9:7e:e9:8f:71:a7:
3d:48:7a:1d:3f:87:df:06:9a:b9:31:46:13:72:dc:02:d1:b9:
ac:a6:27:da:36:95:1c:c7:87:bd:08:85:2f:92:bb:22:df:03:
72:18:d7:71:91:c6:2c:36:0e:b1:0d:ac:75:9d:c9:b0:00:43:
dd:c5:45:a6:d9:7d:25:37:b1:7f:5a:a7:93:11:64:3f:b2:6e:
1f:56:cf:4d:a8:c5:c2:4d:38:1d:72:a1:99:35:f3:0c:78:93:
f5:e9:ee:ab:77:07:4a:f1:a2:a1:3e:d0:46:69:dc:53:f9:be:
0d:23:32:0f:19:6c:79:b4:22:fa:16:4d:d1:39:40:99:72:ad:
25:8c:dc:10:13:e3:83:15:30:e9:dd:9e:6c:0f:cd:49:f9:a1:
c9:6a:56:4d:2b:e7:53:83:01:37:35:dd:d6:11:75:f2:ec:99:
5c:de:47:d9:ab:fa:6e:15:fa:c0:72:a4:84:19:e4:51:0f:b4:
24:34:08:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:42:02 2025 by rpki-client