Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/E6RfgR7MRX4KK9QwDy0cGhSBRI4.roa
File: E6RfgR7MRX4KK9QwDy0cGhSBRI4.roa (raw, json)
Hash identifier: 5pnDlYIwE8wY5l3Ot8FVvMvIdoXx9rgLFS5Cgksc648=
Subject key identifier: 13:A4:5F:81:1E:CC:45:7E:0A:2B:D4:30:0F:2D:1C:1A:14:81:44:8E
Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Certificate serial: 0CB5
Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/E6RfgR7MRX4KK9QwDy0cGhSBRI4.roa
Signing time: Wed 09 Jul 2025 10:27:20 +0000
ROA not before: Wed 09 Jul 2025 10:27:20 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4837
IP address blocks: 202.46.224.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Jul 2025 11:21:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3253 (0xcb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Validity
Not Before: Jul 9 10:27:20 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=13A45F811ECC457E0A2BD4300F2D1C1A1481448E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:13:78:49:7a:6c:dc:c5:d8:75:f9:29:a9:f5:
8c:90:24:4c:8e:fb:c2:0d:60:e8:8c:ec:ee:05:49:
b5:f5:91:c1:e5:a4:fc:17:71:9a:55:71:82:76:cf:
f7:88:fb:38:d2:96:6e:a6:90:aa:8e:99:36:8e:2b:
bb:6a:37:6e:b8:ef:c7:46:23:3b:55:21:6b:71:68:
ce:c1:48:fc:3d:a7:d6:d1:15:25:18:d6:aa:d8:97:
9c:8b:b7:63:70:56:14:98:a5:5f:b6:43:8e:37:cb:
f1:55:c8:b5:60:d9:99:fd:96:43:ec:25:16:4a:4d:
5d:f8:f3:e2:de:78:79:e6:8f:b1:f6:41:96:b3:cd:
95:e9:15:1f:1a:9d:5c:37:f8:48:ac:5e:c6:dc:ef:
38:94:bf:6a:85:fc:f4:7c:12:9b:f4:59:e1:15:24:
fc:5f:26:f5:3f:ec:cd:ad:86:f0:bf:85:25:b8:21:
6d:4b:ad:e7:8e:cb:b8:aa:70:39:cc:ed:9d:2c:81:
6e:24:ab:db:5d:da:02:9a:a6:36:d7:08:0f:7c:2d:
b3:16:af:67:d8:6a:31:e2:77:a1:56:4a:b9:58:65:
0a:63:34:39:05:cf:86:78:eb:7c:ad:cf:6d:ae:b6:
ce:f8:1b:af:b3:61:2e:f2:71:1d:43:bf:c5:5a:af:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A4:5F:81:1E:CC:45:7E:0A:2B:D4:30:0F:2D:1C:1A:14:81:44:8E
X509v3 Authority Key Identifier:
keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/E6RfgR7MRX4KK9QwDy0cGhSBRI4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.46.224.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:a9:6a:72:51:4d:2f:b0:a8:27:8d:23:af:de:c2:04:de:a7:
59:ac:56:09:50:8e:f5:e6:3d:11:d8:89:95:aa:43:5a:ef:c3:
a3:8d:91:13:e9:6d:5e:9b:d2:91:56:52:b9:94:b4:89:03:9d:
32:31:3e:c4:01:f8:81:0b:1a:12:16:2c:9b:72:d4:a6:8f:08:
f8:2c:86:36:e3:c4:1e:84:dc:89:4c:bf:39:9d:de:48:f5:0b:
ba:2d:02:f2:79:64:c9:35:60:98:34:2e:b6:fe:cb:22:d6:2a:
75:88:a3:2d:ff:cd:6a:79:07:24:3d:ae:60:48:af:8a:ac:42:
75:3b:7f:06:fc:5e:cb:8c:88:41:aa:e3:b0:74:93:eb:e4:57:
04:34:e5:e7:53:f4:5f:94:e1:ce:51:6a:89:91:ac:c6:d7:e8:
f8:e7:4e:34:a5:b2:20:51:86:53:5d:c1:a5:a3:71:0a:07:5d:
1f:e0:1f:b7:93:8d:3d:2a:b4:f0:a3:ad:fe:11:38:c3:19:bd:
4d:34:3e:0f:7d:25:e3:89:40:4d:2d:4a:9b:e2:7d:ab:ff:ac:
33:fa:89:b5:31:ff:05:28:89:c7:31:3e:87:5f:41:a8:c9:15:
f9:88:12:14:66:34:00:b0:a6:b8:83:db:87:3e:df:b5:0b:ea:
98:6f:f8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:39:09 2025 by rpki-client