Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/LwqpANaQfgPYztUVixrCSwwSpb4.roa
File: LwqpANaQfgPYztUVixrCSwwSpb4.roa (raw, json)
Hash identifier: zRXAx7fdtjW6s8eYOV1hapaN/Lrdxhjvh/rsIcXhaHE=
Subject key identifier: 2F:0A:A9:00:D6:90:7E:03:D8:CE:D5:15:8B:1A:C2:4B:0C:12:A5:BE
Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Certificate serial: 0CB4
Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/LwqpANaQfgPYztUVixrCSwwSpb4.roa
Signing time: Wed 09 Jul 2025 10:27:19 +0000
ROA not before: Wed 09 Jul 2025 10:27:19 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 56040
IP address blocks: 202.46.224.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3252 (0xcb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Validity
Not Before: Jul 9 10:27:19 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2F0AA900D6907E03D8CED5158B1AC24B0C12A5BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:05:ce:47:d1:4f:89:44:4d:46:5e:2e:33:eb:
87:99:a5:0f:b6:17:b1:1a:77:75:bb:94:1a:a0:8b:
f3:4e:c7:94:85:44:1a:21:b2:c4:c2:02:5d:5b:dc:
6e:12:ea:31:1f:f4:fc:e5:9b:48:8b:a4:2f:27:94:
5c:13:ed:04:42:5d:0c:1b:ea:26:49:d1:5c:38:70:
53:1d:01:20:ff:56:2d:d8:9e:56:b9:c5:60:23:a5:
3d:1e:2f:13:62:5a:5e:c0:44:7d:85:a9:a9:6f:42:
ee:86:f5:f3:0b:42:91:f7:02:9b:ac:b0:79:10:c1:
67:8a:cb:bf:fc:c3:a5:76:20:60:34:25:33:ac:95:
a6:c0:03:91:b5:79:c9:bf:cb:a0:b0:9e:36:48:60:
13:e1:7e:ee:7a:4d:d3:91:1c:93:0b:16:ae:42:f9:
ca:b2:c8:ad:ae:ec:81:a4:29:ef:c7:bb:75:62:ac:
64:67:90:37:31:32:4f:d7:f9:78:7d:ee:6f:f8:d6:
3b:a4:de:8d:b7:ff:65:0a:dd:b7:38:06:0d:07:3e:
93:3e:e2:a0:59:7d:f7:80:63:35:e3:1f:a5:68:8a:
2a:6e:ff:95:1a:18:ac:78:59:e3:f4:36:3b:0a:63:
ee:fd:be:60:09:f0:0b:71:f0:f2:9a:a5:d3:19:d3:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0A:A9:00:D6:90:7E:03:D8:CE:D5:15:8B:1A:C2:4B:0C:12:A5:BE
X509v3 Authority Key Identifier:
keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/LwqpANaQfgPYztUVixrCSwwSpb4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.46.224.0/20
Signature Algorithm: sha256WithRSAEncryption
11:fb:38:e8:49:4d:28:95:47:e8:21:1c:87:e8:51:25:9c:bd:
cc:e7:4e:01:59:99:ae:b6:90:7e:d9:41:f6:b7:d1:0c:59:50:
89:b8:4b:fd:83:70:8a:a4:2f:29:8e:20:f1:c2:4f:ab:4b:62:
20:d2:fe:4d:42:1a:2d:a3:53:cf:96:43:71:02:08:ca:2d:52:
48:8c:38:f3:c3:a9:d6:94:92:5f:b3:85:d4:7e:fc:37:34:06:
ec:aa:b8:0a:a1:36:97:2f:32:eb:85:8f:cc:ae:6c:45:67:37:
74:d7:96:91:df:99:d2:7a:07:f6:1c:a6:da:dd:ae:45:45:f2:
89:71:5e:9b:36:78:ad:16:90:0e:0c:1d:02:3c:fe:c8:a6:0e:
88:83:94:83:56:41:61:1d:dc:27:fc:8e:d8:e5:15:19:56:2e:
d4:36:35:ac:22:53:5c:09:cc:4f:24:14:4b:30:34:00:fc:2e:
1d:27:0e:b0:4f:2a:b0:a0:f3:13:88:09:6c:c3:fe:65:8a:d3:
af:08:de:2d:cc:d7:1e:c7:bc:31:af:a2:8b:26:8b:3a:09:e5:
ae:1d:56:69:a2:1c:6c:a4:93:2a:d7:b9:58:09:8b:e5:30:a6:
e5:d0:1d:7a:41:50:34:4b:e3:a5:44:45:f5:66:b9:2f:af:1f:
90:96:73:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:17 2025 by rpki-client