Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/4ZR5y4jCzGztCvs7AkXxoeyfbWo.roa
File: 4ZR5y4jCzGztCvs7AkXxoeyfbWo.roa (raw, json)
Hash identifier: zQDbIzBL7JFOraq+WEHch+Ugn5UI8PmmuiSPrnpYF6c=
Subject key identifier: E1:94:79:CB:88:C2:CC:6C:ED:0A:FB:3B:02:45:F1:A1:EC:9F:6D:6A
Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Certificate serial: 076B
Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/4ZR5y4jCzGztCvs7AkXxoeyfbWo.roa
Signing time: Tue 08 Jul 2025 08:45:10 +0000
ROA not before: Tue 08 Jul 2025 08:45:10 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146762
IP address blocks: 114.111.189.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1899 (0x76b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Validity
Not Before: Jul 8 08:45:10 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E19479CB88C2CC6CED0AFB3B0245F1A1EC9F6D6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1d:12:66:6b:a4:39:c3:0c:2f:66:98:46:fe:
be:0d:2d:36:f5:65:94:e0:3b:ac:cf:40:d9:87:6b:
66:db:0b:ce:31:f5:21:77:f0:26:2d:f0:4c:13:30:
78:df:0a:1d:16:76:31:de:de:a8:5a:ab:b0:fd:24:
f9:81:f6:8f:9f:3a:f7:eb:aa:49:75:5d:8d:cc:f3:
74:4e:33:8c:3f:af:ea:32:cb:f1:ee:1a:7f:a4:f0:
6e:c9:aa:ee:62:8a:ef:7d:25:01:be:c2:01:31:ce:
ea:8a:61:04:81:cc:90:d8:65:fb:e8:66:d6:55:94:
96:94:aa:d5:d9:95:62:bb:f2:2f:50:47:b3:21:84:
c8:ba:95:95:0f:93:7b:13:ea:ec:50:95:5f:eb:a8:
39:ab:c5:95:b7:e4:96:2f:ca:18:f7:92:17:19:23:
36:65:9e:a1:f7:c3:bb:c8:eb:40:07:79:79:9c:6d:
7b:db:b1:5e:b7:30:23:8a:c8:1d:8f:2f:e0:be:87:
71:4e:99:ad:81:96:49:3a:98:10:4b:70:b3:06:f3:
54:d3:e5:bc:b2:3e:3d:e9:1d:c1:0f:d0:62:9a:ea:
fc:46:ea:1c:ec:b9:34:c2:53:6e:68:55:54:0d:4c:
f8:97:0e:d8:83:91:68:26:f2:07:2a:6f:e4:7e:ff:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:94:79:CB:88:C2:CC:6C:ED:0A:FB:3B:02:45:F1:A1:EC:9F:6D:6A
X509v3 Authority Key Identifier:
keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/4ZR5y4jCzGztCvs7AkXxoeyfbWo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.111.189.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:08:96:b0:3e:5f:5f:fa:8f:52:24:dd:e4:93:dd:66:8d:dd:
57:60:18:c4:e5:fe:f1:63:cc:3b:f5:80:ce:ea:3b:4d:07:c3:
3d:22:d4:92:2e:d8:c2:07:a0:c0:43:7a:f7:b9:2e:8d:a2:38:
41:9d:bc:73:77:90:ec:c3:8f:62:01:21:6e:93:46:46:b0:f4:
24:b7:c4:df:e4:2b:49:1b:fb:47:cf:50:2c:b0:5b:5f:f1:39:
24:94:00:0b:7b:f0:f3:48:17:cf:b6:c1:98:40:05:64:04:c2:
22:1e:77:1e:5c:93:eb:43:3c:c0:29:4d:c8:1a:f3:43:66:d7:
f2:10:bd:15:55:ff:4e:1a:7a:a1:2a:a1:89:b2:15:8d:ff:df:
0d:5e:ef:33:66:79:1c:e7:9f:ce:07:25:10:23:2b:b8:71:6e:
ee:52:4f:28:00:ef:8b:34:37:5b:a6:b0:e1:67:d2:d1:5a:92:
1d:b5:2a:52:3c:e4:96:bc:6a:b4:35:39:53:90:8f:e0:20:ef:
43:ca:8a:be:4a:fc:bf:b1:ea:85:ef:66:89:27:28:e4:88:c6:
e5:0f:91:24:00:6f:8e:99:cf:87:ab:68:6a:ca:fd:c9:01:15:
15:49:d9:1e:7b:89:bc:89:42:5d:2e:c8:81:c5:ad:27:ab:62:
af:74:71:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:43:08 2025 by rpki-client