Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/88UWKDoFzQYMKGF0TwNoEpNbRbg.roa
File: 88UWKDoFzQYMKGF0TwNoEpNbRbg.roa (raw, json)
Hash identifier: AvsmW6AeexZCua22EOu9L0XeyLAUUb2nLCYOsWpQy3Y=
Subject key identifier: F3:C5:16:28:3A:05:CD:06:0C:28:61:74:4F:03:68:12:93:5B:45:B8
Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Certificate serial: 06DD
Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/88UWKDoFzQYMKGF0TwNoEpNbRbg.roa
Signing time: Tue 10 Jun 2025 01:40:24 +0000
ROA not before: Tue 10 Jun 2025 01:40:24 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146761
IP address blocks: 103.183.26.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757 (0x6dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Validity
Not Before: Jun 10 01:40:24 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F3C516283A05CD060C2861744F036812935B45B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:71:e0:7a:f0:26:f3:30:df:4d:2c:16:ca:
38:47:1b:6f:f1:1b:67:68:c6:9f:0b:07:91:cd:c9:
d2:9b:d2:21:82:4d:6f:74:d4:5b:16:9b:31:23:e8:
c8:bb:66:c6:bc:ea:b7:73:df:19:c8:bd:ae:04:1e:
cf:0a:bc:cf:08:e2:7e:4d:09:b6:7a:11:6b:a5:e3:
cf:39:bd:12:59:70:b1:4f:f8:d9:6b:f5:b9:51:ce:
69:b6:1e:96:78:31:ae:05:83:e5:52:8d:27:07:64:
f7:7a:4c:a1:42:1e:5a:8c:fc:2e:f4:48:96:8a:fc:
37:de:23:3c:cb:b3:7a:0e:d2:f5:43:fb:9b:b4:72:
88:ed:76:e0:b2:4d:a4:ff:69:9a:96:70:96:9e:57:
e3:32:a2:8c:10:90:8f:e3:29:83:78:23:d1:33:9c:
31:8d:b9:82:bb:7b:d5:c5:b2:24:a3:0c:fe:0f:f0:
19:b1:a3:77:d0:53:fc:98:82:6c:6f:ad:e7:59:0c:
57:1f:dc:12:db:ea:50:66:59:63:29:46:56:c3:c8:
9a:16:5d:dc:5c:ca:cd:9d:db:8a:56:fc:8f:f0:c8:
bb:1a:17:1e:d9:9c:88:14:ea:65:f9:57:73:38:ab:
d4:91:d5:1a:1e:d8:3e:33:40:54:12:28:fa:a8:b2:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C5:16:28:3A:05:CD:06:0C:28:61:74:4F:03:68:12:93:5B:45:B8
X509v3 Authority Key Identifier:
keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/88UWKDoFzQYMKGF0TwNoEpNbRbg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.26.0/23
Signature Algorithm: sha256WithRSAEncryption
17:20:07:c6:8a:da:a8:4e:17:b6:56:11:7e:fe:56:8c:95:71:
82:20:87:dc:54:b3:a4:76:e2:07:76:61:a5:9f:3a:f4:50:f5:
a3:2c:9a:f9:67:6b:ee:0d:9b:f7:03:1c:68:f0:bc:40:e5:df:
54:63:39:22:52:c0:06:30:4b:ad:0e:69:5f:13:79:f3:31:34:
b5:be:2d:57:df:3b:de:00:e6:4b:5b:d8:6e:8f:62:c8:71:eb:
df:a9:ed:07:24:fc:87:ab:15:aa:42:5b:9c:3d:1c:72:b6:fe:
49:e8:a6:0d:06:38:28:5c:c9:a4:2e:81:a1:db:65:58:31:0d:
2d:06:34:18:cc:22:1b:d1:3c:c1:18:70:cb:d9:92:de:12:f6:
f4:f9:dd:1b:59:5b:b4:c4:3e:b1:1d:1c:85:d7:26:89:f9:22:
7d:69:0a:ed:32:e5:ac:19:70:04:e2:4a:f7:10:cf:4c:d7:1b:
da:85:e1:9b:fb:67:61:ef:a0:2c:80:18:8b:a2:37:28:85:95:
f9:51:8a:1f:f9:b3:e8:5b:be:1a:30:2a:cd:fc:be:0a:b1:5a:
8e:d8:74:a4:2c:ec:0e:68:aa:fc:e3:7b:51:10:bb:f2:35:83:
74:33:aa:59:08:19:a8:3c:d9:90:07:b7:2a:9c:53:94:40:28:
81:cc:c6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:46 2025 by rpki-client