Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/8quQTrVFBsNNsD1G9SKOaAfk3eY.roa
File: 8quQTrVFBsNNsD1G9SKOaAfk3eY.roa (raw, json)
Hash identifier: vVpNgEngEb4v8duWH/sOTCiwN1J7qA9QoTh7m+Otcno=
Subject key identifier: F2:AB:90:4E:B5:45:06:C3:4D:B0:3D:46:F5:22:8E:68:07:E4:DD:E6
Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Certificate serial: 0771
Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/8quQTrVFBsNNsD1G9SKOaAfk3eY.roa
Signing time: Tue 08 Jul 2025 08:45:11 +0000
ROA not before: Tue 08 Jul 2025 08:45:11 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146762
IP address blocks: 114.111.178.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1905 (0x771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Validity
Not Before: Jul 8 08:45:11 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F2AB904EB54506C34DB03D46F5228E6807E4DDE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:69:6d:e8:e5:4b:83:ab:0e:98:be:92:46:
71:bb:64:8d:f7:b7:0e:37:79:0e:a8:0f:8f:ab:e8:
c4:36:3a:93:b4:0f:a7:05:9c:a1:ff:fb:c2:cb:35:
d4:5f:43:6e:6f:ae:ad:29:76:a3:88:ef:fe:af:a5:
ea:84:0c:34:95:af:d4:b7:20:cf:57:3d:4d:35:cd:
5b:c7:26:26:1a:a6:d3:d7:b9:47:68:c3:ab:21:77:
49:b6:e0:bb:92:c9:25:98:2f:05:7c:1d:4f:14:8d:
26:62:19:92:4f:ac:20:68:81:ab:d6:a6:d3:b0:64:
c1:59:a0:06:f5:6f:59:1f:a2:a1:55:cb:88:87:37:
05:12:66:24:90:83:a7:47:4d:a1:9b:62:35:4f:71:
a4:0b:8b:79:cd:72:b8:da:01:a0:71:8b:ed:9d:47:
11:95:c5:31:ea:09:8f:88:14:19:7e:ce:8b:e6:89:
ad:42:db:6a:1b:b6:ee:b3:40:6b:a0:14:ec:b2:a8:
0a:b8:52:68:b4:cc:d8:07:e8:99:51:cb:a2:e2:86:
12:7d:83:9c:19:14:a6:04:32:1a:24:00:1d:e4:72:
d2:74:2b:83:21:15:88:d7:21:82:8d:03:bf:e8:fe:
98:81:e0:22:f7:ee:4c:e2:d1:49:68:37:42:2c:40:
e5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AB:90:4E:B5:45:06:C3:4D:B0:3D:46:F5:22:8E:68:07:E4:DD:E6
X509v3 Authority Key Identifier:
keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/8quQTrVFBsNNsD1G9SKOaAfk3eY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.111.178.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:59:da:cb:74:e1:82:af:d0:59:7c:94:75:cb:23:f8:83:ff:
4f:bd:0c:ee:81:80:4c:ac:c0:ee:9e:7e:28:38:70:57:a3:41:
13:9c:30:2b:d9:9e:89:55:df:88:71:fd:e1:e7:7b:53:4e:fc:
49:4e:fa:26:ab:1a:17:80:af:3e:e2:5d:ac:89:db:11:89:6e:
e0:9d:c7:8b:16:3a:f0:3d:1e:32:45:6c:7c:4f:c6:cc:9f:39:
9a:ec:7d:cd:b2:7c:77:84:fb:08:4f:19:70:b7:89:4b:35:c9:
55:99:af:3c:af:52:14:75:89:cc:20:66:26:8b:f7:7a:49:b7:
04:1f:ee:27:03:38:2d:bf:4d:1a:82:c4:db:25:45:73:0d:94:
da:ca:2b:97:66:8c:be:41:71:c9:62:03:a4:5f:55:f5:a2:6f:
40:85:5e:9f:38:63:0e:3f:78:ea:c1:32:9b:12:eb:f5:07:4d:
76:78:57:10:37:d5:05:fa:3f:da:a4:d4:c7:21:c6:f3:e2:c6:
55:c7:c2:9a:7f:c6:41:ca:1a:98:0a:a2:33:14:5d:38:06:1c:
3c:d2:13:b4:90:ca:9b:76:c3:6c:26:36:0a:6e:bf:dd:ab:ca:
db:dd:1e:64:2f:1e:67:0e:36:10:3b:ee:a5:f6:dc:41:28:93:
7a:24:b6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:39 2025 by rpki-client