Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/NKA2H9Ef2z3RQZEB2LHUiwjQllA.roa
File: NKA2H9Ef2z3RQZEB2LHUiwjQllA.roa (raw, json)
Hash identifier: a3aUzniEf24NhLwlgltiViUQ58PaIxtiPvjsRVbtwq0=
Subject key identifier: 34:A0:36:1F:D1:1F:DB:3D:D1:41:91:01:D8:B1:D4:8B:08:D0:96:50
Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Certificate serial: 077F
Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/NKA2H9Ef2z3RQZEB2LHUiwjQllA.roa
Signing time: Wed 09 Jul 2025 02:53:51 +0000
ROA not before: Wed 09 Jul 2025 02:53:51 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146761
IP address blocks: 103.2.158.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 10 Jul 2025 01:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1919 (0x77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Validity
Not Before: Jul 9 02:53:51 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=34A0361FD11FDB3DD1419101D8B1D48B08D09650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:5d:b5:79:9c:7a:ec:39:cd:55:e9:f4:17:
51:6e:ea:e8:07:af:76:6e:85:e6:01:12:8c:a8:a6:
5a:43:4f:29:b0:3e:76:a3:19:16:e3:c2:61:62:e2:
79:e8:e7:eb:c4:89:d5:aa:87:f5:12:7e:16:04:74:
9a:95:fe:7e:4e:c2:59:45:e6:05:0e:9b:af:e4:2f:
2a:44:ab:75:91:87:b6:5f:96:0d:ea:ee:b9:9c:c2:
95:34:d2:28:81:9c:b4:86:96:87:7c:d0:ef:45:03:
11:e8:63:b9:0c:8d:d8:82:b1:41:1e:57:3b:9d:64:
af:64:f3:dd:d8:92:ba:20:af:9e:06:88:b0:b3:3d:
03:e7:06:fd:58:0f:ca:b2:13:58:56:f3:a6:59:53:
0f:32:80:34:3d:9a:17:05:00:f5:7d:df:e2:06:b8:
1e:7b:45:17:d6:a5:78:e3:7e:07:b1:8b:7a:5a:65:
b7:36:73:51:00:33:92:5e:95:9c:eb:7a:33:55:b2:
48:46:0c:e5:29:d6:28:61:75:ba:27:24:86:7e:28:
38:f9:14:76:7e:2c:c3:0a:57:9e:b8:94:59:e9:ec:
d9:0a:69:31:aa:6b:93:93:64:e6:7a:95:a4:69:f1:
dc:c0:d7:3b:8b:76:0f:e4:66:24:52:90:e2:67:5e:
5f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A0:36:1F:D1:1F:DB:3D:D1:41:91:01:D8:B1:D4:8B:08:D0:96:50
X509v3 Authority Key Identifier:
keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/NKA2H9Ef2z3RQZEB2LHUiwjQllA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.2.158.0/23
Signature Algorithm: sha256WithRSAEncryption
52:ed:d1:fa:09:3a:66:20:09:f0:19:d2:5a:36:19:a8:a6:05:
9f:fe:ac:1e:37:c0:54:ab:59:f4:a0:fe:f0:ad:05:bb:92:17:
50:0d:f0:e9:9b:d6:95:fe:f4:18:0b:94:8c:a0:bf:86:29:8d:
b2:99:29:52:9a:bc:b1:cb:be:43:a2:28:a0:93:58:01:95:04:
14:3c:d9:01:b6:13:81:3f:6e:3d:c5:b7:9f:51:15:a3:0e:e8:
d8:34:48:4e:3a:8e:56:2d:1e:b4:77:a7:51:2e:e9:56:42:89:
da:20:4a:0d:1c:be:cc:48:03:a8:9b:9f:47:c4:01:79:ca:75:
b3:24:9e:19:94:cc:60:53:ab:94:0a:c5:af:30:48:4f:8a:2c:
7e:06:62:b0:05:cf:ef:51:6d:60:74:a7:ac:7a:0f:7d:68:ca:
2d:02:5d:f6:3e:1f:b0:bd:cf:99:77:44:e2:45:b6:dd:8e:2e:
4c:28:85:fc:e3:46:61:51:6f:a4:ea:1a:ae:75:03:98:e8:7b:
ce:e8:cd:37:2b:83:d1:08:9c:5d:14:9a:20:75:83:93:ad:08:
98:f9:cf:ca:0e:75:09:de:3f:73:34:f4:2a:eb:d5:83:af:2f:
73:7e:67:73:dd:e5:ba:97:88:58:ca:76:eb:c0:bc:eb:8b:67:
f2:79:04:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:52:37 2025 by rpki-client