
Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/NkHAfhiM6mqCCcXRtRoxFHmuBlY.roa
File: NkHAfhiM6mqCCcXRtRoxFHmuBlY.roa (raw, json)
Hash identifier: YEw+9TR/n5kLaLSjnzDR3NtcTzcqYz1thgdIeylQ4V4=
Subject key identifier: 36:41:C0:7E:18:8C:EA:6A:82:09:C5:D1:B5:1A:31:14:79:AE:06:56
Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Certificate serial: 0776
Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/NkHAfhiM6mqCCcXRtRoxFHmuBlY.roa
Signing time: Tue 08 Jul 2025 08:45:13 +0000
ROA not before: Tue 08 Jul 2025 08:45:13 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146762
IP address blocks: 114.111.180.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1910 (0x776)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Validity
Not Before: Jul 8 08:45:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3641C07E188CEA6A8209C5D1B51A311479AE0656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:66:f4:ba:fe:33:7e:4f:1a:d1:74:e9:a7:
63:78:27:11:cb:6e:71:8b:24:e7:75:76:ad:a8:85:
3a:99:c6:33:07:71:d7:f8:bd:3e:b3:4c:8d:99:51:
90:83:52:a6:5c:18:99:fd:8c:00:af:85:7a:81:a9:
eb:48:25:8e:9c:65:d4:85:a1:51:d4:ac:8c:5d:25:
f7:9f:df:6f:2c:fa:14:17:f8:2a:cb:66:3f:60:79:
2a:0e:82:64:d0:08:91:52:7e:ea:1f:3e:ed:76:4c:
07:0f:fe:3d:d4:2c:bd:77:40:69:09:fc:c9:db:0c:
d4:58:e2:02:c2:a3:55:a3:d3:5c:22:23:7b:d5:9d:
eb:31:5a:e3:99:72:3b:e4:42:42:e5:af:ee:c1:3a:
e3:cf:15:5a:64:39:00:3c:1e:f8:9b:97:f1:ba:f8:
f4:f3:f5:52:07:7d:8c:65:97:aa:86:10:4b:05:5a:
6f:c9:95:fa:a6:24:fe:bb:39:57:0e:53:5d:b5:dc:
d7:47:0b:6b:f2:2a:6c:96:39:db:a9:72:2d:10:25:
e6:7a:92:17:a9:cf:a5:53:b7:4c:65:3b:55:20:24:
db:ae:ce:70:14:4e:72:d7:a8:5f:a2:48:ad:9f:a2:
69:82:d1:b8:ce:13:e6:a4:7b:5e:c3:43:b1:8d:75:
9e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:41:C0:7E:18:8C:EA:6A:82:09:C5:D1:B5:1A:31:14:79:AE:06:56
X509v3 Authority Key Identifier:
keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/NkHAfhiM6mqCCcXRtRoxFHmuBlY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.111.180.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a1:04:d8:10:b2:04:e4:ed:cf:a4:35:9f:17:70:89:9f:18:
98:46:2f:75:e0:b5:ec:84:3b:c7:06:51:0b:80:29:71:54:17:
05:5f:58:5f:04:f0:6e:f0:92:f1:ae:b3:0f:b3:79:6d:7b:4f:
f4:41:a4:f1:6b:27:0f:26:3a:fb:cf:67:4c:a1:48:aa:9a:5b:
9f:18:63:1c:25:72:05:e5:17:fe:80:e0:81:1a:b5:d5:8c:e7:
69:12:3d:fb:b1:f4:ce:22:43:15:b6:c7:cd:cc:13:51:06:20:
26:9e:af:37:22:7c:79:2b:64:43:56:a3:3b:41:53:a1:1d:72:
44:2a:62:84:7c:18:1d:34:bf:fa:1b:f6:7f:98:96:5a:48:4b:
d2:bb:02:88:f1:84:47:61:5a:3c:24:61:0b:20:5a:cc:a2:e5:
b1:f2:8a:a6:b9:7e:57:8c:45:b4:10:cd:fd:e4:69:41:7a:f8:
38:c9:24:ca:2b:b5:5e:76:5e:29:f4:ae:1e:8a:b0:c6:c9:b6:
4f:88:b1:68:37:c5:61:83:79:c2:0f:51:12:b5:ba:fe:30:40:
56:23:a9:31:af:28:21:2d:e4:39:49:01:23:39:06:20:1e:3e:
80:3e:ed:00:1a:55:70:dd:de:b1:5e:f1:2a:63:7b:5d:77:64:
05:19:d8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:48:28 2025 by rpki-client