Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/ee7NSPQXz7nasw04yXcDex8VXgE.roa
File: ee7NSPQXz7nasw04yXcDex8VXgE.roa (raw, json)
Hash identifier: 4u1b2SXnI4j3Neqxm+gogo/2y2+tTzrb+nSSqbd2z+M=
Subject key identifier: 79:EE:CD:48:F4:17:CF:B9:DA:B3:0D:38:C9:77:03:7B:1F:15:5E:01
Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Certificate serial: 0774
Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/ee7NSPQXz7nasw04yXcDex8VXgE.roa
Signing time: Tue 08 Jul 2025 08:45:12 +0000
ROA not before: Tue 08 Jul 2025 08:45:12 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146762
IP address blocks: 114.111.183.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1908 (0x774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Validity
Not Before: Jul 8 08:45:12 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=79EECD48F417CFB9DAB30D38C977037B1F155E01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:6e:0d:1b:59:af:ce:7e:14:86:7f:cd:4b:
2c:a3:0e:24:c2:ed:8d:87:1d:b4:03:03:ef:11:2f:
ad:47:79:13:ad:fa:38:58:a7:b4:59:5e:fa:92:f7:
9d:93:58:9b:59:f7:37:1f:a6:e9:d7:09:0b:e7:5b:
8b:ea:8e:4a:48:3f:29:cc:51:ae:18:55:e2:06:79:
47:b8:ce:0f:27:c9:47:e8:85:ec:64:68:fe:59:27:
b6:bc:5c:8d:94:2c:cc:1b:56:94:bd:58:ad:cd:49:
df:ec:88:38:9c:c3:91:48:dd:3b:4e:10:e8:b0:7a:
dd:ec:cf:16:62:a4:cf:dd:29:04:0c:bb:1e:38:f5:
c7:0e:78:ed:ec:a5:0f:bb:68:25:2f:56:ae:6a:0e:
13:cc:bb:62:a0:ca:24:ee:7c:9e:21:83:0c:58:d3:
1b:43:bd:61:08:33:26:42:30:38:5f:78:64:bc:61:
be:0f:bd:18:0c:fd:9b:db:09:04:86:d4:66:8e:0d:
de:4b:c3:d6:b4:90:99:4b:e1:7b:7a:f0:b3:79:65:
db:b2:ca:87:e7:90:94:0e:49:73:be:3c:71:f3:2b:
37:83:b3:a6:5f:29:9a:6b:55:a2:9b:bf:50:20:cd:
45:3e:60:e6:2a:82:1b:7f:d1:4f:2e:c9:23:f7:7a:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EE:CD:48:F4:17:CF:B9:DA:B3:0D:38:C9:77:03:7B:1F:15:5E:01
X509v3 Authority Key Identifier:
keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/ee7NSPQXz7nasw04yXcDex8VXgE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.111.183.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:90:a9:4c:0c:62:c2:ef:21:d6:e2:5b:7a:6e:c6:01:27:1a:
6b:f3:38:84:5d:cd:57:19:66:02:48:5b:5d:11:3b:ab:8b:1f:
d2:d3:fa:c2:0e:9e:e7:ca:e1:40:54:36:09:45:17:5c:98:7f:
a6:85:b8:e4:25:37:2e:6d:dd:f9:d3:d0:1a:81:73:01:45:af:
1e:11:07:a6:a7:80:dc:b1:d8:e1:7b:fd:2c:57:2d:af:d4:dd:
7e:53:36:20:7a:d8:7e:9a:07:a9:fe:a4:5b:4b:8b:5d:00:55:
67:9c:7e:d4:d0:7d:02:c1:5f:b1:f6:5b:f0:b6:d0:32:6f:e3:
f6:50:84:25:a5:86:9e:75:19:57:ec:74:37:65:ae:4b:43:7d:
3e:16:e8:b3:d6:e0:47:6b:57:42:d7:9e:7a:20:5f:ae:fb:7a:
70:91:34:b5:8f:26:98:3a:63:ef:3d:6e:4c:4f:30:9f:06:6c:
ab:b3:b5:39:ed:32:f6:ac:77:e9:17:23:45:df:12:21:7c:00:
cf:3e:03:2b:f3:50:56:bd:d9:cf:d4:cf:bd:13:6d:37:3d:d7:
db:58:17:e9:2e:39:e2:c7:4b:c3:a0:2c:6d:35:9c:48:4b:97:
4a:a3:01:59:9a:c0:01:5f:db:3b:a2:c7:a4:17:cf:71:cf:58:
a4:38:86:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:51:19 2025 by rpki-client