Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3163/VUqIDMTtELKIYrxAqK_hUi9wDww.roa
File: VUqIDMTtELKIYrxAqK_hUi9wDww.roa (raw, json)
Hash identifier: f4A4tnRN0eQ8pw+ILPCNER3LHOoKHgYuaz681BtdDus=
Subject key identifier: 55:4A:88:0C:C4:ED:10:B2:88:62:BC:40:A8:AF:E1:52:2F:70:0F:0C
Certificate issuer: /CN=7CE5CE03D2B49F4E7C408A2BF7BC04A5EA824E6B
Certificate serial: 03
Authority key identifier: 7C:E5:CE:03:D2:B4:9F:4E:7C:40:8A:2B:F7:BC:04:A5:EA:82:4E:6B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fOXOA9K0n058QIor97wEpeqCTms.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/VUqIDMTtELKIYrxAqK_hUi9wDww.roa
Signing time: Mon 02 Feb 2026 02:53:35 +0000
ROA not before: Mon 02 Feb 2026 02:53:35 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 146771
IP address blocks: 103.191.102.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CE5CE03D2B49F4E7C408A2BF7BC04A5EA824E6B
Validity
Not Before: Feb 2 02:53:35 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=554A880CC4ED10B28862BC40A8AFE1522F700F0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:36:3b:35:4e:b5:de:f3:6a:ec:30:c1:07:
ef:ba:1d:f6:53:b2:c6:51:bc:9c:fc:93:44:29:3d:
92:1d:bf:9e:fc:de:8e:7a:22:83:b8:59:67:29:b0:
c5:a6:4b:05:43:3c:ea:a7:8a:43:49:44:e9:cb:c7:
18:61:8d:61:a5:06:75:18:68:bb:a4:53:8b:3d:fc:
56:d9:f0:63:fe:d8:73:21:00:4a:1e:aa:f3:12:c4:
7b:87:15:42:67:18:0e:6a:70:55:0c:73:6d:aa:c9:
5a:b7:bc:9b:2c:14:d6:43:9e:2d:87:15:fc:0c:cb:
78:f9:58:1a:6b:72:47:79:3d:f6:5c:78:2e:ab:cf:
34:b0:6d:af:43:c2:9d:7a:02:6e:09:e2:48:8e:0e:
7c:63:cf:9f:5a:52:8c:34:f7:fe:27:89:47:ad:6a:
b3:e8:67:76:f6:c9:24:65:49:a8:b6:c6:e3:88:d4:
47:16:6a:d4:96:6b:c4:87:30:d5:2c:44:76:77:e5:
8f:e9:e7:04:38:0d:a0:2c:78:02:02:a2:d0:5b:32:
dd:01:17:f0:4d:64:5b:5d:9d:f5:62:24:93:b4:95:
16:76:fc:cc:df:a2:29:e1:3d:61:f1:74:b2:4e:45:
67:b5:02:ec:3c:89:d2:5c:7c:ca:62:cf:a0:9b:3f:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4A:88:0C:C4:ED:10:B2:88:62:BC:40:A8:AF:E1:52:2F:70:0F:0C
X509v3 Authority Key Identifier:
keyid:7C:E5:CE:03:D2:B4:9F:4E:7C:40:8A:2B:F7:BC:04:A5:EA:82:4E:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/fOXOA9K0n058QIor97wEpeqCTms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fOXOA9K0n058QIor97wEpeqCTms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/VUqIDMTtELKIYrxAqK_hUi9wDww.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.191.102.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:e8:90:60:3b:64:62:a2:46:bd:6c:b6:b9:d2:ab:36:46:45:
20:04:80:98:f5:35:ce:00:01:f3:21:24:76:fa:02:43:9e:53:
b4:c4:42:5a:fe:6c:69:22:68:c7:16:1e:34:bf:de:17:1b:76:
1a:0e:0c:d6:ee:b7:4f:7a:2f:1a:89:e1:88:b3:c4:f5:72:fb:
25:b9:9d:3b:b6:47:db:36:1a:01:59:23:e5:10:25:51:10:dd:
f3:f5:5d:f1:22:41:dd:ab:7e:65:8c:6b:d1:ba:17:26:9b:73:
9f:d1:24:13:92:3b:ce:49:96:f1:56:6b:cf:a4:6b:c7:bb:20:
ac:c2:d5:02:eb:8f:a6:49:21:8d:95:54:95:7a:74:ea:72:36:
57:17:e2:ad:60:99:d2:2d:93:53:5c:70:c2:c7:f5:f7:e8:8a:
be:70:54:df:6d:8c:49:40:5b:90:f4:19:ec:f3:df:ef:5e:69:
7c:08:c0:16:67:dc:f0:c6:9c:f3:11:02:2b:88:61:52:ec:fb:
12:d1:81:1b:93:48:2b:60:be:b4:44:d3:0a:8f:34:f0:1a:ab:
ca:f6:da:31:c5:03:2f:86:d8:be:0a:0f:92:5f:78:8c:5b:6b:
13:e0:09:44:b5:34:46:e0:9c:c8:3c:56:fc:ba:93:a1:f8:e1:
b1:7f:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:50:41 2026 by rpki-client