Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3163/vhY7fJu_WWVp1vUkP3t3Cny8rvE.roa
File: vhY7fJu_WWVp1vUkP3t3Cny8rvE.roa (raw, json)
Hash identifier: Ez3G/6FV77f1KQ1yizzdm8rRAToXRUstPgobHTnrtdE=
Subject key identifier: BE:16:3B:7C:9B:BF:59:65:69:D6:F5:24:3F:7B:77:0A:7C:BC:AE:F1
Certificate issuer: /CN=7CE5CE03D2B49F4E7C408A2BF7BC04A5EA824E6B
Certificate serial: 04
Authority key identifier: 7C:E5:CE:03:D2:B4:9F:4E:7C:40:8A:2B:F7:BC:04:A5:EA:82:4E:6B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fOXOA9K0n058QIor97wEpeqCTms.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/vhY7fJu_WWVp1vUkP3t3Cny8rvE.roa
Signing time: Mon 02 Feb 2026 02:53:35 +0000
ROA not before: Mon 02 Feb 2026 02:53:35 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 146771
IP address blocks: 2400:95e0::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CE5CE03D2B49F4E7C408A2BF7BC04A5EA824E6B
Validity
Not Before: Feb 2 02:53:35 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=BE163B7C9BBF596569D6F5243F7B770A7CBCAEF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:f9:92:ee:22:b7:6f:7b:a6:b6:31:61:b9:
3a:42:2b:d2:e4:16:db:9c:cb:4a:ee:2e:f5:be:58:
7c:8c:cd:66:ed:33:f2:cc:9b:b2:d0:00:58:c4:ba:
80:7b:f6:f9:b9:63:67:b8:37:b9:43:f4:eb:2e:ca:
d6:42:25:09:bc:86:13:96:e9:32:59:c3:a3:fa:1f:
4f:44:b8:00:19:52:30:bb:f3:43:98:2b:61:dd:d5:
5f:59:2b:86:fa:a2:42:22:e6:2f:95:fc:85:03:14:
40:71:18:a7:7c:a8:43:97:e7:fc:70:06:78:d3:c1:
89:65:9c:35:5b:5b:12:17:08:da:6f:0c:a8:f6:8f:
7b:8c:f6:95:77:e8:f1:8e:92:aa:63:26:7a:f2:34:
7d:ff:f3:f2:2d:ba:cc:bf:61:56:c3:9c:fb:67:8b:
d0:1a:7c:3d:9d:80:de:c5:c0:75:04:12:b4:45:c8:
6c:a6:6d:20:b3:d0:92:f1:ec:bd:5a:8f:d6:58:db:
3e:87:e7:26:82:36:3d:60:51:1a:da:b0:d0:dc:f3:
4f:0c:72:f4:40:30:14:da:b2:bd:38:10:97:e1:55:
5e:8b:40:61:75:21:22:3d:9c:05:89:11:3a:a8:f5:
e6:c9:49:a5:ca:2d:cc:84:4d:93:46:59:ef:7f:83:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:16:3B:7C:9B:BF:59:65:69:D6:F5:24:3F:7B:77:0A:7C:BC:AE:F1
X509v3 Authority Key Identifier:
keyid:7C:E5:CE:03:D2:B4:9F:4E:7C:40:8A:2B:F7:BC:04:A5:EA:82:4E:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/fOXOA9K0n058QIor97wEpeqCTms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fOXOA9K0n058QIor97wEpeqCTms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/vhY7fJu_WWVp1vUkP3t3Cny8rvE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:95e0::/32
Signature Algorithm: sha256WithRSAEncryption
19:84:f3:bb:ed:e5:8a:2c:fa:af:7c:6b:c5:4a:a1:de:d0:24:
a4:8d:46:44:4d:0b:a4:1e:70:b0:af:fa:98:db:dd:ed:57:0d:
30:93:ea:8f:86:12:6d:98:a2:02:f1:2a:33:4a:0a:37:28:52:
91:c7:86:64:e2:90:38:20:8d:57:ef:97:06:ec:5b:ce:8d:e1:
29:ce:7d:01:00:33:4b:ee:18:8a:b0:b5:8b:7e:b1:f9:b0:cb:
84:5a:de:c5:22:14:41:90:7a:71:0d:e7:f4:c0:a1:2e:9c:c8:
6b:d3:4b:49:d1:d5:3e:1a:e4:79:96:5b:8d:ae:ed:16:bd:70:
f0:3b:69:9c:d8:1e:a2:d6:a3:b6:be:86:7e:ff:b3:6c:39:f6:
8e:61:6b:be:ff:3f:b0:76:50:7e:80:c4:f0:9c:b5:5d:b1:a8:
16:f7:ae:88:15:71:04:a3:6a:6e:06:8e:fd:3b:95:71:02:2a:
05:80:f6:b8:25:ba:65:d0:b9:05:6d:94:be:86:a6:c9:c3:fb:
81:16:61:98:19:b0:49:06:0d:01:1c:df:56:34:a9:bd:b7:21:
00:4b:49:da:09:18:3c:69:c7:e4:67:13:40:8b:e3:32:c9:8a:
07:e8:2c:6b:40:c6:ee:75:48:67:b0:10:9f:20:2c:2a:f0:cf:
f2:2d:55:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:50:41 2026 by rpki-client