Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/nc2uxQPQY-mUW5maakDMGmdKSbY.roa
File: nc2uxQPQY-mUW5maakDMGmdKSbY.roa (raw, json)
Hash identifier: 7s2I2aik/qoKxboX6DHzcv3gS1Kpcz292/ouGjynBSk=
Subject key identifier: 9D:CD:AE:C5:03:D0:63:E9:94:5B:99:9A:6A:40:CC:1A:67:4A:49:B6
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 0F
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/nc2uxQPQY-mUW5maakDMGmdKSbY.roa
Signing time: Wed 03 Aug 2022 12:03:38 +0000
ROA not before: Wed 03 Aug 2022 12:03:38 +0000
ROA not after: Thu 03 Aug 2023 05:46:02 +0000
asID: 209242
IP address blocks: 103.79.228.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Aug 3 12:03:38 2022 GMT
Not After : Aug 3 05:46:02 2023 GMT
Subject: CN=9DCDAEC503D063E9945B999A6A40CC1A674A49B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:ac:db:fa:a2:83:d2:01:18:8f:7e:e1:dc:
6d:11:83:17:ae:52:5a:01:b9:09:4b:8f:3e:1b:35:
1c:5a:e8:ab:6d:d4:72:54:64:bd:63:53:b4:71:3b:
df:bf:93:8a:6a:03:4d:e8:ea:77:ec:68:b1:d5:b3:
01:8d:70:a3:3f:8c:f3:f9:8b:2b:f5:29:7d:6c:4a:
e8:4a:28:0b:8a:47:82:88:07:15:40:4a:27:4b:87:
aa:2e:7b:8c:04:5a:00:f2:4a:5b:e3:92:de:83:53:
7d:44:cb:d9:9e:69:ef:36:6a:f2:c9:9e:ee:d2:57:
96:c1:60:83:f0:b6:93:43:1a:ed:8c:df:05:8d:5a:
02:aa:1a:5a:e9:51:98:07:ec:8e:d2:39:14:75:1c:
96:e9:6a:74:18:ab:5e:4d:77:eb:0b:3c:a3:aa:75:
f1:f7:ba:9c:6a:b8:4a:ab:33:2e:aa:b0:33:e8:b2:
88:80:0a:03:02:47:53:3a:31:43:b6:99:95:4e:4f:
82:e5:a4:d0:2f:01:a0:ce:73:46:ef:63:34:f0:ff:
dd:5a:65:df:e3:0c:c2:fc:db:fe:6f:37:f5:a8:a8:
88:70:37:91:11:96:50:a7:00:57:5e:d4:64:bf:67:
d8:03:9a:15:53:19:52:cb:13:aa:c9:95:b9:11:5e:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CD:AE:C5:03:D0:63:E9:94:5B:99:9A:6A:40:CC:1A:67:4A:49:B6
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/nc2uxQPQY-mUW5maakDMGmdKSbY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.228.0/23
Signature Algorithm: sha256WithRSAEncryption
59:79:3c:a6:5d:5d:ec:34:10:3d:91:1f:f1:3b:84:6b:1b:9e:
7b:ef:08:48:3b:bd:e2:a2:96:8e:70:dd:2d:a6:aa:81:05:97:
6d:1c:ca:e3:39:99:63:15:4b:01:be:63:1c:dd:c1:6c:77:b6:
fe:10:da:62:8d:7f:2c:14:0a:34:6c:31:47:ea:8e:64:6b:1c:
37:37:d7:88:7c:94:0b:7a:b6:98:b0:41:18:41:dc:3d:44:8b:
79:b1:83:af:e1:0e:7a:9c:81:fb:f2:28:7b:ac:2e:ef:44:a7:
66:a0:bb:a4:19:37:bb:d5:8f:02:72:c9:bf:79:f7:c2:78:83:
5f:78:97:94:61:4e:d1:c0:b6:56:f2:f8:41:1f:b6:32:a7:98:
91:a3:3d:de:32:7e:70:83:f8:98:22:da:70:40:09:27:80:a1:
0a:63:bb:f5:05:9f:74:20:42:57:f1:3b:dc:a3:fd:56:13:77:
82:e2:d1:64:60:bd:78:15:47:15:8f:65:d5:8e:80:7f:26:c5:
2b:d9:45:c4:11:80:a9:50:c5:9c:24:e3:3d:87:c9:dd:f3:3d:
2d:0c:ca:59:21:d7:b1:97:48:14:fc:e4:7f:70:98:a4:00:81:
8c:d6:34:1d:d1:5b:a8:f4:48:61:71:2c:b2:3a:02:1a:e7:61:
fa:2d:e8:c0
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNDA5
ODdGNDBBNjAzMENERkEzM0RFRDFFRUU3Q0Y0REM3QzMwMDk0MB4XDTIyMDgwMzEy
MDMzOFoXDTIzMDgwMzA1NDYwMlowMzExMC8GA1UEAxMoOURDREFFQzUwM0QwNjNF
OTk0NUI5OTlBNkE0MENDMUE2NzRBNDlCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKq5rNv6ooPSARiPfuHcbRGDF65SWgG5CUuPPhs1HFroq23UclRk
vWNTtHE737+TimoDTejqd+xosdWzAY1woz+M8/mLK/UpfWxK6EooC4pHgogHFUBK
J0uHqi57jARaAPJKW+OS3oNTfUTL2Z5p7zZq8sme7tJXlsFgg/C2k0Ma7YzfBY1a
AqoaWulRmAfsjtI5FHUclulqdBirXk136ws8o6p18fe6nGq4SqszLqqwM+iyiIAK
AwJHUzoxQ7aZlU5PguWk0C8BoM5zRu9jNPD/3Vpl3+MMwvzb/m839aioiHA3kRGW
UKcAV17UZL9n2AOaFVMZUssTqsmVuRFeNUMCAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBSdza7FA9Bj6ZRbmZpqQMwaZ0pJtjAfBgNVHSMEGDAWgBQkCYf0CmAwzfoz3tHu
589Nx8MAlDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMTY4
L0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvSkFtSDlBcGdNTTM2TTk3Ujd1ZlBUY2ZEQUpRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2OC9uYzJ1eFFQUVktbVVX
NW1hYWtETUdtZEtTYlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ0/kMA0GCSqGSIb3DQEBCwUAA4IBAQBZeTymXV3sNBA9kR/xO4RrG5577whI
O73iopaOcN0tpqqBBZdtHMrjOZljFUsBvmMc3cFsd7b+ENpijX8sFAo0bDFH6o5k
axw3N9eIfJQLeraYsEEYQdw9RIt5sYOv4Q56nIH78ih7rC7vRKdmoLukGTe71Y8C
csm/effCeINfeJeUYU7RwLZW8vhBH7Yyp5iRoz3eMn5wg/iYItpwQAkngKEKY7v1
BZ90IEJX8Tvco/1WE3eC4tFkYL14FUcVj2XVjoB/JsUr2UXEEYCpUMWcJOM9h8nd
8z0tDMpZIdexl0gU/OR/cJikAIGM1jQd0Vuo9EhhcSyyOgIa52H6LejA
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:58 2025 by rpki-client