Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3194/AZp661QogaamAn6kJhyEDq3lnpI.roa
File: AZp661QogaamAn6kJhyEDq3lnpI.roa (raw, json)
Hash identifier: uVgRCC3TYs9CHxk1EXfcS4ShgRRYkecdU6L+XifaETw=
Subject key identifier: 01:9A:7A:EB:54:28:81:A6:A6:02:7E:A4:26:1C:84:0E:AD:E5:9E:92
Certificate issuer: /CN=01BE335E6A4EFB954DBA7893846929A3A5F6867A
Certificate serial: 10
Authority key identifier: 01:BE:33:5E:6A:4E:FB:95:4D:BA:78:93:84:69:29:A3:A5:F6:86:7A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ab4zXmpO-5VNuniThGkpo6X2hno.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3194/AZp661QogaamAn6kJhyEDq3lnpI.roa
Signing time: Wed 22 Oct 2025 02:13:22 +0000
ROA not before: Wed 22 Oct 2025 02:13:22 +0000
ROA not after: Wed 21 Oct 2026 08:58:05 +0000
asID: 151232
IP address blocks: 103.45.144.0/24 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01BE335E6A4EFB954DBA7893846929A3A5F6867A
Validity
Not Before: Oct 22 02:13:22 2025 GMT
Not After : Oct 21 08:58:05 2026 GMT
Subject: CN=019A7AEB542881A6A6027EA4261C840EADE59E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:3c:1f:79:3c:03:ac:93:16:c1:fc:b8:4d:
cc:bf:a8:1c:cd:32:76:81:6e:2a:1f:3f:0a:f7:85:
f8:4e:50:63:e2:42:3d:33:89:13:93:18:e9:2a:52:
b0:68:d8:cb:d5:36:e8:b2:d1:3d:3b:5c:1d:92:76:
e6:50:e4:57:ae:e0:ec:fd:1c:0f:41:a0:4f:c3:64:
c0:d6:31:9d:d2:ae:77:ad:b8:30:ab:45:7c:3d:79:
85:85:86:2a:86:78:db:e6:d8:77:7c:b4:81:72:00:
1f:ca:f7:ab:ed:d9:b3:4e:03:87:7a:0f:f6:c0:b4:
17:63:fd:90:56:56:ea:ec:68:fc:8a:c3:9a:eb:15:
73:1d:d5:79:6b:cf:2e:56:02:48:a1:c9:4d:01:ae:
c2:ec:6c:dd:2b:07:a2:72:57:4e:27:6b:59:dd:1a:
9a:b4:22:fc:33:09:7c:39:70:85:47:b7:8a:22:ad:
a6:77:80:b7:8b:19:dc:7d:81:3c:d0:ad:bd:90:f4:
df:1c:1a:83:41:18:3a:94:6b:ef:e8:55:14:11:8f:
f1:fa:66:18:ca:d7:5b:f1:a7:f6:f8:65:87:27:5c:
7b:20:bf:7d:ea:06:4a:0a:2f:05:45:9f:35:ab:27:
bd:d3:ee:bc:8b:4b:45:09:62:d4:60:f4:1d:7d:d9:
5b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9A:7A:EB:54:28:81:A6:A6:02:7E:A4:26:1C:84:0E:AD:E5:9E:92
X509v3 Authority Key Identifier:
keyid:01:BE:33:5E:6A:4E:FB:95:4D:BA:78:93:84:69:29:A3:A5:F6:86:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3194/Ab4zXmpO-5VNuniThGkpo6X2hno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ab4zXmpO-5VNuniThGkpo6X2hno.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3194/AZp661QogaamAn6kJhyEDq3lnpI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.45.144.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:39:78:a3:ff:28:fc:67:17:ac:66:ed:8f:f3:db:a2:49:74:
9e:18:28:e3:c7:d7:8c:a7:28:13:64:e5:f3:b7:74:df:ac:df:
80:99:e4:ab:8f:f2:19:5e:42:9e:38:7d:60:b2:74:13:1e:b5:
a0:a7:92:03:0b:10:40:f4:43:87:86:56:03:7f:98:90:4d:b0:
b7:21:c4:b2:c9:4b:4f:32:58:0e:44:24:29:2e:24:26:92:db:
0e:76:13:9d:34:db:ab:dd:9d:d3:05:77:69:10:42:3c:bf:51:
69:eb:51:b0:fb:76:0d:df:7a:cd:13:c0:91:eb:88:f8:26:1c:
06:5f:4c:90:1e:f7:8c:cd:32:d8:37:17:bc:33:d6:79:44:c5:
8a:70:16:2f:87:54:df:5b:81:da:2c:b5:57:12:9c:28:2b:c5:
11:64:5c:8c:78:95:39:a7:db:dd:16:bc:7f:88:3b:66:cb:86:
c3:52:a2:df:fe:66:7f:41:c1:87:f6:3d:95:fb:8d:e3:53:b6:
29:7b:13:d6:cb:18:81:0b:5d:9f:fd:67:8e:b7:d8:fd:b7:2b:
c5:b6:97:81:ca:9a:80:1f:d5:c0:54:e4:c1:fb:17:a9:a2:a6:
f5:30:04:57:74:0e:d4:87:10:a6:ea:ba:eb:32:92:6f:13:9e:
ba:0a:e2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:36:38 2025 by rpki-client