Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/Hs4CGVy2AJeboVLmK1LZU-rHJls.roa
File: Hs4CGVy2AJeboVLmK1LZU-rHJls.roa (raw, json)
Hash identifier: /Ho5BiAJ2vx6oqIG7m5D8X6Q5yJcCNzBHeymYn9146s=
Subject key identifier: 1E:CE:02:19:5C:B6:00:97:9B:A1:52:E6:2B:52:D9:53:EA:C7:26:5B
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0814
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Hs4CGVy2AJeboVLmK1LZU-rHJls.roa
Signing time: Fri 23 May 2025 07:17:23 +0000
ROA not before: Fri 23 May 2025 07:17:23 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 56046
IP address blocks: 223.160.152.0/21 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2068 (0x814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: May 23 07:17:23 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1ECE02195CB600979BA152E62B52D953EAC7265B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:71:85:60:c6:af:3a:db:72:cc:9e:05:38:
a8:ec:dc:23:99:67:56:3b:da:13:d7:10:92:58:ce:
ca:d3:70:09:f5:6f:d4:32:01:ee:d2:d1:36:84:d9:
f7:39:7e:16:67:8a:0b:59:05:65:3e:4d:ce:f8:b2:
0b:e5:ca:62:ad:c8:9b:71:57:ab:e1:e3:db:72:63:
c2:74:57:af:50:42:2a:27:73:eb:90:82:85:0c:aa:
f3:62:12:53:9c:90:9f:24:b5:1a:17:99:a1:e7:86:
f8:be:2d:eb:c4:11:dd:9e:22:5a:8b:c9:cc:ff:10:
5c:10:cc:8c:ef:dc:43:16:63:ab:07:de:5a:62:44:
53:a9:4a:bd:f5:aa:2f:0a:5a:61:56:c7:81:bf:18:
50:05:dd:9a:a9:8a:2c:f5:fa:f7:f7:2e:67:37:5e:
e9:95:e5:05:ca:c7:ff:58:91:e0:f7:02:54:2b:36:
ac:f9:92:80:79:b5:11:c0:b5:4f:df:1a:5b:32:09:
72:4c:e4:7b:8e:68:f4:95:47:72:43:62:39:f1:4b:
97:1f:c7:1c:8d:91:ba:f6:6d:e0:c7:3c:fa:4d:2a:
5a:c9:1d:49:a3:df:29:c3:cc:5e:b2:eb:03:03:ac:
e1:f8:f7:35:c3:ca:9d:a4:27:5b:7d:72:de:5b:2f:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CE:02:19:5C:B6:00:97:9B:A1:52:E6:2B:52:D9:53:EA:C7:26:5B
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Hs4CGVy2AJeboVLmK1LZU-rHJls.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.160.152.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:4c:4e:2a:25:fa:d1:93:5e:fc:3a:e5:b6:65:c9:3b:7a:e5:
f4:9d:a7:68:44:a0:25:88:9b:43:5a:16:e9:24:52:e6:78:6f:
80:0f:05:c7:54:8b:0d:33:63:f0:c8:1e:2c:03:2d:c6:26:ba:
ac:55:d3:ab:db:84:a3:d3:ab:81:3a:23:5e:c6:6f:1b:ab:ff:
d2:d0:dc:f3:db:6b:28:0c:39:c3:11:15:ce:68:21:ce:95:13:
fe:ad:6b:e8:8b:7e:46:f7:ab:29:1f:9a:53:a4:93:82:70:17:
c4:40:68:14:2e:52:f7:9f:48:b9:d7:8a:3e:d5:f1:99:0c:d0:
b2:de:e3:8e:2c:dc:d1:cf:6f:4e:5a:0c:6a:ab:dc:43:ea:7f:
22:af:25:a5:ad:a8:07:e0:a0:2b:0a:6b:53:ce:7e:bb:18:cf:
90:ff:23:ac:b4:0f:8f:d4:6c:6e:71:dd:12:aa:a4:93:78:a6:
cb:e0:56:d7:10:31:bb:03:5b:3d:63:48:61:2f:37:33:78:71:
77:e4:8a:a8:df:ae:22:05:07:8d:14:d9:4c:7a:23:d8:15:08:
e4:7c:35:49:6e:eb:f7:db:b9:cd:8b:b7:41:82:c2:2d:7d:3d:
df:71:ef:cd:7a:82:40:47:ba:f5:a1:d7:ba:28:fd:97:3d:57:
4c:dc:84:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:45:29 2025 by rpki-client