Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/JsSp3mBWK0dIyJEOUyD51IGBewY.roa
File: JsSp3mBWK0dIyJEOUyD51IGBewY.roa (raw, json)
Hash identifier: AaR3M17e1/qON52hXYromfZ28bFv+a/1CPgjOnzN7TQ=
Subject key identifier: 26:C4:A9:DE:60:56:2B:47:48:C8:91:0E:53:20:F9:D4:81:81:7B:06
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0832
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/JsSp3mBWK0dIyJEOUyD51IGBewY.roa
Signing time: Fri 23 May 2025 07:41:06 +0000
ROA not before: Fri 23 May 2025 07:41:06 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24445
IP address blocks: 223.161.250.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2098 (0x832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: May 23 07:41:06 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=26C4A9DE60562B4748C8910E5320F9D481817B06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:83:f8:e7:43:17:cd:11:94:55:91:dc:bd:
71:69:15:01:f9:3d:bc:3f:ac:52:e5:06:eb:c5:1f:
db:11:37:27:43:ee:18:9a:79:36:4b:f4:e9:f8:6f:
a0:81:f4:5c:95:56:e3:d0:7f:82:07:ae:6c:2b:cb:
f7:20:4b:a7:55:42:f2:71:32:41:e0:bf:c3:2b:4c:
50:2b:0c:b5:ec:82:24:a6:30:6c:f1:2b:4b:0e:ed:
d1:ab:d8:62:2f:4b:92:ad:bb:a2:92:a9:54:51:44:
3c:8a:37:0c:7e:e2:d3:d8:f8:a5:67:83:8b:cc:f7:
6b:fa:ee:cf:ef:59:95:e7:45:c3:b6:68:1a:51:90:
35:52:91:5b:ac:93:e7:1c:94:c2:c3:a9:8d:fe:e9:
57:0a:fa:92:83:95:6d:ec:bc:02:46:e7:90:0a:97:
a8:85:89:b3:4a:38:e4:f5:88:2e:aa:2f:3a:68:71:
db:30:19:b3:44:a9:46:40:e0:35:02:8f:94:be:1c:
5b:a1:f3:4d:35:ad:3f:9e:f3:25:72:0c:7c:03:02:
bd:62:1e:bf:ac:63:73:ba:30:fb:48:a7:0e:cc:c5:
2a:8a:bd:fe:75:91:54:2d:c6:dd:b2:67:08:d6:0f:
30:47:96:61:8c:1e:54:65:64:1e:12:1c:98:62:81:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C4:A9:DE:60:56:2B:47:48:C8:91:0E:53:20:F9:D4:81:81:7B:06
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/JsSp3mBWK0dIyJEOUyD51IGBewY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.161.250.0/23
Signature Algorithm: sha256WithRSAEncryption
03:50:35:95:d1:f3:01:a1:a3:93:ef:47:37:f4:68:b9:e8:5d:
86:2a:05:28:da:e1:05:99:22:b6:e5:4c:b7:57:7a:60:16:44:
5a:7b:c1:af:78:5a:ce:14:b4:22:a6:b5:82:21:69:7f:9f:d2:
e4:58:4e:5c:4c:40:46:23:d8:b9:62:6c:29:ee:55:09:1b:ab:
06:62:90:ad:e4:96:ac:55:d7:c7:61:d4:5d:70:43:68:19:49:
18:e9:59:f5:64:2f:e9:a0:9f:48:e3:d7:cc:3f:67:cf:70:a6:
86:03:e6:fd:45:d5:38:af:84:79:c2:46:7f:d3:e7:6a:d1:83:
54:22:08:01:7d:97:a8:e8:c9:7b:bf:b5:6e:b1:44:86:a0:2e:
58:91:a6:68:4d:67:4c:c6:d9:50:b3:e0:16:05:48:e8:fe:c9:
45:1f:2d:35:08:62:dc:d4:49:ba:48:05:07:fe:85:aa:16:f3:
48:8e:c5:f4:59:ac:be:7a:4b:22:04:fd:bf:18:38:7d:35:2f:
1e:44:02:0b:37:d0:01:ec:c0:83:45:b3:f3:fc:4e:cf:b8:35:
57:03:36:6b:79:71:96:af:38:85:49:78:ae:3e:c8:ff:c4:83:
80:db:f9:63:3d:a5:9c:53:37:b9:01:16:ad:a7:16:6b:af:84:
f6:3d:40:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:00:25 2025 by rpki-client