Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/OTS5WnCsVVE417EeDs_Snmki_mA.roa
File: OTS5WnCsVVE417EeDs_Snmki_mA.roa (raw, json)
Hash identifier: m2nmAQmX1oSG5VbdtJFyXBbpby5m9dg2qJqWqJ7ZQCA=
Subject key identifier: 39:34:B9:5A:70:AC:55:51:38:D7:B1:1E:0E:CF:D2:9E:69:22:FE:60
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 081D
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/OTS5WnCsVVE417EeDs_Snmki_mA.roa
Signing time: Fri 23 May 2025 07:36:31 +0000
ROA not before: Fri 23 May 2025 07:36:31 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 9808
IP address blocks: 223.161.232.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2077 (0x81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: May 23 07:36:31 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3934B95A70AC555138D7B11E0ECFD29E6922FE60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a2:04:2b:03:6b:a7:79:73:80:23:1f:9e:cf:
3e:47:33:97:b5:6a:03:8d:9f:76:5a:d0:b1:30:cc:
49:84:d3:b1:31:e9:34:0b:98:37:cc:50:a9:46:03:
ab:34:4e:5b:17:37:8f:1e:34:f3:96:93:7e:21:48:
7d:84:78:24:8c:35:09:b3:61:85:c6:ca:1e:da:21:
c1:04:3f:0a:4b:f5:7f:29:6f:5d:da:70:ce:ce:23:
93:8b:2e:59:56:2c:04:ac:22:e2:7a:fd:12:c8:bb:
af:74:29:6b:69:3a:62:fe:ea:ef:f8:89:a9:06:93:
60:cc:24:bf:77:14:ee:d6:2a:d2:e1:ce:77:ae:69:
f5:4a:97:67:fa:7b:4c:83:87:1a:f3:fb:b4:69:33:
0c:ed:de:2f:99:84:dd:58:fa:ae:70:6b:87:5c:2c:
72:28:e9:5c:8c:f7:bc:b6:9e:92:1c:e5:54:5d:88:
29:5a:0e:42:17:df:79:0b:20:37:ef:5d:63:4e:11:
38:5d:f5:40:7e:12:40:57:92:95:72:28:bb:33:51:
7b:99:b6:e4:96:44:f2:26:b5:44:be:14:e2:67:5c:
9b:b6:f7:d9:61:87:6a:6d:fc:69:23:dc:8d:84:d6:
b0:c4:48:fc:05:9c:b4:6e:1c:38:a3:2c:bf:fe:e1:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:34:B9:5A:70:AC:55:51:38:D7:B1:1E:0E:CF:D2:9E:69:22:FE:60
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/OTS5WnCsVVE417EeDs_Snmki_mA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.161.232.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:5b:3a:bd:67:05:f6:ed:c5:49:4d:03:c6:86:bf:5c:3a:e2:
73:7d:6c:5f:65:56:50:fb:d2:0e:4f:19:b3:01:5a:de:84:b4:
1c:48:91:4b:e8:b9:68:6d:36:57:8c:7a:de:64:ca:51:4c:74:
8e:f5:4c:1b:d0:53:bc:05:92:59:a8:30:47:d6:96:9d:7e:3a:
6a:b5:ef:8c:ed:62:75:1e:1a:ad:1e:d4:0f:df:d9:b2:19:68:
11:6e:b1:03:eb:65:5f:83:0b:cc:a1:05:5d:0d:1e:54:09:6d:
62:eb:cb:bb:66:c2:c9:eb:7f:45:a0:57:1c:79:5e:dd:bb:c6:
ba:3e:b4:4d:46:66:cd:cf:1e:45:66:81:c1:4f:84:4d:38:9f:
1b:61:8c:6e:2e:2f:ff:5d:27:76:46:36:35:78:36:5d:b4:8d:
63:5e:86:51:25:90:ee:40:3f:f1:cc:d9:07:b3:79:85:f3:47:
64:11:a2:4d:2b:e1:d6:07:5a:a4:49:b5:82:1b:80:47:0f:c3:
16:bf:32:f3:e5:83:bc:9d:e1:43:f1:9b:3a:aa:6a:62:17:c9:
c8:4a:29:df:0d:97:ea:fd:b0:cd:d2:18:1d:d1:26:d2:b7:f3:
bc:8f:32:d2:e9:89:fa:ad:dd:d1:bc:c4:ea:0e:93:12:e7:52:
23:c5:39:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:52:07 2025 by rpki-client