Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/o_zcDUzA-OddXBnfwyo86qLH_Dk.roa
File: o_zcDUzA-OddXBnfwyo86qLH_Dk.roa (raw, json)
Hash identifier: Z4TNjqY3Kr2dhXgpfF9Vknvk0MR9Txn0nnaUVXE1FxI=
Subject key identifier: A3:FC:DC:0D:4C:C0:F8:E7:5D:5C:19:DF:C3:2A:3C:EA:A2:C7:FC:39
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0805
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/o_zcDUzA-OddXBnfwyo86qLH_Dk.roa
Signing time: Fri 23 May 2025 07:07:22 +0000
ROA not before: Fri 23 May 2025 07:07:22 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 56048
IP address blocks: 223.160.128.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: May 23 07:07:22 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A3FCDC0D4CC0F8E75D5C19DFC32A3CEAA2C7FC39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:46:02:58:08:a6:67:80:37:44:32:f4:9e:
bf:cf:4e:21:6b:2e:6e:cf:4c:2e:c3:c8:22:9e:f1:
d5:61:f8:8c:72:9b:48:58:d6:4d:49:09:c7:db:94:
ad:ee:18:8a:0b:bc:b6:c7:c7:e1:91:cb:57:85:87:
10:75:ad:ac:fb:83:b9:3a:20:0a:eb:60:32:1a:43:
07:58:18:2e:7e:9b:6d:e3:ef:57:52:ce:de:a7:14:
47:f2:4d:71:55:a8:5d:bc:ec:1e:25:e4:5a:ec:63:
54:14:a2:3f:86:8d:cc:e8:10:dc:7a:3d:7a:6c:16:
e4:0f:2f:91:30:fa:d2:00:13:74:54:2b:68:87:e0:
0e:21:26:9e:36:5e:45:87:86:9e:81:0e:ca:35:5b:
b3:85:17:c0:59:03:7b:3a:15:77:ce:04:23:52:ef:
ba:26:e5:8c:08:3d:4c:a8:1e:ac:73:c2:97:a1:0e:
51:06:92:fc:5e:92:34:c2:7e:6f:dd:f8:72:fe:cc:
5f:a9:da:b5:2e:a9:c3:d3:c7:f6:a0:c0:c4:d6:a3:
24:7c:65:54:26:5b:57:cd:3f:cb:27:02:f7:a3:0f:
38:29:d7:f2:31:69:80:1e:7a:6b:be:04:ba:50:d1:
ac:74:cd:18:1f:08:cf:1c:8e:6e:dd:ca:ab:7d:ed:
1b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FC:DC:0D:4C:C0:F8:E7:5D:5C:19:DF:C3:2A:3C:EA:A2:C7:FC:39
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/o_zcDUzA-OddXBnfwyo86qLH_Dk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.160.128.0/22
Signature Algorithm: sha256WithRSAEncryption
97:e4:a5:fe:c7:5f:06:d1:7c:1b:97:14:a5:70:7d:a1:a9:e8:
8b:8e:a5:40:5b:df:3d:07:3b:e1:2e:dc:77:91:0d:55:bb:4f:
a3:c3:70:d0:d5:52:8c:2b:15:de:09:4f:6b:88:59:60:c1:e7:
bf:6e:a8:99:09:11:a6:ef:ef:a2:6b:0f:05:d3:a3:bd:04:06:
d2:6f:98:28:3c:6c:45:bc:19:fe:65:94:22:5b:e7:60:12:e9:
19:37:a9:2d:b8:cb:8d:6f:80:22:02:ca:0b:f7:27:ea:2b:8c:
de:e8:89:e9:f0:12:12:f5:50:80:13:b6:41:40:31:c9:b8:af:
81:c5:a2:25:e9:c1:54:18:ec:c8:02:fb:8a:24:41:be:d5:93:
69:1c:84:0e:32:33:86:fb:9e:0a:3e:e0:1b:2d:13:e3:e9:00:
88:e2:54:95:90:3a:47:eb:4e:6f:6f:c0:0d:56:21:83:7a:8b:
e7:6e:49:c6:3e:56:3b:1b:24:df:d1:ef:d8:5a:c5:f9:cb:7e:
63:0a:50:cd:01:06:ee:03:76:99:24:52:d9:63:10:55:35:6e:
0d:c0:de:70:f4:65:7c:ec:c4:74:69:4c:61:58:18:66:52:84:
c3:e7:ef:f7:72:59:c4:54:8c:2e:27:60:09:bf:db:33:9d:92:
27:ba:9b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:59:06 2025 by rpki-client