Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/yACR8lpCRzyPkfq4JvsphlwvZ-g.roa
File: yACR8lpCRzyPkfq4JvsphlwvZ-g.roa (raw, json)
Hash identifier: WbnfNgBkE4U8Gc0KLtyTt+L+FFrQ2v0/R7MxYIQpiCA=
Subject key identifier: C8:00:91:F2:5A:42:47:3C:8F:91:FA:B8:26:FB:29:86:5C:2F:67:E8
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 082C
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/yACR8lpCRzyPkfq4JvsphlwvZ-g.roa
Signing time: Fri 23 May 2025 07:36:36 +0000
ROA not before: Fri 23 May 2025 07:36:36 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 9808
IP address blocks: 223.161.216.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2092 (0x82c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: May 23 07:36:36 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C80091F25A42473C8F91FAB826FB29865C2F67E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8d:03:f4:6d:25:a5:c2:c6:85:33:4c:f7:98:
36:ba:b1:eb:54:dc:1d:df:74:be:73:12:19:43:6a:
e9:cc:1a:3b:91:54:0d:f2:73:67:b0:00:f2:17:7f:
a5:02:e2:dd:ca:bd:03:c1:73:7e:0a:17:56:b7:82:
e5:22:91:a9:f4:5e:44:f3:b1:bb:ea:a7:c8:84:dd:
67:a4:16:75:be:55:8c:94:dc:14:34:83:fc:ae:3f:
5c:90:7c:05:81:4f:a6:f6:84:38:fe:9a:b6:b5:87:
46:1c:42:14:2b:73:1b:ab:a2:4c:07:b9:7b:a9:ef:
3c:99:b9:fd:72:72:5b:c2:29:76:79:64:0d:fd:96:
70:e6:86:28:f9:28:ca:11:c3:a3:b4:de:71:e9:f5:
7a:df:fa:f5:ff:aa:b0:10:05:27:95:ea:13:52:2e:
77:80:e5:96:93:c4:5f:ad:24:74:c5:9f:47:8a:5c:
51:b3:76:26:5e:5c:73:c5:bb:54:1e:27:07:ff:23:
a1:65:ab:e8:f5:38:59:a9:a1:03:84:f0:94:0d:b7:
3d:7b:d7:19:b7:7c:1c:bd:25:5b:2d:b2:11:e9:f0:
36:2a:6e:f8:06:54:8d:25:c6:88:60:a5:d7:d7:a2:
ea:8f:d4:6d:a8:eb:95:5c:df:d9:5d:61:e8:8c:d5:
3e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:00:91:F2:5A:42:47:3C:8F:91:FA:B8:26:FB:29:86:5C:2F:67:E8
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/yACR8lpCRzyPkfq4JvsphlwvZ-g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.161.216.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:fc:fb:fe:5d:78:fa:fe:81:df:85:c8:4c:d2:88:aa:71:5b:
6a:50:67:42:70:08:f7:82:15:e5:d1:14:ff:b5:b7:12:cc:9d:
26:fd:c6:24:a8:f7:3f:cc:0f:a6:5d:df:ff:c4:7b:21:32:af:
5f:32:a5:7c:ae:b6:31:75:43:ba:4c:88:e2:d7:66:d0:fe:04:
cd:77:f7:1f:45:9c:45:36:bb:15:e8:12:24:4b:7c:59:92:bf:
df:fd:af:f5:a8:bc:04:b5:fe:c4:44:fd:9f:11:7e:7e:ac:11:
41:3a:78:b5:3b:c9:08:ee:0e:c4:25:f4:53:0f:98:5a:d4:ca:
1b:d9:42:21:c7:f2:17:e2:ba:88:84:ee:a0:d0:02:1d:21:9d:
2e:62:14:fc:7d:03:88:6d:d8:21:40:ba:c9:96:91:58:36:9a:
d9:e2:1e:ca:5c:05:92:0b:3e:5e:4e:83:bf:69:b8:68:e2:be:
e3:42:cd:12:14:59:64:4f:e2:ea:7f:28:52:3f:b5:78:4c:20:
ff:cb:e3:6d:90:39:38:87:5e:38:37:8f:95:22:c9:14:77:31:
40:c9:e6:1c:0c:26:ee:9e:6f:54:72:86:0d:a4:08:94:6e:e3:
7c:7c:bc:ff:22:e1:79:70:d1:52:0b:ea:41:87:cd:04:74:4b:
1f:93:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:01:47 2025 by rpki-client