Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/zKw0BaGm42oXo1MqQfbVDmTnbPI.roa
File: zKw0BaGm42oXo1MqQfbVDmTnbPI.roa (raw, json)
Hash identifier: Y7+hELQnMlWEWoSmuf9L4/+l69G3BCHTT1x8eSQ5EKA=
Subject key identifier: CC:AC:34:05:A1:A6:E3:6A:17:A3:53:2A:41:F6:D5:0E:64:E7:6C:F2
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0828
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/zKw0BaGm42oXo1MqQfbVDmTnbPI.roa
Signing time: Fri 23 May 2025 07:36:34 +0000
ROA not before: Fri 23 May 2025 07:36:34 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24400
IP address blocks: 223.161.238.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2088 (0x828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: May 23 07:36:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CCAC3405A1A6E36A17A3532A41F6D50E64E76CF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:d1:a6:07:40:a2:81:db:95:57:e4:0d:bc:
e9:30:f6:e3:47:b4:61:3e:17:11:41:31:aa:75:e1:
ec:72:d6:f9:e0:37:bb:ee:47:26:bb:48:97:8c:c1:
96:83:ef:28:7d:e7:96:e1:a2:61:22:8b:4f:56:f4:
f8:a7:4b:1b:c4:a2:e9:b3:8b:b9:a1:e9:4a:43:a3:
b7:21:8e:75:8f:aa:58:c8:ee:d2:15:18:b1:f8:d0:
d4:34:6a:d4:3d:c8:7d:d2:5a:e1:91:fc:a3:6a:e0:
c7:97:67:f4:bd:80:04:fc:f8:8d:67:49:73:84:cf:
aa:b5:f1:2a:92:6c:b4:3f:72:68:76:35:a0:8f:00:
eb:b2:14:ab:67:ad:6e:7e:14:44:9a:a4:97:01:4a:
22:61:11:14:2c:6d:da:96:3c:05:05:ab:c1:25:36:
6a:ab:6b:4a:9e:aa:9a:40:d9:49:a8:f0:0d:4d:5f:
27:65:bb:0c:0d:d7:84:89:14:44:5c:ac:98:75:2b:
a6:e7:62:d7:f1:30:98:0c:44:70:d1:d7:a7:e2:43:
44:c5:4f:a5:81:a5:0b:89:da:9a:eb:60:a6:73:00:
e2:04:bd:6c:94:cd:9b:46:b3:ac:7b:9f:13:23:f5:
e3:e7:de:3d:da:13:c4:1e:51:bc:08:ea:f8:b2:9b:
a0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AC:34:05:A1:A6:E3:6A:17:A3:53:2A:41:F6:D5:0E:64:E7:6C:F2
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/zKw0BaGm42oXo1MqQfbVDmTnbPI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.161.238.0/23
Signature Algorithm: sha256WithRSAEncryption
22:53:5a:a4:68:3a:53:e5:3a:f4:31:e1:63:cc:18:70:1f:7c:
94:49:13:8e:45:c7:46:c2:f3:c0:31:d9:ea:74:10:34:01:fc:
b9:f8:21:5a:e6:96:52:54:15:c4:ff:86:8d:0c:c0:8a:3e:11:
b8:a5:a5:fb:50:f9:87:64:79:00:95:e1:a8:5c:20:94:5d:7d:
49:df:5b:49:eb:d7:94:1e:c5:11:32:6f:a5:cd:43:fb:f2:7e:
8b:16:8c:32:94:64:02:3f:e2:d6:d2:f0:dd:12:08:67:77:ad:
8a:24:57:f0:6e:d8:08:ff:d0:37:de:8b:9d:fa:1a:31:5b:d2:
64:34:43:97:39:1e:36:62:45:8d:8e:e2:90:f6:5c:1d:ad:a9:
1b:cf:89:b5:18:09:36:e7:c8:6c:c3:90:d0:61:06:cb:8d:eb:
07:5e:89:cd:8e:4a:5e:19:74:0f:83:7d:7c:4f:50:14:2f:bd:
73:5d:1d:31:15:f3:17:bc:d6:0f:9a:0c:e8:6d:6c:73:6c:d0:
d6:f0:f6:d6:b0:05:4f:a7:60:6b:2a:9c:09:7f:92:48:3f:69:
06:2e:1c:9b:79:d8:37:75:98:3b:69:92:ff:57:2f:9b:ea:25:
43:7c:6e:dc:bc:c6:61:f3:e2:85:c0:f8:a7:15:82:6d:f3:77:
b0:a6:f4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:02:20 2025 by rpki-client