Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/gRN2B1s2Qs9d0LhXwV5XKHALsYQ.roa
File: gRN2B1s2Qs9d0LhXwV5XKHALsYQ.roa (raw, json)
Hash identifier: YwHgMVkqUWXut2Rs4WfXyAC6H7y3BPt8deZJnFjiiAE=
Subject key identifier: 81:13:76:07:5B:36:42:CF:5D:D0:B8:57:C1:5E:57:28:70:0B:B1:84
Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Certificate serial: 2019
Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/gRN2B1s2Qs9d0LhXwV5XKHALsYQ.roa
Signing time: Tue 26 Aug 2025 04:55:24 +0000
ROA not before: Tue 26 Aug 2025 04:55:24 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4808
IP address blocks: 103.249.252.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8217 (0x2019)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Validity
Not Before: Aug 26 04:55:24 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=811376075B3642CF5DD0B857C15E5728700BB184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:33:79:01:96:6d:ee:12:b4:25:16:00:27:
b5:bd:41:d5:84:9a:65:e7:ce:b1:94:af:37:bf:57:
c1:62:3a:df:36:b0:05:03:5e:c7:6b:56:20:d9:f8:
a9:9e:79:ff:78:95:a4:23:e3:e4:61:c7:f6:49:89:
e4:a0:56:80:19:6f:6f:81:ba:3f:c0:79:a2:07:37:
60:3a:20:b5:07:ae:62:45:5e:e2:7f:b7:41:21:bc:
50:bc:af:82:58:35:22:4e:1f:21:ef:36:4f:ff:63:
22:3f:65:ae:ed:6f:e1:11:4e:e6:24:62:ef:63:4c:
59:f8:6c:c7:95:0d:af:6b:6d:51:70:ed:b5:f7:23:
eb:c1:bd:1f:18:0a:e0:32:77:7b:a8:a2:4d:4e:30:
2a:d1:0c:97:b4:e9:df:56:96:6d:1f:dc:68:4a:cb:
a2:25:e1:7d:d3:e9:9e:c2:9c:c6:b4:94:93:b8:70:
33:ba:cf:1c:e4:e2:f9:2f:94:84:ae:1f:bb:8a:45:
16:b2:e4:b8:b0:c6:16:52:ef:7f:6b:07:bd:fd:40:
14:cb:90:2a:05:14:66:2e:c4:a7:3c:0b:de:73:d6:
81:1a:40:d2:55:17:59:d6:9b:30:33:81:e1:2a:d7:
88:b3:3c:2c:28:ef:d6:02:54:a1:8c:80:05:71:91:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:13:76:07:5B:36:42:CF:5D:D0:B8:57:C1:5E:57:28:70:0B:B1:84
X509v3 Authority Key Identifier:
keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/gRN2B1s2Qs9d0LhXwV5XKHALsYQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.249.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:d3:4d:3d:f8:88:d6:57:d5:05:03:d5:f8:a2:ab:79:0e:5b:
0f:fc:ef:51:d4:31:36:54:7c:51:f6:7c:96:61:fa:db:e6:cf:
a8:b6:4d:06:dc:da:0f:6f:be:0e:51:54:1a:fd:5a:7e:6a:08:
84:b3:e4:53:06:6e:a2:7c:84:f9:3e:4d:41:51:4b:18:7f:fc:
c5:5b:e0:92:47:90:69:69:c5:1b:99:c0:9a:60:dc:bc:b9:e5:
09:83:b1:ca:fe:bc:1e:b2:91:f0:ec:3a:4d:00:74:81:46:5d:
b6:bb:0e:e0:9a:9a:1d:3f:c2:e6:37:a4:26:4c:a5:93:1d:4d:
72:e5:89:31:da:12:0d:9f:d5:a0:53:0b:3b:8f:d6:7d:ac:89:
6c:50:cb:b3:3a:f1:d6:88:f4:92:8e:e4:32:44:67:c6:ce:94:
b2:ca:44:10:f9:a7:d0:18:dc:30:1f:f8:db:10:e4:30:70:36:
5a:e1:16:40:47:f6:10:1c:b4:e2:5b:cf:97:41:c8:60:de:6e:
2f:2e:0f:46:b7:8a:05:18:23:e4:10:d2:c5:39:30:53:42:88:
d9:05:f1:e2:33:62:24:d9:93:1d:cb:ab:62:5f:f3:44:e8:cb:
c8:af:40:d9:dd:82:bb:53:29:51:f0:f6:72:01:77:8d:63:77:
35:4b:b9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 09:23:17 2025 by rpki-client