Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/fLLpZum3X6sl-4222lszzyxsQ2g.roa
File: fLLpZum3X6sl-4222lszzyxsQ2g.roa (raw, json)
Hash identifier: qvOKsBb0562nNXeR+Q48TUG9LdWMghvi+YbMCN7tprE=
Subject key identifier: 7C:B2:E9:66:E9:B7:5F:AB:25:FB:8D:B6:DA:5B:33:CF:2C:6C:43:68
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1DE9
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/fLLpZum3X6sl-4222lszzyxsQ2g.roa
Signing time: Sat 13 Sep 2025 03:04:41 +0000
ROA not before: Sat 13 Sep 2025 03:04:41 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4812
IP address blocks: 150.242.238.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7657 (0x1de9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 13 03:04:41 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=7CB2E966E9B75FAB25FB8DB6DA5B33CF2C6C4368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:03:7e:4c:b7:0f:a1:d3:e5:b6:68:33:a3:
87:f0:10:72:80:21:de:4c:98:e0:6f:c5:40:ba:96:
31:f0:fb:a7:d4:e0:09:c6:3b:58:a1:50:17:63:e5:
a3:41:12:59:a4:fd:10:8a:f7:ac:23:29:b2:19:6e:
17:ca:f6:85:87:ba:b3:49:86:28:1d:0c:c2:0b:6e:
d9:7e:57:b5:f2:15:a0:65:b7:fc:00:50:ac:1c:4d:
ac:43:9e:55:b1:8c:6e:67:44:f4:42:4f:61:b5:c4:
ac:cf:07:cb:12:e4:41:13:1f:f9:97:b6:d6:7b:82:
81:34:4c:2e:15:44:af:75:ab:0c:d1:d7:e5:1a:34:
3e:86:32:fb:a9:fc:58:f4:c9:50:b3:36:08:74:66:
3a:bd:6f:ed:08:82:a2:a3:87:77:d7:41:e9:b4:0c:
7e:ac:d2:b6:19:a5:e9:93:b4:36:1b:2d:ce:89:4b:
d8:27:14:c4:65:6c:39:d3:a7:5d:72:9d:5b:94:fe:
e9:9a:01:77:a1:4c:21:ce:d4:4d:f0:08:98:bc:29:
91:5c:09:56:2f:d6:e2:67:4c:e4:29:7b:a6:fb:69:
e8:c3:bb:74:e1:e5:f4:e1:fb:94:52:66:09:72:28:
80:42:6f:93:ca:4f:08:4a:78:36:8a:cb:f2:4e:5d:
45:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B2:E9:66:E9:B7:5F:AB:25:FB:8D:B6:DA:5B:33:CF:2C:6C:43:68
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/fLLpZum3X6sl-4222lszzyxsQ2g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.242.238.0/23
Signature Algorithm: sha256WithRSAEncryption
23:34:10:e9:38:e7:f0:2c:56:6c:9a:a9:04:19:25:4c:97:7f:
8e:21:ce:f5:50:18:4b:85:a1:13:a1:1c:ea:f8:7b:8b:e1:3a:
15:0c:85:71:64:12:fa:f1:3f:63:f0:db:6d:a9:6d:d7:c3:e7:
87:e6:e3:e1:16:ac:9b:29:d8:86:26:71:bd:d3:45:0e:1e:6d:
9c:2c:e0:17:dd:aa:40:29:96:fb:46:6e:4c:d1:1b:68:59:28:
d9:dc:19:fd:69:60:8a:0d:06:8b:e8:d8:51:51:65:f3:a2:62:
eb:35:24:70:b7:be:bb:7c:ce:54:60:39:19:be:c0:31:ca:ec:
64:2d:e2:7d:c3:b4:65:55:6e:7a:4f:fa:08:28:b9:8e:42:f2:
e8:88:b9:50:19:94:cf:43:71:4f:83:81:72:00:b7:c4:0a:d2:
cf:d6:18:32:ff:68:1d:41:5e:0a:cc:4d:4b:b9:9b:f7:61:f2:
fe:fe:d2:a3:6d:db:ae:5d:33:62:d6:71:41:02:29:7d:f1:65:
8f:5a:cc:73:bc:82:7e:f9:cd:09:74:bc:5f:eb:53:23:1c:60:
64:04:22:a3:86:39:fa:bd:d6:14:b6:f2:9e:e6:fe:9b:11:ad:
09:10:4b:a1:7a:b7:0c:51:15:83:25:42:01:84:7b:8e:8e:03:
11:16:ef:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 09:18:18 2025 by rpki-client