Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/wY2RYAxGcvrFhY30LJwko1J2vj0.roa
File: wY2RYAxGcvrFhY30LJwko1J2vj0.roa (raw, json)
Hash identifier: 8M987sDbwTOLGxJDZHrGkNJT+889l03r1aDiddeJKcs=
Subject key identifier: C1:8D:91:60:0C:46:72:FA:C5:85:8D:F4:2C:9C:24:A3:52:76:BE:3D
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 0CB3
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/wY2RYAxGcvrFhY30LJwko1J2vj0.roa
Signing time: Fri 27 Jun 2025 14:08:50 +0000
ROA not before: Fri 27 Jun 2025 14:08:50 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 2914
IP address blocks: 124.173.192.0/18 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3251 (0xcb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Jun 27 14:08:50 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C18D91600C4672FAC5858DF42C9C24A35276BE3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:da:62:5e:fe:37:0a:f5:ae:c4:2c:fd:e8:
00:0f:45:55:2b:4a:f2:16:e6:20:cf:db:f4:c6:90:
95:7a:29:33:4c:2b:86:c8:31:52:96:4e:b8:0b:5a:
76:c0:0b:66:c2:ba:99:80:e4:54:da:ac:39:7f:e8:
36:c0:2c:c5:3c:9e:05:91:76:6e:99:19:b9:4d:9a:
36:59:e5:8a:77:6e:1f:3b:7b:4e:97:d1:4c:fd:8d:
74:e6:6e:96:e9:65:aa:52:fe:30:3c:0c:ad:45:3b:
b2:66:4e:7a:17:1b:2e:c4:96:9e:92:7f:62:72:60:
f1:03:6f:25:44:6b:51:58:0e:49:ad:d8:d9:1f:92:
21:76:04:bb:b4:80:96:ca:f9:ef:67:53:d7:49:a2:
9b:a5:d8:cf:0b:8c:cc:63:4a:6e:d0:07:8b:d2:da:
f9:ae:81:81:19:2e:30:7d:e2:41:ea:d0:73:40:47:
82:e5:f8:23:89:df:b8:e4:f5:ee:cb:1b:b6:14:a6:
8f:0e:7a:37:d7:28:5f:76:d2:33:2e:47:72:04:fb:
92:d1:cc:f8:ef:42:1b:fb:b7:89:c1:1c:12:7f:80:
4d:67:3a:9a:59:ec:26:0b:97:c5:0f:61:63:c9:f7:
04:93:90:87:6d:79:4c:5d:b6:4c:af:a6:19:94:e8:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8D:91:60:0C:46:72:FA:C5:85:8D:F4:2C:9C:24:A3:52:76:BE:3D
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/wY2RYAxGcvrFhY30LJwko1J2vj0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.173.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:e4:c6:e7:62:15:bd:90:ee:04:4b:c9:70:6a:91:2c:35:a6:
df:e2:8e:b3:9e:51:03:f1:ae:86:4c:2d:9b:9e:68:13:5c:64:
13:0f:12:3a:41:60:51:91:e5:9f:50:91:48:c3:1a:09:05:35:
af:c7:8b:27:06:c1:06:f5:ac:61:b6:b2:10:70:c6:85:f2:ea:
28:0b:5d:0e:a2:5e:86:1e:f2:a8:6c:7d:b2:e5:d3:01:58:a4:
95:13:84:ce:be:83:df:a3:c9:ce:3f:94:fc:a0:2a:33:9a:66:
9e:b5:3b:13:10:6e:c6:14:d6:42:99:1c:f2:56:12:7e:17:1b:
bf:22:ee:7c:ab:7d:d2:22:75:78:f7:12:c0:d4:61:af:04:11:
9a:50:5f:0f:2f:bc:28:22:d9:00:9f:d9:5b:34:9e:17:6c:9b:
b0:47:4b:36:da:66:37:aa:bc:79:4c:29:20:0d:c9:7a:09:1d:
ce:8d:4a:37:19:6e:76:eb:c3:82:91:a3:ff:bc:10:a0:a0:a8:
53:ed:3e:7d:fe:66:ed:00:f9:65:1b:52:98:03:b4:83:ce:e0:
b3:bb:c9:b4:0e:97:9c:6e:d7:e1:56:a6:ab:cf:c1:7f:81:0e:
47:b3:d2:53:9c:0c:72:22:b6:72:fa:4a:d8:ab:03:93:1d:fe:
be:91:fb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:48:18 2025 by rpki-client