Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/j_aknzHBQsWS4GSGe35pMbQYRKU.roa
File: j_aknzHBQsWS4GSGe35pMbQYRKU.roa (raw, json)
Hash identifier: Bc7SrmcT1xsSZXF1Pu896OMrlBE2ImckzSlz8J4OFd0=
Subject key identifier: 8F:F6:A4:9F:31:C1:42:C5:92:E0:64:86:7B:7E:69:31:B4:18:44:A5
Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756
Certificate serial: 06DC
Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/j_aknzHBQsWS4GSGe35pMbQYRKU.roa
Signing time: Tue 01 Apr 2025 09:30:05 +0000
ROA not before: Tue 01 Apr 2025 09:30:05 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 58834
IP address blocks: 119.2.255.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1756 (0x6dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756
Validity
Not Before: Apr 1 09:30:05 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8FF6A49F31C142C592E064867B7E6931B41844A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:24:76:bd:a8:eb:d2:f6:38:5b:78:ab:c8:
d5:d4:76:ca:9a:4a:c3:30:3e:4e:0e:e0:ef:02:75:
33:85:16:98:1f:6e:1e:d3:5c:f2:6b:55:c8:5a:30:
64:b0:fb:64:ff:aa:46:9c:ed:17:2b:9d:b3:af:a3:
c3:17:45:21:ad:d6:d6:ce:b4:fe:63:ad:ad:0d:be:
12:d3:be:d7:83:05:13:0b:22:34:a5:23:10:ad:4c:
71:40:94:30:bc:91:16:a7:eb:9d:b9:bd:60:f3:ff:
dd:b2:4e:22:f1:1a:2c:c0:24:90:66:36:86:fd:a0:
70:93:92:1b:09:40:f1:85:fe:73:53:62:0f:ea:b9:
73:08:2e:28:5e:fc:dc:02:50:b8:52:ae:ba:64:bd:
16:b8:e7:d0:2e:9b:f7:d6:19:93:ad:99:d9:40:7e:
6d:71:5c:bb:0e:02:b0:f2:2a:42:bb:9e:5c:86:42:
16:6b:f7:51:e3:d3:fd:ba:be:95:95:78:7f:a3:ee:
4b:1f:29:67:32:7d:a8:01:e3:36:18:02:6d:b6:1d:
e6:0f:bb:6e:27:10:6b:0a:37:a4:db:e5:46:2e:ee:
7c:9f:5b:72:d2:f8:84:db:3d:2c:b4:ff:38:f4:a1:
44:85:42:be:79:24:7b:56:3a:c6:3b:63:43:8e:7e:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F6:A4:9F:31:C1:42:C5:92:E0:64:86:7B:7E:69:31:B4:18:44:A5
X509v3 Authority Key Identifier:
keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/j_aknzHBQsWS4GSGe35pMbQYRKU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.2.255.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c6:31:b7:7f:cc:7b:c7:6a:c8:3a:45:d0:35:94:16:12:45:
cf:ca:4b:0e:ef:cb:f9:7c:88:ad:2f:78:3a:07:b2:ec:3a:eb:
4a:d6:e3:98:65:91:44:b6:9d:73:a7:5c:43:65:71:11:3c:7a:
9d:a3:cc:d7:97:14:27:83:7c:55:19:57:f5:b6:30:9e:c0:82:
25:1c:54:84:7b:3b:26:63:c6:94:b8:c5:eb:14:ea:79:c6:c1:
ff:3f:a9:13:36:5d:99:67:ef:d7:86:d9:91:18:d5:8d:0e:31:
cb:02:41:4a:59:44:c1:6a:08:6b:d5:a5:dc:61:8d:8b:d3:54:
77:3a:f8:25:19:5b:5d:0c:1c:9e:d4:3d:9f:fc:0a:f0:e6:ca:
b2:7c:26:5d:a2:57:09:85:28:45:b7:25:39:a5:78:9e:70:47:
06:64:a0:43:93:3f:aa:ed:66:93:9a:aa:b9:94:75:ee:f0:ae:
ed:6f:7e:6e:8e:9d:38:20:7f:25:3c:d4:4b:1b:9a:08:d3:63:
e8:3a:45:70:2e:2d:b2:d3:32:35:f4:44:3f:8a:3a:ee:bc:8e:
b7:ae:cb:d7:77:d6:e1:ae:bc:8b:cd:fb:33:01:f1:47:e4:39:
e7:45:fc:14:bc:66:de:f0:ca:36:b2:68:c4:d0:e4:f2:b7:dc:
8e:b5:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:14:11 2025 by rpki-client