Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/64/-kvC1odFCKGfYwuP6kDSWCxa5cs.roa
File: -kvC1odFCKGfYwuP6kDSWCxa5cs.roa (raw, json)
Hash identifier: tnU1N852eOToaS3ilm0JWRHgYOaWT3bJAfStolGhwEI=
Subject key identifier: FA:4B:C2:D6:87:45:08:A1:9F:63:0B:8F:EA:40:D2:58:2C:5A:E5:CB
Certificate issuer: /CN=5EB8C57D72F7946DD7B2420599288ECA153CB709
Certificate serial: 06
Authority key identifier: 5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/-kvC1odFCKGfYwuP6kDSWCxa5cs.roa
Signing time: Mon 26 May 2025 00:46:37 +0000
ROA not before: Mon 26 May 2025 00:46:37 +0000
ROA not after: Tue 26 May 2026 00:40:26 +0000
asID: 23724
IP address blocks: 211.150.0.0/18 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5EB8C57D72F7946DD7B2420599288ECA153CB709
Validity
Not Before: May 26 00:46:37 2025 GMT
Not After : May 26 00:40:26 2026 GMT
Subject: CN=FA4BC2D6874508A19F630B8FEA40D2582C5AE5CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:be:fe:02:7b:4f:4e:ac:f9:be:a3:a2:c7:
db:75:9a:3b:79:4b:6f:cd:d4:1d:f2:ca:0b:a9:f2:
bd:1f:f3:cb:f7:5f:bf:60:23:b4:b6:34:4f:d2:16:
bd:f1:05:71:9f:87:f6:3f:7a:cf:10:24:1c:9b:70:
c0:86:2d:b4:93:bb:c8:39:95:da:00:de:ae:24:d3:
16:90:93:93:94:5e:11:f7:d3:35:b1:48:a3:20:c3:
4a:2e:85:95:a3:8a:31:e7:1c:15:dc:c8:6e:7b:32:
d6:9e:ca:00:8f:7b:57:db:79:65:59:4b:1b:7d:04:
a5:d3:40:1d:e2:0d:5f:28:e8:cd:39:d5:73:4c:83:
98:d9:18:1e:3f:11:cf:d1:50:8c:7d:f6:9c:30:ed:
b8:22:d4:98:67:02:32:38:84:41:1c:98:af:84:29:
48:ed:f9:73:ea:5f:79:7d:06:97:2f:2a:9a:c3:d8:
7d:e1:b0:8b:71:b1:c6:13:6a:47:0b:ad:0a:78:c7:
a2:ba:07:cf:21:50:5a:c6:6a:8c:d7:33:47:e1:ef:
a5:44:ce:db:d3:d9:fd:c5:82:66:e3:e5:c4:a8:3f:
7c:60:53:82:39:cb:f0:0c:42:c0:ce:51:e1:ae:a1:
fa:a5:0d:cd:0d:ef:74:c2:24:d0:1e:26:49:98:c4:
08:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4B:C2:D6:87:45:08:A1:9F:63:0B:8F:EA:40:D2:58:2C:5A:E5:CB
X509v3 Authority Key Identifier:
keyid:5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/-kvC1odFCKGfYwuP6kDSWCxa5cs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.150.0.0/18
Signature Algorithm: sha256WithRSAEncryption
3f:31:f9:8c:51:cb:16:c2:ad:6e:85:ff:cd:03:c6:d7:31:3e:
bb:aa:90:ce:04:96:08:21:ab:99:0b:6a:8f:8c:df:8a:4c:82:
4d:bf:23:7a:e9:05:13:c7:65:22:68:41:bb:e0:48:c1:9a:15:
b6:3e:53:0c:6d:fa:6d:3d:0e:e4:d5:32:1c:d1:9b:4d:42:34:
24:2a:22:16:83:7a:9f:ea:88:51:8b:30:21:d2:70:cd:fd:7f:
1e:18:ea:bb:62:99:da:6a:d0:41:9e:07:31:0d:87:ab:6b:ec:
6e:bd:72:39:3c:15:b7:b4:7b:c3:0f:4b:ad:d3:f2:b2:ee:15:
28:68:60:7f:dc:76:cc:78:5e:71:8a:8c:ec:20:1f:5c:cf:9f:
c5:1a:af:df:bd:50:d7:75:43:cf:68:38:9b:20:e0:3e:47:e8:
d5:69:83:fc:2a:ee:05:a9:97:c4:63:c8:96:47:1d:f0:1e:e4:
84:f0:f8:28:7b:42:bf:d4:6e:76:fb:62:c4:0a:b4:56:56:06:
5e:63:fa:38:eb:f1:ca:51:9c:ea:45:06:61:2d:bf:f0:0c:66:
f5:7f:62:19:0e:95:f2:64:d2:82:b0:29:0f:26:21:27:b1:98:
17:b9:8c:47:fa:85:86:93:b6:02:20:ca:56:da:a6:63:7b:f9:
53:9c:df:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:46 2025 by rpki-client