Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/cgbmXCZUa4dSV_mg4YAHr39wdNM.roa
File: cgbmXCZUa4dSV_mg4YAHr39wdNM.roa (raw, json)
Hash identifier: uBYo5m2Hy/OEGX8lBK/l7FS6xRFtbU3FDrQdGX7oPUc=
Subject key identifier: 72:06:E6:5C:26:54:6B:87:52:57:F9:A0:E1:80:07:AF:7F:70:74:D3
Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Certificate serial: 14E0
Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/cgbmXCZUa4dSV_mg4YAHr39wdNM.roa
Signing time: Thu 11 Sep 2025 07:46:46 +0000
ROA not before: Thu 11 Sep 2025 07:46:46 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4812
IP address blocks: 120.136.156.0/22 maxlen: 25
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5344 (0x14e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Validity
Not Before: Sep 11 07:46:46 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=7206E65C26546B875257F9A0E18007AF7F7074D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:7d:36:9c:08:45:99:d1:97:c5:45:99:8d:
44:67:03:bf:a6:64:3f:12:31:9a:d3:1e:21:1d:aa:
ef:9f:29:33:eb:a3:bd:7c:35:e7:51:4b:27:a7:42:
da:63:cc:10:82:4b:4a:b4:f0:0d:8d:6b:09:e8:5c:
e6:02:9d:fb:c9:65:fa:1a:5f:4a:76:09:e8:d5:a6:
9d:d5:ca:11:03:8e:30:52:73:a0:ca:15:96:55:17:
55:26:85:ff:d8:d2:f4:62:10:0b:43:ad:53:b0:dc:
ce:77:c7:bd:e0:f8:00:e6:59:8a:b1:21:76:0c:78:
28:e1:7a:a6:57:7e:e8:bf:80:dc:37:3c:c4:00:ec:
02:66:2f:22:e0:88:70:6f:45:03:07:b2:34:42:7d:
c0:73:07:5b:51:b7:63:f6:74:19:2b:b1:8c:7e:38:
aa:d0:2b:a6:7e:22:3f:22:b0:73:87:18:46:86:84:
31:da:f9:44:a6:48:5e:1d:a6:5a:bc:2b:11:a4:31:
c8:34:34:29:b7:30:50:ae:3f:4b:78:49:f5:ae:cf:
f1:c4:49:77:53:dd:d6:80:98:ce:a1:8f:fa:fe:d8:
3f:3c:0b:cc:7c:27:ec:13:a6:42:16:67:1e:b9:31:
33:ba:e1:b8:92:8b:83:0f:9e:7e:68:61:cb:0e:a4:
68:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:06:E6:5C:26:54:6B:87:52:57:F9:A0:E1:80:07:AF:7F:70:74:D3
X509v3 Authority Key Identifier:
keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/cgbmXCZUa4dSV_mg4YAHr39wdNM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.136.156.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:32:be:26:db:e3:de:a2:f4:65:08:9b:d4:48:e3:23:fd:a6:
6e:ed:0c:d0:1c:45:e3:ca:bf:9a:8a:f4:31:a1:26:a1:ff:76:
dc:3f:f8:3d:51:fb:43:ca:a7:79:e2:9e:66:3f:de:6b:3c:ea:
94:3b:ca:d2:3d:ca:25:42:38:59:7f:ca:8c:f4:f7:a7:2a:27:
3d:7f:78:81:4f:ac:49:73:e9:80:4a:7a:a9:49:05:94:c0:d7:
14:a0:1f:9f:2f:c1:61:d2:d5:9c:e6:6e:e2:85:32:e4:22:2f:
c0:95:56:a6:2b:3a:23:23:79:c4:45:da:bd:97:2d:af:0d:c6:
b1:05:4d:4a:43:2e:5e:ee:09:3e:d8:cf:8d:8b:b1:74:15:92:
c2:25:13:ba:5d:00:e2:01:15:66:cf:79:70:42:36:22:b1:3e:
15:c9:34:dd:5f:2b:14:df:5e:70:29:f1:8c:47:95:45:b6:01:
2a:43:8e:4b:aa:82:fc:6c:12:9c:ed:8c:8d:34:4e:47:db:82:
63:ae:92:e9:75:ab:ec:c4:49:99:a4:b6:7c:84:5a:e2:b6:8d:
0a:21:41:ef:a0:1c:11:1e:df:bc:c6:e9:b7:59:1f:11:69:38:
a7:a4:92:db:a8:67:f4:30:fd:f9:19:0e:a9:d2:a9:19:dc:39:
5a:d5:c3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 09:18:16 2025 by rpki-client