Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/8eSZNkxhMpH3hUusHxZKfYGN428.roa
File: 8eSZNkxhMpH3hUusHxZKfYGN428.roa (raw, json)
Hash identifier: CaT7AmuDtLCoAa/D8K8kvuXkR0saTwmRNPCVFyZVC/I=
Subject key identifier: F1:E4:99:36:4C:61:32:91:F7:85:4B:AC:1F:16:4A:7D:81:8D:E3:6F
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 1700
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/8eSZNkxhMpH3hUusHxZKfYGN428.roa
Signing time: Wed 13 Mar 2024 01:21:52 +0000
ROA not before: Wed 13 Mar 2024 01:21:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 58466
IP address blocks: 42.240.128.0/20 maxlen: 20
42.240.144.0/20 maxlen: 20
42.240.160.0/20 maxlen: 20
106.75.128.0/20 maxlen: 20
106.75.144.0/20 maxlen: 20
106.75.160.0/20 maxlen: 20
106.75.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5888 (0x1700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Mar 13 01:21:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F1E499364C613291F7854BAC1F164A7D818DE36F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:89:d7:7a:ba:50:89:77:bc:40:e2:4e:a6:
dd:bc:46:b7:20:db:36:91:4a:aa:56:50:f9:80:fe:
67:65:80:07:66:6e:63:8c:36:70:32:0c:25:53:65:
3a:63:a2:c5:ee:e1:53:89:04:8f:33:47:62:53:24:
77:09:36:12:ad:dc:81:65:25:7c:a6:a8:b4:8a:88:
ee:24:f8:08:ab:2d:8f:14:3f:3b:bc:86:cc:ba:20:
33:a4:b0:a1:bb:57:d3:32:01:4c:2b:ec:0c:d4:77:
7d:4e:08:96:aa:ae:2c:89:91:20:fa:e6:c8:17:37:
47:4b:9b:6c:8b:b8:35:a5:4a:48:6f:ce:e4:c7:86:
a5:58:a6:ed:96:e6:7a:61:75:10:3a:bb:fc:e5:9d:
68:bb:c9:dc:34:9d:e7:54:f3:15:e0:8b:2d:ef:12:
ca:cd:ac:64:16:d2:ac:ea:af:3f:61:4a:ca:1f:d0:
b9:ed:f2:25:14:e3:da:e3:2e:69:cc:6f:78:d7:3e:
00:89:a3:b0:e8:e1:43:be:9f:13:bb:e6:aa:ec:41:
37:b6:fe:d1:7a:6b:cd:45:10:e5:b6:aa:15:84:5d:
65:14:9a:d9:a1:1e:3e:5c:2a:79:98:cb:be:41:fe:
73:21:a2:18:36:a3:b6:9a:78:76:65:f7:28:04:55:
eb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E4:99:36:4C:61:32:91:F7:85:4B:AC:1F:16:4A:7D:81:8D:E3:6F
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/8eSZNkxhMpH3hUusHxZKfYGN428.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.240.128.0-42.240.175.255
106.75.128.0/18
Signature Algorithm: sha256WithRSAEncryption
87:35:dd:d7:d2:cc:c2:5b:c3:f3:44:9d:bc:43:ce:a3:ab:a9:
21:0e:84:41:04:f3:7d:80:04:d2:34:db:a5:47:f6:4d:45:e8:
5b:80:8a:b9:04:40:22:35:37:ce:75:50:47:8b:46:46:36:20:
4e:bc:20:f5:11:77:dd:68:c6:8e:e4:78:49:e6:0c:27:63:36:
24:4f:ff:19:27:2c:47:27:d9:5a:70:fe:94:1f:0e:ac:d9:41:
82:bf:d9:47:79:55:41:01:fc:05:d2:09:46:0f:58:86:8d:64:
8c:6b:3a:54:dd:06:80:39:cf:7d:06:e3:8e:63:18:4f:88:6d:
fc:68:78:22:92:64:b6:2e:5a:11:17:ff:6e:d7:35:ed:c2:d8:
7d:74:04:dc:ea:00:3b:40:06:1c:a8:97:1e:45:82:bd:8c:dd:
3f:3c:6f:4f:26:9b:9a:58:9a:d9:93:31:53:6b:53:b7:50:bc:
b6:69:c1:0d:71:6e:a6:5a:39:45:f7:5c:50:97:56:74:2c:c8:
30:de:29:7d:9f:07:40:3b:78:86:c4:e8:fd:b1:03:e4:56:80:
e4:b7:a3:51:c8:1d:8e:99:2b:a3:bb:de:11:26:4c:25:61:98:
d3:dd:72:50:b1:8e:36:4c:55:b3:af:8d:13:d4:5f:6d:ae:66:
b2:42:10:fe
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgICFwAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3
MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNDAzMTMw
MTIxNTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEYxRTQ5OTM2NEM2MTMy
OTFGNzg1NEJBQzFGMTY0QTdEODE4REUzNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGvonXerpQiXe8QOJOpt28Rrcg2zaRSqpWUPmA/mdlgAdmbmOM
NnAyDCVTZTpjosXu4VOJBI8zR2JTJHcJNhKt3IFlJXymqLSKiO4k+AirLY8UPzu8
hsy6IDOksKG7V9MyAUwr7AzUd31OCJaqriyJkSD65sgXN0dLm2yLuDWlSkhvzuTH
hqVYpu2W5nphdRA6u/zlnWi7ydw0nedU8xXgiy3vEsrNrGQW0qzqrz9hSsof0Lnt
8iUU49rjLmnMb3jXPgCJo7Do4UO+nxO75qrsQTe2/tF6a81FEOW2qhWEXWUUmtmh
Hj5cKnmYy75B/nMhohg2o7aaeHZl9ygEVetTAgMBAAGjggH/MIIB+zAdBgNVHQ4E
FgQU8eSZNkxhMpH3hUusHxZKfYGN428wHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI
l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3
L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3LzhlU1pOa3hoTXBIM2hV
dXNIeFpLZllHTjQyOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwLQYIKwYBBQUHAQcBAf8EHjAcMBoEAgABMBQw
DAMEByrwgAMEBCrwoAMEBmpLgDANBgkqhkiG9w0BAQsFAAOCAQEAhzXd19LMwlvD
80SdvEPOo6upIQ6EQQTzfYAE0jTbpUf2TUXoW4CKuQRAIjU3znVQR4tGRjYgTrwg
9RF33WjGjuR4SeYMJ2M2JE//GScsRyfZWnD+lB8OrNlBgr/ZR3lVQQH8BdIJRg9Y
ho1kjGs6VN0GgDnPfQbjjmMYT4ht/Gh4IpJkti5aERf/btc17cLYfXQE3OoAO0AG
HKiXHkWCvYzdPzxvTyabmlia2ZMxU2tTt1C8tmnBDXFuplo5RfdcUJdWdCzIMN4p
fZ8HQDt4hsTo/bED5FaA5LejUcgdjpkro7veESZMJWGY091yULGONkxVs6+NE9Rf
ba5mskIQ/g==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:24 2025 by rpki-client