Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/_Rv_OdbhX8-stFs5_dbsK3lUAug.roa
File: _Rv_OdbhX8-stFs5_dbsK3lUAug.roa (raw, json)
Hash identifier: COkYo5o7mLCcEL8QbfJHhbN8o4yiZ1ad7iUHgz3PqH0=
Subject key identifier: FD:1B:FF:39:D6:E1:5F:CF:AC:B4:5B:39:FD:D6:EC:2B:79:54:02:E8
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 1705
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/_Rv_OdbhX8-stFs5_dbsK3lUAug.roa
Signing time: Wed 13 Mar 2024 01:21:54 +0000
ROA not before: Wed 13 Mar 2024 01:21:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 4811
IP address blocks: 106.75.208.0/20 maxlen: 20
113.31.96.0/20 maxlen: 20
113.31.112.0/20 maxlen: 20
113.31.144.0/20 maxlen: 20
113.31.160.0/20 maxlen: 20
113.31.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5893 (0x1705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Mar 13 01:21:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FD1BFF39D6E15FCFACB45B39FDD6EC2B795402E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:df:d0:41:c4:fe:32:9a:a0:31:f4:95:c6:
37:9b:c0:cc:ac:d7:af:11:da:eb:ae:8b:0d:3c:52:
24:3f:d2:95:a4:b7:88:a4:f6:19:58:0b:a8:db:78:
41:d9:b0:43:3d:24:35:85:52:0f:42:91:03:2b:ed:
83:f0:2c:94:95:ba:13:94:87:04:43:5a:d9:83:6d:
5b:19:75:08:42:a2:57:a2:52:16:5e:d2:8c:35:8c:
4a:33:86:bc:81:21:b4:5c:fc:4c:18:da:7c:15:7f:
8f:b3:07:05:c8:c5:32:24:ff:74:00:ed:15:85:8c:
1e:a2:53:56:1b:0b:7d:b7:ee:58:6f:9a:b7:b7:3b:
fd:cc:e6:cb:61:81:9d:44:a3:6f:42:c1:a7:f8:ba:
54:97:63:c8:04:36:62:70:0f:87:dc:8e:d6:14:5e:
89:64:30:0d:52:25:9d:f9:ef:4c:50:41:93:31:56:
ba:d9:8a:66:1b:35:7b:f5:f5:f1:e7:95:89:d9:d9:
b6:b7:dd:a2:dc:89:46:7f:40:c8:c0:3d:6b:11:88:
21:9d:5d:a8:3c:14:c5:73:cd:5c:ff:c8:6a:5d:09:
5f:bf:6a:eb:e1:c0:09:82:60:7f:4e:d8:07:a0:0d:
fc:bc:68:61:00:2e:98:ad:b7:92:50:82:81:0b:b3:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1B:FF:39:D6:E1:5F:CF:AC:B4:5B:39:FD:D6:EC:2B:79:54:02:E8
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/_Rv_OdbhX8-stFs5_dbsK3lUAug.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.208.0/20
113.31.96.0/19
113.31.144.0-113.31.191.255
Signature Algorithm: sha256WithRSAEncryption
1d:a0:2d:66:51:12:55:d1:ea:23:ac:f3:a4:93:6f:3c:c2:13:
73:3a:87:8c:e0:82:4a:eb:12:2a:44:15:e4:23:f2:89:02:8b:
cd:64:41:48:f8:a3:32:19:63:3e:ff:d4:05:33:bc:93:c2:a6:
de:c7:6a:b4:04:96:ee:9a:a6:bd:bb:1c:97:d4:76:c2:cd:57:
b5:68:fc:d3:e2:98:ff:13:56:3e:36:f8:32:fe:b3:7e:00:9b:
2e:e0:68:67:f7:b2:30:a5:53:9a:db:82:7d:11:5c:27:9d:08:
a8:80:ce:46:8a:7b:45:5b:ca:d1:42:94:92:f5:ec:06:49:f4:
a2:a3:e9:a5:b7:ae:7d:52:1e:f5:70:11:98:9a:2e:c0:e4:14:
b0:8e:56:5a:ba:4b:39:f0:a5:fd:b0:7e:f5:93:cf:40:3c:3a:
8e:f5:37:f8:b3:d0:af:d9:81:ad:80:f8:33:82:d8:33:88:3a:
a0:25:12:85:aa:d8:c3:ac:d1:06:3b:24:2e:1c:15:13:34:e9:
cd:fd:0f:8c:12:25:17:b0:0b:1e:16:3f:9c:de:1f:66:66:cc:
14:c0:e5:59:f7:7a:7d:a0:d9:65:bd:92:22:86:a0:c7:7d:91:
45:c3:14:fc:df:53:ee:9c:7f:39:99:c9:a1:7d:6e:73:59:80:
5b:be:a0:2d
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICFwUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3
MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNDAzMTMw
MTIxNTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEZEMUJGRjM5RDZFMTVG
Q0ZBQ0I0NUIzOUZERDZFQzJCNzk1NDAyRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZqd/QQcT+MpqgMfSVxjebwMys168R2uuuiw08UiQ/0pWkt4ik
9hlYC6jbeEHZsEM9JDWFUg9CkQMr7YPwLJSVuhOUhwRDWtmDbVsZdQhColeiUhZe
0ow1jEozhryBIbRc/EwY2nwVf4+zBwXIxTIk/3QA7RWFjB6iU1YbC3237lhvmre3
O/3M5sthgZ1Eo29Cwaf4ulSXY8gENmJwD4fcjtYUXolkMA1SJZ3570xQQZMxVrrZ
imYbNXv19fHnlYnZ2ba33aLciUZ/QMjAPWsRiCGdXag8FMVzzVz/yGpdCV+/auvh
wAmCYH9O2AegDfy8aGEALpitt5JQgoELswenAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQU/Rv/OdbhX8+stFs5/dbsK3lUAugwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI
l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3
L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L19Sdl9PZGJoWDgtc3RG
czVfZGJzSzNsVUF1Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgABMBoD
BARqS9ADBAVxH2AwDAMEBHEfkAMEBnEfgDANBgkqhkiG9w0BAQsFAAOCAQEAHaAt
ZlESVdHqI6zzpJNvPMITczqHjOCCSusSKkQV5CPyiQKLzWRBSPijMhljPv/UBTO8
k8Km3sdqtASW7pqmvbscl9R2ws1XtWj80+KY/xNWPjb4Mv6zfgCbLuBoZ/eyMKVT
mtuCfRFcJ50IqIDORop7RVvK0UKUkvXsBkn0oqPppbeufVIe9XARmJouwOQUsI5W
WrpLOfCl/bB+9ZPPQDw6jvU3+LPQr9mBrYD4M4LYM4g6oCUSharYw6zRBjskLhwV
EzTpzf0PjBIlF7ALHhY/nN4fZmbMFMDlWfd6faDZZb2SIoagx32RRcMU/N9T7px/
OZnJoX1uc1mAW76gLQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:56:09 2025 by rpki-client