Route Origin Authorization
$ rpki-client -vvf krill.nic.edu.cn/repo/nic/1/3130332e3136352e3131302e302f32372d3237203d3e2034353338.roa
File: 3130332e3136352e3131302e302f32372d3237203d3e2034353338.roa (raw, json)
Hash identifier: ATJy8xJ/9ojG0o/bLkk1vF9N8DN5WeaSPoiiaDzNZJo=
Subject key identifier: 92:6D:A5:12:CA:E3:A2:A8:B8:DD:A7:CB:4E:40:95:4B:B6:3D:F0:21
Certificate issuer: /CN=C6F78F62408927F518ECE35D446D4E99A20B6318
Certificate serial: 435BE5363308D74844B93C9B55BF4126851392D0
Authority key identifier: C6:F7:8F:62:40:89:27:F5:18:EC:E3:5D:44:6D:4E:99:A2:0B:63:18
Authority info access: rsync://rpki.cernet.edu.cn/repo/cernet/1/C6F78F62408927F518ECE35D446D4E99A20B6318.cer
Subject info access: rsync://krill.nic.edu.cn/repo/nic/1/3130332e3136352e3131302e302f32372d3237203d3e2034353338.roa
Signing time: Wed 13 Aug 2025 03:07:25 +0000
ROA not before: Wed 13 Aug 2025 03:02:25 +0000
ROA not after: Wed 12 Aug 2026 03:07:25 +0000
asID: 4538
IP address blocks: 103.165.110.0/27 maxlen: 27
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5b:e5:36:33:08:d7:48:44:b9:3c:9b:55:bf:41:26:85:13:92:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6F78F62408927F518ECE35D446D4E99A20B6318
Validity
Not Before: Aug 13 03:02:25 2025 GMT
Not After : Aug 12 03:07:25 2026 GMT
Subject: CN=926DA512CAE3A2A8B8DDA7CB4E40954BB63DF021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5a:ab:88:db:2f:3e:be:80:8d:73:3a:7c:10:
f7:c8:ed:00:40:f8:c2:64:73:1b:af:81:58:e7:cc:
dd:d9:45:be:b3:7e:40:5c:8d:c3:35:fc:98:d7:5a:
34:41:06:5b:27:75:0f:1b:65:e6:04:ac:05:29:10:
99:1f:9d:4c:25:fd:1b:02:89:2e:be:d1:35:61:2d:
07:b9:59:be:7f:fd:f7:21:a6:58:26:f2:51:1d:cd:
76:f5:60:33:be:b0:d3:f4:8b:2b:a0:8d:06:2a:d4:
d1:69:38:49:da:30:dd:c5:07:7b:44:d2:c3:ad:65:
14:ac:e5:c0:e4:fd:1b:86:f9:35:41:08:52:1e:98:
74:b2:7f:e7:55:7a:ca:c1:66:a6:77:f4:f5:3b:09:
14:d5:82:dd:2f:21:d8:ea:b4:b8:46:92:4f:72:c1:
4d:1b:fc:20:28:5c:14:f0:09:d5:33:9d:c0:cd:40:
e4:38:18:79:f4:03:7e:44:5b:ca:66:f3:99:64:e8:
9f:c4:76:71:ca:30:95:35:6e:0c:ed:8c:d5:31:a2:
d8:e9:67:be:cb:ae:53:96:be:93:05:48:2e:db:20:
0b:58:db:20:f1:8c:b6:f1:1d:ab:8e:20:da:bb:53:
67:78:4c:48:cc:86:af:3f:1d:c9:b9:fb:3b:92:56:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6D:A5:12:CA:E3:A2:A8:B8:DD:A7:CB:4E:40:95:4B:B6:3D:F0:21
X509v3 Authority Key Identifier:
keyid:C6:F7:8F:62:40:89:27:F5:18:EC:E3:5D:44:6D:4E:99:A2:0B:63:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.nic.edu.cn/repo/nic/1/C6F78F62408927F518ECE35D446D4E99A20B6318.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/C6F78F62408927F518ECE35D446D4E99A20B6318.cer
Subject Information Access:
Signed Object - URI:rsync://krill.nic.edu.cn/repo/nic/1/3130332e3136352e3131302e302f32372d3237203d3e2034353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.110.0/27
Signature Algorithm: sha256WithRSAEncryption
0f:9e:08:e9:83:e0:7f:c9:07:06:3d:14:37:f2:8a:ac:03:03:
63:9b:94:0e:d6:3b:1c:fc:04:22:76:0b:fd:bf:de:1e:87:d1:
41:1e:fb:aa:bf:bc:6b:3b:26:45:7d:46:64:c0:27:33:55:1a:
bd:d6:77:d0:7d:d1:7b:c0:0c:f3:a6:59:ec:36:cc:a5:07:a0:
a5:5e:73:74:03:d1:71:cd:6e:23:29:59:32:c8:11:37:47:a2:
0d:75:54:5d:80:07:ff:65:38:ee:99:5d:a8:cf:ce:6e:fd:66:
16:dc:7b:31:8e:38:4c:d1:38:aa:9d:84:0a:17:66:e2:c2:5d:
39:a9:af:7c:8d:f0:26:66:55:fb:41:21:30:ab:f7:ef:24:75:
1e:87:f6:c4:3a:97:04:88:0d:db:f4:a1:3d:ae:64:c4:f0:b3:
2d:af:94:9b:9f:bc:06:f5:01:13:87:8a:bb:a4:6e:7b:b7:83:
91:f8:53:18:16:f6:be:27:c5:14:3d:b3:12:09:51:61:fa:ef:
dd:a8:24:54:2b:be:c6:75:d3:e9:cf:49:95:04:73:b8:27:b1:
4a:0a:1d:89:70:e9:dd:e0:fc:2b:5b:bd:cf:60:b0:ed:fe:59:
29:91:d9:54:f5:cb:e2:b0:cd:bb:04:07:e6:89:5e:e2:93:ec:
18:fc:73:dc
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgIUQ1vlNjMI10hEuTybVb9BJoUTktAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZGNzhGNjI0MDg5MjdGNTE4RUNFMzVENDQ2RDRFOTlB
MjBCNjMxODAeFw0yNTA4MTMwMzAyMjVaFw0yNjA4MTIwMzA3MjVaMDMxMTAvBgNV
BAMTKDkyNkRBNTEyQ0FFM0EyQThCOEREQTdDQjRFNDA5NTRCQjYzREYwMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtWquI2y8+voCNczp8EPfI7QBA
+MJkcxuvgVjnzN3ZRb6zfkBcjcM1/JjXWjRBBlsndQ8bZeYErAUpEJkfnUwl/RsC
iS6+0TVhLQe5Wb5//fchplgm8lEdzXb1YDO+sNP0iyugjQYq1NFpOEnaMN3FB3tE
0sOtZRSs5cDk/RuG+TVBCFIemHSyf+dVesrBZqZ39PU7CRTVgt0vIdjqtLhGkk9y
wU0b/CAoXBTwCdUzncDNQOQ4GHn0A35EW8pm85lk6J/EdnHKMJU1bgztjNUxotjp
Z77LrlOWvpMFSC7bIAtY2yDxjLbxHauOINq7U2d4TEjMhq8/Hcm5+zuSVgwVAgMB
AAGjggHiMIIB3jAdBgNVHQ4EFgQUkm2lEsrjoqi43afLTkCVS7Y98CEwHwYDVR0j
BBgwFoAUxvePYkCJJ/UY7ONdRG1OmaILYxgwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8va3JpbGwubmljLmVkdS5jbi9yZXBvL25pYy8x
L0M2Rjc4RjYyNDA4OTI3RjUxOEVDRTM1RDQ0NkQ0RTk5QTIwQjYzMTguY3JsMHEG
CCsGAQUFBwEBBGUwYzBhBggrBgEFBQcwAoZVcnN5bmM6Ly9ycGtpLmNlcm5ldC5l
ZHUuY24vcmVwby9jZXJuZXQvMS9DNkY3OEY2MjQwODkyN0Y1MThFQ0UzNUQ0NDZE
NEU5OUEyMEI2MzE4LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJz
eW5jOi8va3JpbGwubmljLmVkdS5jbi9yZXBvL25pYy8xLzMxMzAzMzJlMzEzNjM1
MmUzMTMxMzAyZTMwMmYzMjM3MmQzMjM3MjAzZDNlMjAzNDM1MzMzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEw
BwMFBWelbgAwDQYJKoZIhvcNAQELBQADggEBAA+eCOmD4H/JBwY9FDfyiqwDA2Ob
lA7WOxz8BCJ2C/2/3h6H0UEe+6q/vGs7JkV9RmTAJzNVGr3Wd9B90XvADPOmWew2
zKUHoKVec3QD0XHNbiMpWTLIETdHog11VF2AB/9lOO6ZXajPzm79ZhbcezGOOEzR
OKqdhAoXZuLCXTmpr3yN8CZmVftBITCr9+8kdR6H9sQ6lwSIDdv0oT2uZMTwsy2v
lJufvAb1AROHirukbnu3g5H4UxgW9r4nxRQ9sxIJUWH6792oJFQrvsZ10+nPSZUE
c7gnsUoKHYlw6d3g/Ctbvc9gsO3+WSmR2VT1y+KwzbsEB+aJXuKT7Bj8c9w=
-----END CERTIFICATE-----
Generated at Sun Aug 24 08:20:06 2025 by rpki-client