Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3132332e3130332e31332e302f32342d3234203d3e203233373234.roa
File: 3132332e3130332e31332e302f32342d3234203d3e203233373234.roa (raw, json)
Hash identifier: 5u8bAWOmDG2prYa3YTDP+WvjXTeE2tCRu4vp2KBZHtM=
Subject key identifier: F6:3A:29:F5:EB:EF:36:34:F0:36:6B:FA:CC:7F:20:99:A1:2B:50:B5
Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE
Certificate serial: 3392A76ABEC11A8C79B4B32D12D1212F9F9490B2
Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3132332e3130332e31332e302f32342d3234203d3e203233373234.roa
Signing time: Tue 12 May 2026 10:44:24 +0000
ROA not before: Tue 12 May 2026 10:39:24 +0000
ROA not after: Tue 11 May 2027 10:44:24 +0000
asID: 23724
IP address blocks: 123.103.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 May 2026 09:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:92:a7:6a:be:c1:1a:8c:79:b4:b3:2d:12:d1:21:2f:9f:94:90:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE
Validity
Not Before: May 12 10:39:24 2026 GMT
Not After : May 11 10:44:24 2027 GMT
Subject: CN=F63A29F5EBEF3634F0366BFACC7F2099A12B50B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:0b:f7:fc:b0:04:e1:11:05:46:43:60:da:
a9:bd:9a:0a:6f:f0:57:bc:ff:ee:01:8e:94:e8:35:
1d:5a:06:7b:05:b5:0b:8f:ba:d7:ce:ad:71:56:5c:
ab:64:81:37:11:ed:c9:44:0d:5f:8c:b1:bb:ae:ac:
b4:cc:ae:a4:24:05:b8:cb:9a:21:40:18:62:58:9f:
75:94:4f:fd:0e:b0:e4:da:3a:8c:a8:1f:19:37:68:
1c:d6:70:e3:62:f7:98:6b:36:05:14:8d:0a:05:f3:
6e:4d:97:ae:36:71:b0:ef:e0:4a:76:e7:23:0a:30:
55:c8:5a:3b:91:79:c0:ec:a3:70:69:d9:4f:20:0c:
33:b0:73:d7:47:c2:76:c5:b9:ec:de:29:c7:76:9e:
d5:72:d6:94:92:51:69:3d:2d:9f:af:cb:9f:29:d3:
a5:81:d4:67:0c:73:07:04:c6:42:b9:86:c8:12:74:
a4:8a:21:f8:c4:7e:77:14:e8:37:b3:95:4b:ca:de:
2f:c9:63:4d:b5:2d:1d:93:a0:bb:20:28:42:42:42:
23:26:e7:76:53:ee:6f:9f:35:ad:09:e4:cf:46:49:
fd:29:b0:fb:c0:7f:f4:73:89:dc:06:d9:5b:75:d2:
24:a2:19:56:c7:79:73:3f:cf:a9:8b:01:b6:24:5c:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3A:29:F5:EB:EF:36:34:F0:36:6B:FA:CC:7F:20:99:A1:2B:50:B5
X509v3 Authority Key Identifier:
keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3132332e3130332e31332e302f32342d3234203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.103.13.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:68:5b:e4:ae:d8:cf:cb:df:5a:04:db:23:57:9b:2f:2a:33:
8f:d3:87:59:2d:33:de:d4:4b:a5:0f:01:3e:2e:8f:7d:28:ef:
06:6a:0f:78:7d:c8:94:06:e9:40:6e:0d:67:1a:92:0b:da:ac:
57:42:ae:c2:d3:67:e9:17:be:01:93:bc:67:79:8b:f8:f6:4f:
d7:18:44:3e:ef:9a:3e:ec:a9:69:e6:e9:f9:62:b5:f5:ba:01:
4d:38:61:5f:96:af:98:0e:3a:ee:ee:54:46:7b:0e:5c:19:4c:
79:3b:83:3e:ac:e8:fa:2b:27:13:28:dd:cd:cc:cb:cf:1b:ff:
9c:ca:22:3f:59:71:4b:da:e6:8a:cc:3b:e9:01:ae:6e:57:92:
1b:87:37:35:3a:f0:3a:ae:d5:ce:f3:83:db:e9:11:ec:fa:ee:
34:f4:c9:b7:36:49:93:07:73:6b:73:17:43:ae:3b:19:7e:fc:
5d:dd:cc:98:ae:57:d1:ee:b0:f9:7a:d3:63:f6:9e:70:80:15:
59:f3:64:15:72:d0:3b:fd:c5:31:63:bd:eb:9a:9c:bc:c7:c2:
45:2e:3a:c1:65:ea:03:ec:f0:e5:30:65:ea:96:a1:1b:6c:e9:
da:66:4f:53:ee:89:d9:38:b1:fe:4b:dd:35:ae:88:39:a5:7b:
15:fe:1b:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:27:59 2026 by rpki-client