Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3132332e3130332e31332e302f32342d3234203d3e2039383038.roa
File: 3132332e3130332e31332e302f32342d3234203d3e2039383038.roa (raw, json)
Hash identifier: bcguasKsBHOHkqCMpX9g4pHAScXA98bNbl7gPQnJGcc=
Subject key identifier: 20:68:CF:10:8D:B9:0E:FA:33:6F:70:4D:7F:E5:92:36:51:C3:84:35
Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE
Certificate serial: 073DB6C3DB7F5F331AC05931052C563D72513E81
Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3132332e3130332e31332e302f32342d3234203d3e2039383038.roa
Signing time: Tue 12 May 2026 10:44:24 +0000
ROA not before: Tue 12 May 2026 10:39:24 +0000
ROA not after: Tue 11 May 2027 10:44:24 +0000
asID: 9808
IP address blocks: 123.103.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 May 2026 09:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:3d:b6:c3:db:7f:5f:33:1a:c0:59:31:05:2c:56:3d:72:51:3e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE
Validity
Not Before: May 12 10:39:24 2026 GMT
Not After : May 11 10:44:24 2027 GMT
Subject: CN=2068CF108DB90EFA336F704D7FE5923651C38435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:35:d0:b9:42:4e:9b:b3:58:c6:52:27:12:
3a:0f:2c:4b:a0:d1:c8:ae:eb:bc:d0:c5:2b:76:72:
00:e5:8f:3c:d8:2a:9e:b9:c0:4a:98:75:bb:66:94:
25:21:25:05:3d:f7:77:c0:85:92:87:dc:d3:99:32:
a7:a6:c0:4c:b6:05:bf:c9:14:8a:19:61:02:53:08:
00:45:17:0c:42:78:14:00:d7:a2:97:67:b8:8e:69:
bf:40:fd:f5:c1:05:4a:17:3e:86:30:2d:4d:da:5f:
55:d9:d4:6b:5b:69:21:44:39:ff:67:e3:39:92:e4:
e4:f1:5f:91:82:24:d3:09:9c:89:29:6e:ff:1d:9f:
02:7d:a6:d8:ba:9b:17:26:8d:b9:c4:e6:44:16:cc:
2b:99:d7:c7:74:7f:4e:6b:97:f9:4c:8c:87:53:06:
4f:d8:90:fb:24:ea:27:ee:87:9d:fc:c9:d1:06:b5:
de:d8:3c:5d:6b:13:d9:e3:6c:a7:7d:1d:54:0a:d1:
99:41:8e:2a:0c:d7:a5:f0:22:e6:cc:2c:dd:a8:a5:
f8:14:dd:12:4e:ab:40:86:5b:a4:40:98:15:98:8d:
d4:bd:c3:f0:70:7c:82:c4:e3:70:1b:88:bb:f5:7d:
f6:b8:4d:b2:ef:23:16:f2:3e:4a:b9:49:68:33:d1:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:68:CF:10:8D:B9:0E:FA:33:6F:70:4D:7F:E5:92:36:51:C3:84:35
X509v3 Authority Key Identifier:
keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3132332e3130332e31332e302f32342d3234203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.103.13.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8a:78:14:ae:6f:3a:53:74:56:ae:b1:35:ee:36:46:f9:e9:
5c:1f:62:ea:6d:5b:9a:33:af:45:44:1a:5d:8d:5f:57:08:9d:
77:bf:9d:e0:e3:87:b6:66:d6:05:a8:f7:09:b3:41:93:fc:d8:
e9:9d:26:c2:1d:ec:58:3d:1e:16:8a:7f:66:60:0c:62:f1:a4:
1e:8e:a6:1d:42:7a:e8:c7:0c:14:d0:1d:aa:2e:55:53:b4:1e:
08:b0:68:2c:b1:9e:39:53:d7:d3:12:e7:aa:da:d9:47:d2:fb:
33:36:e8:67:55:15:ed:04:64:fb:6a:6d:14:ac:96:79:92:22:
90:00:a5:a8:0f:31:fc:2a:57:a7:e5:f1:60:9b:1b:e3:67:78:
b0:75:a1:4c:96:e4:08:f9:65:87:56:22:5d:28:af:d9:f1:2a:
49:dc:6d:a3:87:9e:74:df:49:51:d7:be:6a:a0:e1:5e:00:2d:
59:5e:63:88:e5:48:36:6b:e2:b8:be:c8:b7:32:21:64:b8:62:
8a:e8:de:ca:da:96:a9:a1:9f:62:37:6e:1b:05:e0:99:50:9d:
7d:1b:40:7e:8c:fd:ce:6c:5a:db:da:f2:7a:18:1b:1b:d9:0f:
e5:17:67:7b:9f:be:e3:9b:a7:93:6c:fe:37:72:1e:29:76:71:
c1:4d:f7:27
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUBz22w9t/XzMawFkxBSxWPXJRPoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0
MjNBOTBBRTAeFw0yNjA1MTIxMDM5MjRaFw0yNzA1MTExMDQ0MjRaMDMxMTAvBgNV
BAMTKDIwNjhDRjEwOERCOTBFRkEzMzZGNzA0RDdGRTU5MjM2NTFDMzg0MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPkTXQuUJOm7NYxlInEjoPLEug
0ciu67zQxSt2cgDljzzYKp65wEqYdbtmlCUhJQU993fAhZKH3NOZMqemwEy2Bb/J
FIoZYQJTCABFFwxCeBQA16KXZ7iOab9A/fXBBUoXPoYwLU3aX1XZ1GtbaSFEOf9n
4zmS5OTxX5GCJNMJnIkpbv8dnwJ9pti6mxcmjbnE5kQWzCuZ18d0f05rl/lMjIdT
Bk/YkPsk6ifuh538ydEGtd7YPF1rE9njbKd9HVQK0ZlBjioM16XwIubMLN2opfgU
3RJOq0CGW6RAmBWYjdS9w/BwfILE43AbiLv1ffa4TbLvIxbyPkq5SWgz0cYdAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUIGjPEI25Dvozb3BNf+WSNlHDhDUwHwYDVR0j
BBgwFoAU1VSQ+4hVUjB6HSceAlE7TUI6kK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MTk4Mjg1MC8wL0Q1NTQ5MEZCODg1NTUyMzA3QTFEMjcxRTAyNTEz
QjRENDIzQTkwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0MjNBOTBBRS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxOTgyODUwLzAvMzEzMjMzMmUzMTMw
MzMyZTMxMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHtnDTANBgkqhkiG9w0BAQsFAAOCAQEAh4p4FK5vOlN0Vq6xNe42RvnpXB9i
6m1bmjOvRUQaXY1fVwidd7+d4OOHtmbWBaj3CbNBk/zY6Z0mwh3sWD0eFop/ZmAM
YvGkHo6mHUJ66McMFNAdqi5VU7QeCLBoLLGeOVPX0xLnqtrZR9L7MzboZ1UV7QRk
+2ptFKyWeZIikAClqA8x/CpXp+XxYJsb42d4sHWhTJbkCPllh1YiXSiv2fEqSdxt
o4eedN9JUde+aqDhXgAtWV5jiOVINmviuL7ItzIhZLhiiujeytqWqaGfYjduGwXg
mVCdfRtAfoz9zmxa29ryehgbG9kP5Rdne5++45unk2z+N3IeKXZxwU33Jw==
-----END CERTIFICATE-----
Generated at Wed May 13 13:04:23 2026 by rpki-client