Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3131332e32312e3233322e302f32322d3234203d3e20313331333134.roa
File: 3131332e32312e3233322e302f32322d3234203d3e20313331333134.roa (raw, json)
Hash identifier: YhfBtqVP8plSEyA+oqXbNrr0mYGWNkOXp8Uspm6fpxw=
Subject key identifier: 44:ED:84:84:92:19:39:55:BE:00:84:3A:1B:24:A0:C2:1C:CC:BE:17
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 375270B0D050F1C58F6BF47C802835CEDA0136D8
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3131332e32312e3233322e302f32322d3234203d3e20313331333134.roa
Signing time: Mon 11 May 2026 10:52:39 +0000
ROA not before: Mon 11 May 2026 10:47:39 +0000
ROA not after: Mon 10 May 2027 10:52:39 +0000
asID: 131314
IP address blocks: 113.21.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 May 2026 09:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:52:70:b0:d0:50:f1:c5:8f:6b:f4:7c:80:28:35:ce:da:01:36:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: May 11 10:47:39 2026 GMT
Not After : May 10 10:52:39 2027 GMT
Subject: CN=44ED848492193955BE00843A1B24A0C21CCCBE17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:4b:b6:d4:85:ff:de:bb:58:21:05:f4:4a:
23:a5:ac:86:78:ac:69:56:2e:0e:e9:41:06:6c:ec:
fc:54:63:4b:dd:cd:f7:42:58:dd:c9:f7:af:1e:5e:
3f:82:7d:51:b0:48:ec:74:dc:52:b8:6e:7e:30:f9:
2c:22:5e:ff:e7:4d:2f:79:1d:35:5a:85:b3:df:a2:
79:c5:07:26:6e:7d:b0:b3:c3:90:cc:ff:77:94:7a:
8e:44:b8:15:3a:ff:f1:ee:95:23:70:db:9c:9f:18:
35:9a:54:08:fa:e2:4b:8f:3c:74:b8:13:c6:b0:b6:
9b:78:ef:1d:c2:ed:21:1b:91:75:5e:59:60:86:21:
61:74:c1:a6:49:ff:cf:a5:25:82:a9:cc:83:e0:47:
65:df:64:db:32:46:04:64:e1:8d:0a:2f:dd:af:0e:
fb:50:5e:b6:fd:07:89:d9:b4:1e:21:14:8b:7e:ee:
f2:94:17:2d:a0:a4:39:06:e7:6c:e8:e1:f7:5c:c1:
13:53:90:24:cd:a5:e5:8f:8c:13:04:e4:63:ab:85:
5d:32:67:db:64:40:e3:5a:b3:6f:f4:72:01:26:fd:
e6:fb:fb:d3:fd:ee:ea:c5:a0:1d:cd:72:de:55:ed:
cd:21:8b:57:78:d5:fc:e1:b6:43:4e:8a:ad:92:b7:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:ED:84:84:92:19:39:55:BE:00:84:3A:1B:24:A0:C2:1C:CC:BE:17
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3131332e32312e3233322e302f32322d3234203d3e20313331333134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.21.232.0/22
Signature Algorithm: sha256WithRSAEncryption
41:6c:bf:c8:c2:79:dd:6d:c1:92:19:7f:ea:7c:a2:b3:0e:4c:
43:dc:5c:a3:c5:55:68:47:5d:ac:14:02:1e:c9:43:ae:6e:a5:
e6:cd:e0:2d:10:c5:38:04:59:39:a8:4d:ab:f6:53:18:1b:88:
ec:f5:53:9d:e5:c0:de:1d:71:66:84:1b:71:e0:34:24:fb:61:
09:7b:1a:87:84:80:ba:82:18:43:33:1d:91:07:6e:94:24:fb:
21:72:d9:6c:94:44:09:99:ab:c9:bb:88:5d:6e:57:14:6c:91:
aa:d2:a4:98:31:63:90:85:d0:8a:85:d7:16:bc:37:6b:6c:8f:
6a:65:4d:76:74:7f:97:25:e9:43:fa:48:ed:48:c6:d1:3d:2a:
1d:72:13:c9:db:ca:f9:34:00:b1:fc:80:3b:5d:f7:a3:a4:f5:
61:ce:84:65:6e:aa:96:0f:b4:30:4d:bd:0e:fb:74:7c:78:25:
e1:dd:b7:c1:28:78:82:a8:6c:98:b5:53:48:3b:56:83:b4:57:
a9:0c:54:07:76:3e:fb:9a:d1:e8:8d:e8:3e:cb:80:67:90:0e:
13:84:8c:af:5c:fb:21:c1:27:1a:62:34:86:69:5a:3a:63:87:
51:64:28:c4:e8:a3:2e:ce:a8:45:23:77:09:13:07:93:f6:9d:
9d:79:8a:92
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUN1JwsNBQ8cWPa/R8gCg1ztoBNtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4
RkJFN0VBRTAeFw0yNjA1MTExMDQ3MzlaFw0yNzA1MTAxMDUyMzlaMDMxMTAvBgNV
BAMTKDQ0RUQ4NDg0OTIxOTM5NTVCRTAwODQzQTFCMjRBMEMyMUNDQ0JFMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd6ku21IX/3rtYIQX0SiOlrIZ4
rGlWLg7pQQZs7PxUY0vdzfdCWN3J968eXj+CfVGwSOx03FK4bn4w+SwiXv/nTS95
HTVahbPfonnFByZufbCzw5DM/3eUeo5EuBU6//HulSNw25yfGDWaVAj64kuPPHS4
E8awtpt47x3C7SEbkXVeWWCGIWF0waZJ/8+lJYKpzIPgR2XfZNsyRgRk4Y0KL92v
DvtQXrb9B4nZtB4hFIt+7vKUFy2gpDkG52zo4fdcwRNTkCTNpeWPjBME5GOrhV0y
Z9tkQONas2/0cgEm/eb7+9P97urFoB3Nct5V7c0hi1d41fzhtkNOiq2St8s9AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQURO2EhJIZOVW+AIQ6GySgwhzMvhcwHwYDVR0j
BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0
Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxNzk0NTgvMC8zMTMxMzMyZTMy
MzEyZTMyMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzMTMzMzEzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAnEV6DANBgkqhkiG9w0BAQsFAAOCAQEAQWy/yMJ53W3Bkhl/6nyi
sw5MQ9xco8VVaEddrBQCHslDrm6l5s3gLRDFOARZOahNq/ZTGBuI7PVTneXA3h1x
ZoQbceA0JPthCXsah4SAuoIYQzMdkQdulCT7IXLZbJRECZmrybuIXW5XFGyRqtKk
mDFjkIXQioXXFrw3a2yPamVNdnR/lyXpQ/pI7UjG0T0qHXITydvK+TQAsfyAO133
o6T1Yc6EZW6qlg+0ME29Dvt0fHgl4d23wSh4gqhsmLVTSDtWg7RXqQxUB3Y++5rR
6I3oPsuAZ5AOE4SMr1z7IcEnGmI0hmlaOmOHUWQoxOijLs6oRSN3CRMHk/adnXmK
kg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:03:55 2026 by rpki-client