Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3131392e3136312e3132302e302f32322d3234203d3e20313331333134.roa
File: 3131392e3136312e3132302e302f32322d3234203d3e20313331333134.roa (raw, json)
Hash identifier: jakde8yGmb1uNFhPYn8jqC/MoXGddzInYmFALMWKfBc=
Subject key identifier: 4D:49:8C:80:FC:BC:DE:F7:6B:1D:63:AC:A3:63:15:39:BB:D3:82:70
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 77F8E9D8A68ADB98BF8EE2344DB83A1F43B9C638
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3131392e3136312e3132302e302f32322d3234203d3e20313331333134.roa
Signing time: Mon 11 May 2026 11:02:51 +0000
ROA not before: Mon 11 May 2026 10:57:51 +0000
ROA not after: Mon 10 May 2027 11:02:51 +0000
asID: 131314
IP address blocks: 119.161.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 May 2026 09:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:f8:e9:d8:a6:8a:db:98:bf:8e:e2:34:4d:b8:3a:1f:43:b9:c6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: May 11 10:57:51 2026 GMT
Not After : May 10 11:02:51 2027 GMT
Subject: CN=4D498C80FCBCDEF76B1D63ACA3631539BBD38270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c5:29:5b:14:b9:fe:d9:19:cb:ed:74:90:18:
80:29:e6:d3:7a:8f:bb:3a:1e:e6:96:c2:af:60:a2:
a8:4c:37:ac:83:26:94:2d:33:eb:4a:e9:6b:2d:5d:
f8:4e:21:29:43:6a:80:91:c4:65:51:7a:04:fd:a4:
f0:60:cd:3c:3f:0b:af:6c:68:a0:f4:89:f7:fe:b1:
6d:b1:35:0c:cb:f5:54:59:88:8a:4f:de:19:63:c0:
a8:92:39:b4:ae:10:f2:cc:84:15:c4:55:81:8c:7a:
36:27:79:3b:ac:1e:3f:63:8a:18:4e:4c:2d:d4:54:
f3:93:db:ce:8c:0a:01:28:68:a9:f7:0a:0d:8e:a7:
a4:b9:69:ca:23:08:07:e9:11:d5:11:52:58:fd:73:
75:81:60:70:18:f0:dc:36:76:0d:b0:1c:ba:b6:04:
8c:24:3e:26:88:1f:cb:69:94:3a:59:1a:62:c0:e3:
18:d5:99:81:81:4b:b0:81:d3:16:0a:e6:6f:58:10:
57:16:36:c9:8b:d8:10:04:77:f9:26:cf:96:c7:a8:
18:2d:d4:3d:7e:cd:0e:37:65:fd:36:a2:10:29:cc:
dd:93:a2:18:00:b4:24:e1:53:aa:db:36:c4:9e:71:
79:93:cf:87:ef:fd:4a:b1:b8:91:fc:ba:19:2d:34:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:49:8C:80:FC:BC:DE:F7:6B:1D:63:AC:A3:63:15:39:BB:D3:82:70
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3131392e3136312e3132302e302f32322d3234203d3e20313331333134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.161.120.0/22
Signature Algorithm: sha256WithRSAEncryption
61:3d:c4:f3:d5:9c:c7:94:cb:69:3b:2f:b9:97:5c:e4:a5:b3:
e0:46:4f:58:0b:57:f1:b3:20:4c:27:2e:3c:7d:9e:71:fe:c7:
f9:51:70:1e:69:62:ca:8c:d2:f7:bc:af:5a:9d:59:0b:17:23:
e7:f9:77:ed:d1:53:39:ce:cf:0d:10:d4:09:be:02:d7:10:e0:
86:60:a9:d2:b9:4e:08:5a:a6:ef:77:9e:95:fc:8d:61:93:ef:
72:78:0a:7a:e3:5c:f1:7f:fd:68:17:e0:22:7d:b9:26:35:fb:
99:fc:52:7b:84:d4:9b:62:0b:c4:f4:97:c0:59:3b:06:5d:3b:
76:30:89:98:d5:ae:99:dd:01:70:dd:ce:a8:38:73:c5:a7:87:
4c:ca:45:f0:76:ad:31:28:97:63:7d:57:cc:5c:eb:ab:6e:80:
9a:e3:ab:d2:64:7d:48:71:5d:80:ed:c9:1f:75:23:72:5d:58:
e9:bd:75:e0:38:e9:e8:d6:40:16:c9:f4:65:bb:d2:3f:0c:12:
98:98:c2:18:97:bc:24:f4:f5:78:aa:cb:e5:1f:c1:08:c5:1e:
7e:49:01:1b:3d:9b:bf:02:18:63:fe:c7:6f:ff:98:97:5a:a9:
30:c3:bd:15:38:ed:37:71:c1:86:b1:1d:99:8d:83:01:77:5b:
d7:ee:0c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:03:36 2026 by rpki-client