Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3131392e3136312e3132302e302f32322d3234203d3e2034383437.roa
File: 3131392e3136312e3132302e302f32322d3234203d3e2034383437.roa (raw, json)
Hash identifier: kgPQlEevxiDFvptn0D+TQ9fUX7x9wfmNaF84wXvyLzs=
Subject key identifier: C8:5D:4C:32:B2:4E:3C:76:87:56:F6:55:B8:18:EA:46:5B:7F:F8:EA
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 3EAE98F699D1938063BBD29E57459812D06CD7EA
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3131392e3136312e3132302e302f32322d3234203d3e2034383437.roa
Signing time: Mon 11 May 2026 11:02:51 +0000
ROA not before: Mon 11 May 2026 10:57:51 +0000
ROA not after: Mon 10 May 2027 11:02:51 +0000
asID: 4847
IP address blocks: 119.161.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 May 2026 09:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:ae:98:f6:99:d1:93:80:63:bb:d2:9e:57:45:98:12:d0:6c:d7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: May 11 10:57:51 2026 GMT
Not After : May 10 11:02:51 2027 GMT
Subject: CN=C85D4C32B24E3C768756F655B818EA465B7FF8EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:73:f0:25:52:ef:54:2b:47:7b:80:b5:f4:
67:fb:c0:bb:70:2f:a8:23:67:8a:ce:a4:d9:1f:8f:
a8:36:4f:ff:ae:7d:b2:f4:42:e8:db:a6:57:78:32:
0d:d2:06:74:d6:60:10:f8:90:80:69:e6:58:10:ce:
fd:2b:15:c5:35:9a:c8:d1:3c:de:be:16:59:1a:c7:
f6:33:52:7b:bd:1d:dd:2e:ee:4e:87:36:d4:47:16:
9f:6a:39:57:e0:5d:fe:81:aa:86:39:d6:e7:f6:57:
6f:4b:f4:a2:15:14:49:22:bf:5a:ba:95:c5:a6:09:
5c:bf:ea:db:d5:91:42:70:d9:77:dc:59:0d:49:b9:
5b:fa:4a:58:9d:94:c5:ff:ae:a2:ee:5f:27:60:1a:
95:ed:bf:f0:23:7d:4e:0d:f9:f1:9a:22:9d:c7:8e:
b4:c3:d0:0c:eb:06:6b:7a:5c:b2:0f:ea:82:67:3b:
89:b8:f8:10:0e:73:89:46:f1:c4:7b:7f:4e:c2:fb:
d5:2c:2d:8e:4d:3c:c1:d9:5f:5f:7e:18:29:43:53:
6a:3b:df:7e:e4:3e:af:af:38:a5:04:55:e4:c4:ea:
a7:51:13:ba:a0:b8:af:e4:bd:f9:ac:a1:ad:3e:93:
f6:f7:01:8c:11:48:1d:f2:e3:96:d2:61:c9:ff:4c:
69:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5D:4C:32:B2:4E:3C:76:87:56:F6:55:B8:18:EA:46:5B:7F:F8:EA
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3131392e3136312e3132302e302f32322d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.161.120.0/22
Signature Algorithm: sha256WithRSAEncryption
11:b3:05:25:76:d9:11:fa:21:62:ce:ef:08:36:c7:a2:84:26:
4f:d7:8e:11:f9:84:a0:f2:88:37:54:9e:18:6f:f1:c1:69:89:
1b:c6:7e:49:85:08:c4:57:f0:78:d9:94:f1:e4:d6:75:0b:8a:
fe:d9:e7:8f:ed:ae:f9:89:aa:6c:dd:44:ac:be:74:7e:34:b3:
75:d5:c2:47:1b:4f:9d:31:e5:93:91:9a:de:06:ab:7e:65:90:
49:57:17:2b:45:7e:7c:33:05:ed:3d:b5:12:6f:a1:25:7e:0a:
aa:3f:76:0f:01:d1:56:47:e0:df:46:74:11:7a:c0:91:23:2e:
c9:86:8e:74:aa:cc:cf:18:59:fa:f0:77:e7:29:19:ef:1a:3c:
23:91:50:84:c3:d7:ae:ab:c9:22:43:5b:ac:74:82:15:70:87:
2a:87:90:c9:38:7b:eb:ce:bb:67:40:c8:17:d0:1c:5a:45:39:
e9:34:8c:3e:46:3c:a3:33:92:07:d7:22:a8:57:25:ce:4c:cf:
82:60:28:87:1a:e1:9c:e6:0c:b0:7f:19:96:ee:2b:85:ea:aa:
6c:c4:b6:3c:83:57:16:9d:d9:20:50:4a:91:62:f2:61:20:d6:
5a:4e:9b:23:f1:1b:0d:cf:80:6b:61:c7:98:bb:ea:2d:d1:45:
b5:c0:48:61
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUPq6Y9pnRk4Bju9KeV0WYEtBs1+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4
RkJFN0VBRTAeFw0yNjA1MTExMDU3NTFaFw0yNzA1MTAxMTAyNTFaMDMxMTAvBgNV
BAMTKEM4NUQ0QzMyQjI0RTNDNzY4NzU2RjY1NUI4MThFQTQ2NUI3RkY4RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyNnPwJVLvVCtHe4C19Gf7wLtw
L6gjZ4rOpNkfj6g2T/+ufbL0Qujbpld4Mg3SBnTWYBD4kIBp5lgQzv0rFcU1msjR
PN6+Flkax/YzUnu9Hd0u7k6HNtRHFp9qOVfgXf6BqoY51uf2V29L9KIVFEkiv1q6
lcWmCVy/6tvVkUJw2XfcWQ1JuVv6SlidlMX/rqLuXydgGpXtv/AjfU4N+fGaIp3H
jrTD0AzrBmt6XLIP6oJnO4m4+BAOc4lG8cR7f07C+9UsLY5NPMHZX19+GClDU2o7
337kPq+vOKUEVeTE6qdRE7qguK/kvfmsoa0+k/b3AYwRSB3y45bSYcn/TGnXAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUyF1MMrJOPHaHVvZVuBjqRlt/+OowHwYDVR0j
BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0
Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MjE3OTQ1OC8wLzMxMzEzOTJlMzEz
NjMxMmUzMTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAneheDANBgkqhkiG9w0BAQsFAAOCAQEAEbMFJXbZEfohYs7vCDbHooQm
T9eOEfmEoPKIN1SeGG/xwWmJG8Z+SYUIxFfweNmU8eTWdQuK/tnnj+2u+YmqbN1E
rL50fjSzddXCRxtPnTHlk5Ga3garfmWQSVcXK0V+fDMF7T21Em+hJX4Kqj92DwHR
Vkfg30Z0EXrAkSMuyYaOdKrMzxhZ+vB35ykZ7xo8I5FQhMPXrqvJIkNbrHSCFXCH
KoeQyTh76867Z0DIF9AcWkU56TSMPkY8ozOSB9ciqFclzkzPgmAohxrhnOYMsH8Z
lu4rheqqbMS2PINXFp3ZIFBKkWLyYSDWWk6bI/EbDc+Aa2HHmLvqLdFFtcBIYQ==
-----END CERTIFICATE-----
Generated at Wed May 13 16:48:15 2026 by rpki-client