Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3132302e3133362e31362e302f32322d3234203d3e20313331333134.roa
File: 3132302e3133362e31362e302f32322d3234203d3e20313331333134.roa (raw, json)
Hash identifier: dV4WaVR2R+KGcyMDYN0LD/aT7LmW1Z3CbPPnisNr628=
Subject key identifier: 61:D4:9C:48:5E:E7:96:84:BF:A2:CB:A6:42:F4:DC:07:7D:F1:97:3B
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 28A0BADB4F9F67E0018A80BA520CCBC644823858
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3132302e3133362e31362e302f32322d3234203d3e20313331333134.roa
Signing time: Mon 11 May 2026 11:10:17 +0000
ROA not before: Mon 11 May 2026 11:05:17 +0000
ROA not after: Mon 10 May 2027 11:10:17 +0000
asID: 131314
IP address blocks: 120.136.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 May 2026 09:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a0:ba:db:4f:9f:67:e0:01:8a:80:ba:52:0c:cb:c6:44:82:38:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: May 11 11:05:17 2026 GMT
Not After : May 10 11:10:17 2027 GMT
Subject: CN=61D49C485EE79684BFA2CBA642F4DC077DF1973B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f4:93:02:f5:cc:09:ff:59:c8:c2:44:d7:15:
23:6a:cf:50:5f:9d:70:2b:a0:5f:41:db:ee:d5:68:
28:9e:5b:61:62:96:8d:09:0e:77:e1:08:c8:48:7c:
0b:18:b0:dc:cd:ff:c3:ad:e4:de:ad:9c:1b:a7:32:
d3:a9:af:56:d5:14:e9:80:17:89:1c:a4:e0:da:63:
e1:e7:78:81:30:aa:68:41:10:c8:c1:1c:21:e7:73:
87:7b:59:e2:c2:e9:53:58:43:68:cb:65:b5:3e:9e:
d7:6c:46:42:b5:ad:6b:b5:9d:bc:d7:49:08:e5:3a:
4a:fa:16:03:9c:f3:e8:6e:fc:b7:b0:35:a2:a4:0e:
a3:32:36:f2:50:49:a6:80:4d:0f:16:f4:ad:b4:05:
dc:d8:90:66:6a:ce:6e:10:96:99:61:58:ef:4c:12:
29:0e:e9:6d:94:3b:0f:0f:b3:7d:94:cb:32:f1:2f:
1e:56:12:52:20:a0:18:b4:b0:c9:20:8b:dd:83:9a:
70:db:e2:bf:97:67:3d:72:f7:50:b4:a8:61:3e:bc:
2b:e5:87:47:2a:b6:08:86:e7:66:48:43:99:d0:8a:
55:07:48:a9:b6:c0:48:7f:df:75:79:f2:45:0d:c4:
9f:a3:98:bf:1f:29:92:2b:3d:2c:8e:9e:73:82:15:
8d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D4:9C:48:5E:E7:96:84:BF:A2:CB:A6:42:F4:DC:07:7D:F1:97:3B
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3132302e3133362e31362e302f32322d3234203d3e20313331333134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.136.16.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:be:aa:38:30:0b:f3:d6:f0:91:11:78:49:75:0b:16:0d:29:
4e:54:43:7b:e5:3b:8b:b2:36:9e:92:23:34:11:cb:f4:f9:ff:
ae:d7:67:30:5a:ee:68:95:84:f1:d5:03:9b:05:fd:56:0c:8b:
eb:4b:be:67:74:ff:37:45:30:2b:14:0f:08:ec:d9:be:3a:5a:
ce:6b:d3:e6:89:2e:e9:7b:db:6d:98:e7:7b:53:9e:da:70:c4:
3c:4c:8e:16:1b:fc:2d:a6:ef:c1:69:fa:9c:60:e8:d1:60:4f:
47:34:34:fb:0f:c8:80:1b:6f:bd:2b:10:84:e7:a3:06:59:f8:
97:ab:b1:bf:93:dd:89:6d:f6:31:d2:21:8f:46:02:fe:62:27:
f7:c1:d9:a1:ea:df:78:23:bf:b7:92:4c:d9:ac:d1:ec:63:46:
30:f3:99:b2:5c:b8:86:d5:29:ab:d3:90:e1:b4:00:35:15:03:
20:41:44:c1:af:4a:87:ff:93:0a:26:68:12:44:bd:6f:e9:24:
8b:7b:6d:e4:38:df:6d:55:31:17:02:37:f9:d0:a6:de:a4:e3:
e4:a7:ba:8f:78:f2:90:e1:ab:58:3f:c8:d9:b1:5a:8c:4e:b0:
57:03:d8:ed:86:b6:7d:71:fc:7d:e9:0b:f8:cc:18:cd:1e:f0:
e4:ca:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:36:33 2026 by rpki-client