Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3132302e3133362e31362e302f32322d3234203d3e2034383437.roa
File: 3132302e3133362e31362e302f32322d3234203d3e2034383437.roa (raw, json)
Hash identifier: WBZC12M4a8ERplGizY+nswnepkdBnXm9M5HP15MBorE=
Subject key identifier: 6F:D7:88:C6:88:DC:A7:2D:B1:5B:53:E6:D6:C4:B1:E4:B2:B5:DC:FE
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 16CB4615040C881B12816665629D153316FD4C20
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3132302e3133362e31362e302f32322d3234203d3e2034383437.roa
Signing time: Mon 11 May 2026 11:10:18 +0000
ROA not before: Mon 11 May 2026 11:05:18 +0000
ROA not after: Mon 10 May 2027 11:10:18 +0000
asID: 4847
IP address blocks: 120.136.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 May 2026 09:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:cb:46:15:04:0c:88:1b:12:81:66:65:62:9d:15:33:16:fd:4c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: May 11 11:05:18 2026 GMT
Not After : May 10 11:10:18 2027 GMT
Subject: CN=6FD788C688DCA72DB15B53E6D6C4B1E4B2B5DCFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:88:d2:83:9e:99:b9:53:f4:8a:50:a4:71:a4:
30:54:54:e0:36:39:fa:d7:e2:b0:90:ee:94:ae:87:
6e:74:04:f8:cc:3f:68:38:cb:d9:0e:bf:70:96:67:
67:bb:9b:2c:45:4c:68:dc:9e:27:59:45:5f:39:d7:
ac:df:ab:c8:5a:e7:af:dd:41:bc:2a:b2:15:f4:46:
c7:2a:44:15:fb:f8:c0:d8:b4:f5:94:07:b0:e2:16:
4c:3a:89:59:23:e2:0b:56:ae:37:d8:3a:05:6e:48:
ad:71:c7:0c:85:54:77:52:96:d6:62:fb:52:f0:65:
13:a1:b4:a2:2d:67:26:de:c4:6f:86:8d:9e:cc:20:
e8:81:c6:1d:6d:ca:71:98:b3:27:dd:dc:35:82:22:
b9:18:1a:2f:c5:22:94:cf:0b:cd:a6:72:f4:e3:a3:
40:43:be:4f:da:56:54:95:22:11:ce:e7:04:5d:54:
2e:78:0f:60:74:dd:36:58:32:b8:1d:61:1f:26:63:
2b:1b:64:c1:be:3c:9c:e9:56:90:0e:3b:8b:68:a6:
b5:a3:d0:09:9b:38:fa:c8:cb:15:e4:4e:4e:c6:c7:
83:ea:00:6e:17:2c:e3:92:07:25:ac:aa:60:8a:e1:
9c:ff:8c:1e:c2:49:ca:07:75:80:58:04:cf:1d:e9:
19:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D7:88:C6:88:DC:A7:2D:B1:5B:53:E6:D6:C4:B1:E4:B2:B5:DC:FE
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3132302e3133362e31362e302f32322d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.136.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:22:75:26:53:8c:ca:ae:f1:31:5a:b2:e2:07:7b:4d:4e:ef:
6b:eb:19:0f:6c:be:97:72:0c:5d:1b:58:9e:6e:fe:45:45:6f:
78:b6:3a:78:0a:ba:76:0d:22:0e:c3:0a:4c:5f:62:38:66:c3:
b3:0b:07:5b:69:70:8c:7c:ea:b1:b0:36:07:c1:cd:59:c1:8a:
49:31:11:18:2d:60:cf:a7:f8:23:c9:51:17:71:a0:d3:85:71:
b7:62:b1:a4:89:d8:57:28:7c:57:ab:51:2d:ca:c0:0c:f3:ed:
1e:c3:ae:e2:de:b3:10:59:b5:d0:5c:af:11:df:73:6f:af:63:
e1:57:b9:71:72:91:9f:41:d7:9b:57:32:bd:a2:1e:85:04:42:
4a:09:ba:68:70:ff:47:53:ca:5b:b4:7b:ce:eb:fe:b0:47:3c:
7c:4c:a7:3b:cd:45:9e:37:cb:ba:99:7e:0b:b5:34:f3:b4:02:
cd:90:6a:cc:fb:9c:f2:e9:79:56:ab:36:a5:d7:e6:11:a5:cd:
38:50:e9:5e:ff:9f:35:a4:2e:0f:2b:ea:2b:12:6c:5a:a3:fc:
4c:37:27:0b:cc:e8:95:7c:39:95:e6:07:de:56:7b:fe:25:22:
71:47:75:d6:eb:d8:9e:9a:dc:a6:f2:19:6a:28:fd:34:12:3e:
1a:2d:45:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:14:52 2026 by rpki-client