Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e35372e3230342e302f32332d3234203d3e2034383038.roa
File: 3230322e35372e3230342e302f32332d3234203d3e2034383038.roa (raw, json)
Hash identifier: V6PDz8N8c301FIGdfH3ouokYihIKsBjWTZFLsl9bjV8=
Subject key identifier: C9:C3:C8:E9:95:CD:21:A6:15:FC:73:54:4C:0C:0C:41:33:4F:57:3D
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 4AC20B3E0E776383B518B48BAAB80D060888547C
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e35372e3230342e302f32332d3234203d3e2034383038.roa
Signing time: Mon 11 May 2026 11:10:18 +0000
ROA not before: Mon 11 May 2026 11:05:18 +0000
ROA not after: Mon 10 May 2027 11:10:18 +0000
asID: 4808
IP address blocks: 202.57.204.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 May 2026 09:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c2:0b:3e:0e:77:63:83:b5:18:b4:8b:aa:b8:0d:06:08:88:54:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: May 11 11:05:18 2026 GMT
Not After : May 10 11:10:18 2027 GMT
Subject: CN=C9C3C8E995CD21A615FC73544C0C0C41334F573D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:1d:b1:8e:27:ba:50:42:5b:db:35:7f:4c:
0c:25:7a:fe:7c:2e:e1:c1:20:b4:7a:96:67:d4:4a:
72:00:51:c5:6c:9b:2b:47:1e:69:09:fd:ce:db:3f:
32:38:6b:a7:f2:7a:d8:d6:6f:8a:7d:b1:39:e9:a5:
e9:19:56:6a:f5:c3:03:b8:76:ad:b7:f3:df:c1:22:
6a:c2:e1:fa:e0:38:0b:65:33:d3:3a:02:fd:af:30:
44:cc:7f:f8:36:0c:b0:28:46:4c:f2:51:01:83:50:
e5:26:2d:07:e1:d7:33:5a:6a:5d:77:7e:3b:58:81:
45:9b:bd:fb:d6:17:84:ee:8c:ba:41:63:fb:e4:f6:
96:ed:e0:a4:43:7f:1c:09:37:10:91:4c:9b:82:a9:
29:66:3f:7b:d7:ca:64:48:61:cd:bb:47:ab:e2:32:
87:6e:57:5e:b8:78:30:ec:19:29:4f:9c:ed:04:a4:
66:7b:88:f6:ea:e2:56:32:fd:5a:72:38:f3:83:65:
f5:31:cb:e9:b1:c9:81:09:44:58:c4:ad:33:87:c8:
a7:ab:13:f5:3a:ad:c3:21:aa:7e:37:a3:7c:eb:ae:
13:07:d8:40:8a:2a:a3:48:71:c6:b3:44:27:f6:8f:
7c:84:14:45:2a:95:2b:8f:7f:46:af:30:9d:33:68:
72:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C3:C8:E9:95:CD:21:A6:15:FC:73:54:4C:0C:0C:41:33:4F:57:3D
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e35372e3230342e302f32332d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.57.204.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:f2:7c:09:ae:5e:20:c2:b4:40:53:1d:3a:86:e3:fd:39:c8:
46:d9:fd:4e:48:26:15:6f:f7:13:07:ff:32:95:f1:ca:d1:7b:
04:86:52:11:38:99:a7:95:88:f7:29:0a:1c:73:81:7b:19:60:
0c:31:a6:0b:e2:a7:17:39:a6:ca:e7:51:8a:e4:00:c7:0d:54:
22:13:35:da:fd:fb:ea:b8:23:c7:aa:d5:99:15:21:36:c9:c4:
57:7d:b0:b3:62:54:48:52:49:49:db:14:81:54:58:ee:27:21:
14:d1:8a:2b:f2:f3:4e:9f:c9:73:a7:bd:76:b9:ee:90:49:a7:
e7:66:40:7f:3e:6a:b9:47:a6:23:99:fa:4f:51:ab:71:4a:58:
98:41:3b:27:74:25:42:6c:85:b8:4c:c0:d9:7e:ba:e3:fd:e1:
01:1c:25:d4:75:e9:cf:6b:1d:63:19:ba:5f:dd:ee:43:e3:a9:
40:23:40:dc:70:06:4e:13:d3:f1:a0:64:58:60:9f:21:d2:26:
fe:34:2d:69:a7:6f:ac:9e:d8:85:b8:f0:0b:e8:0c:85:e9:57:
d6:89:0f:a8:94:d0:a4:7e:46:38:29:07:b6:da:b7:d0:e1:a1:
23:10:fa:d2:66:76:f3:29:c1:c9:fb:83:3d:cd:bd:5d:34:48:
49:35:e6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:25 2026 by rpki-client