Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e35372e3230342e302f32332d3234203d3e2034383437.roa
File: 3230322e35372e3230342e302f32332d3234203d3e2034383437.roa (raw, json)
Hash identifier: GvSV4HLyNBaS57+IfeKmWJIl94iW7wUel/Th/DjSM80=
Subject key identifier: 95:E3:A1:93:4B:06:DF:9D:D4:E4:B8:A1:B6:E1:DC:4D:E0:D1:25:39
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 0A0EE314C2C97F6B08AA64A6F19C8D58B7D93082
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e35372e3230342e302f32332d3234203d3e2034383437.roa
Signing time: Mon 11 May 2026 11:10:17 +0000
ROA not before: Mon 11 May 2026 11:05:17 +0000
ROA not after: Mon 10 May 2027 11:10:17 +0000
asID: 4847
IP address blocks: 202.57.204.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 May 2026 09:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:0e:e3:14:c2:c9:7f:6b:08:aa:64:a6:f1:9c:8d:58:b7:d9:30:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: May 11 11:05:17 2026 GMT
Not After : May 10 11:10:17 2027 GMT
Subject: CN=95E3A1934B06DF9DD4E4B8A1B6E1DC4DE0D12539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:04:9a:d3:24:73:28:09:ad:78:74:4a:f7:
00:89:f7:d6:c5:5b:7d:a3:16:c0:b7:d8:88:59:de:
c3:30:4f:7b:89:7b:36:fc:db:5f:1a:c6:65:4f:2f:
9a:4c:05:ff:f2:79:f4:f1:77:a0:cf:d4:94:61:45:
eb:da:50:17:60:cf:5a:fa:0a:ad:a5:a3:5a:01:09:
f4:32:ee:b7:bb:3f:49:86:22:b5:70:bc:59:5b:8b:
8f:dd:a0:40:ce:28:1e:ae:72:b5:26:cc:5c:7e:b5:
21:ce:d0:71:0c:73:35:03:0b:25:35:80:17:ab:ec:
81:a8:f3:68:0d:43:a0:29:1d:9b:73:c3:d7:ec:1b:
76:a0:3a:80:71:b4:18:80:42:11:47:9c:35:8b:1d:
e4:58:f6:eb:b3:a3:c4:3c:49:4a:a6:f1:7d:3e:73:
37:bd:2a:ab:22:34:fe:a1:9c:fd:fd:9f:ec:4f:cd:
53:d9:2d:a4:b5:9e:0d:e0:c4:4f:72:b8:79:57:cf:
6e:61:3c:51:3e:cc:d7:39:25:94:bf:7c:07:0f:da:
f4:67:0d:b5:71:a8:94:55:da:19:56:49:81:3b:77:
ce:fc:c2:67:d7:2c:66:e5:4d:5e:d1:bb:e4:0e:35:
ef:b9:c5:f1:87:5e:a5:a7:74:06:5b:9b:db:83:78:
99:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E3:A1:93:4B:06:DF:9D:D4:E4:B8:A1:B6:E1:DC:4D:E0:D1:25:39
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e35372e3230342e302f32332d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.57.204.0/23
Signature Algorithm: sha256WithRSAEncryption
16:24:37:89:9c:9c:18:2a:8f:f2:a8:89:09:6a:6b:67:06:b9:
3d:3b:6e:30:02:b1:26:1d:bf:76:0b:34:92:24:17:e1:ce:8b:
6e:4c:e4:05:4d:68:51:37:12:1b:e7:20:96:16:17:ac:8d:85:
ef:33:3a:78:a6:5d:b2:7b:83:88:de:33:ff:be:6d:d9:31:15:
99:58:dd:46:5f:f6:70:f8:49:e0:0b:5c:8d:72:bd:0f:3c:ee:
b5:67:e3:35:89:3f:0a:b2:c9:61:14:0c:46:b8:4c:90:f0:bd:
23:54:8f:33:25:89:69:4c:d9:cf:f4:83:12:71:b9:5e:4c:94:
ad:f0:ee:27:e5:91:3f:71:21:a9:c6:66:52:a9:12:db:1b:ef:
4c:21:19:75:78:cf:8b:03:c1:0e:58:25:ed:e9:59:2f:e9:1c:
c6:6f:cf:78:f6:6e:d3:5b:cb:8c:25:5c:4b:c6:42:24:a5:f6:
4f:80:03:fd:9a:72:35:a8:ee:9d:c3:bd:8f:ee:b4:82:6d:f5:
8a:90:3d:09:0d:ef:12:17:ef:ce:2c:13:48:3f:dd:d0:30:03:
58:34:13:41:46:4a:c7:ff:e7:04:39:26:0d:b4:6b:84:4f:46:
95:1e:26:d6:ee:b5:87:1f:59:75:8f:9a:9d:80:0f:f0:e8:cd:
62:e8:91:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:40 2026 by rpki-client