Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e36352e39362e302f32322d3234203d3e20313331333134.roa
File: 3230322e36352e39362e302f32322d3234203d3e20313331333134.roa (raw, json)
Hash identifier: 7MwdrBhHNVh3OUWcwCRE+qu0cfa6+mrT9ykJF3GygAQ=
Subject key identifier: 93:18:1A:B3:42:6C:CD:5D:78:07:3B:B8:95:59:7A:19:C3:9A:07:00
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 434EDFBD43B089FF44BCA8BF695080A05430166D
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e36352e39362e302f32322d3234203d3e20313331333134.roa
Signing time: Mon 11 May 2026 11:10:17 +0000
ROA not before: Mon 11 May 2026 11:05:17 +0000
ROA not after: Mon 10 May 2027 11:10:17 +0000
asID: 131314
IP address blocks: 202.65.96.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 May 2026 09:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:4e:df:bd:43:b0:89:ff:44:bc:a8:bf:69:50:80:a0:54:30:16:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: May 11 11:05:17 2026 GMT
Not After : May 10 11:10:17 2027 GMT
Subject: CN=93181AB3426CCD5D78073BB895597A19C39A0700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:90:30:8a:11:cd:d8:20:e5:07:74:18:44:
7f:46:ba:1d:35:65:0f:e1:17:61:e4:2e:99:36:02:
e5:31:d8:63:55:dc:f0:bc:92:ee:02:ef:b4:3c:94:
57:4e:a0:5b:95:a3:30:8f:65:fa:62:4e:a8:b7:0c:
d2:fe:f9:1e:78:2e:bb:07:e7:dd:cf:eb:1c:5e:c6:
1a:52:49:92:4e:4f:4a:f9:09:8a:c2:2f:bb:9b:76:
32:5a:60:26:c7:ea:b0:b7:34:50:24:19:b5:3d:ea:
05:90:55:2f:87:7f:0a:17:9b:cc:f1:20:22:eb:28:
3c:04:ef:e7:1c:e5:47:33:63:6b:31:e8:3a:37:2f:
37:a0:2b:61:3d:3b:ce:b8:27:53:7a:d1:16:0c:86:
4a:1a:a8:72:59:c5:e4:60:9d:71:c9:6e:87:8b:3a:
0a:c9:6e:e5:82:78:cb:fb:7d:e2:5f:8e:0e:25:2c:
28:6d:f4:93:7b:43:18:05:6b:33:4a:67:32:88:55:
e5:c8:71:e0:11:df:f7:c6:5e:b2:9e:ce:13:7a:50:
d2:f7:43:37:d2:32:1a:e8:82:5a:b9:b0:21:0e:3a:
0a:d7:56:a3:8a:68:d6:83:3b:85:b1:4a:bf:93:92:
5b:d2:6e:c4:42:7f:bd:11:1a:43:96:e4:65:ef:12:
48:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:18:1A:B3:42:6C:CD:5D:78:07:3B:B8:95:59:7A:19:C3:9A:07:00
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e36352e39362e302f32322d3234203d3e20313331333134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.65.96.0/22
Signature Algorithm: sha256WithRSAEncryption
20:42:e9:41:dd:a4:25:31:20:75:28:00:45:f7:d0:fc:79:94:
6e:5e:89:71:8b:64:95:5e:da:b9:69:17:8b:fe:42:f4:0a:cb:
d8:13:3c:7b:4c:27:cf:5d:93:22:6c:f0:ea:b0:f9:ee:59:2c:
f0:3e:9b:52:ec:f2:66:95:76:9c:cd:4e:bf:ec:fe:d8:23:ce:
02:f3:f7:2f:ed:f6:ae:ac:d3:ee:20:61:df:e1:e3:66:f3:ef:
ab:5c:fe:26:52:f6:39:b9:2e:b5:17:9c:eb:85:6a:9c:60:57:
30:3f:9c:e5:68:b1:b9:10:6b:01:0f:f5:f7:ff:2d:90:b7:3b:
d7:2c:21:c2:63:84:e1:6d:43:a0:76:20:ed:d8:49:51:39:67:
0b:e8:89:d4:67:02:6a:af:d7:62:1c:57:55:d7:7b:8d:94:7e:
b3:e2:c3:8d:51:84:81:2b:f7:10:a1:2d:03:cf:0d:1e:8f:63:
de:ac:98:db:c2:9d:3a:bb:e0:55:ad:10:3a:8d:5c:b8:35:d6:
b7:90:d3:f1:48:e1:d1:1d:bb:f3:5e:7f:b7:ee:11:96:23:2a:
a6:e0:4e:80:e3:de:a7:74:88:aa:31:28:7f:3e:ab:fe:5c:71:
01:12:ad:a6:1a:f0:f9:ce:a6:58:70:64:ec:dc:1d:39:45:f7:
70:2d:f8:83
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:04:04 2026 by rpki-client