Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e36352e39362e302f32322d3234203d3e2034383038.roa
File: 3230322e36352e39362e302f32322d3234203d3e2034383038.roa (raw, json)
Hash identifier: BWZzHtILhF29sAMihm4rAMobsDqkqZEP4I9voH4alMY=
Subject key identifier: EE:EE:84:1E:F8:C3:A4:86:BC:AC:F1:F0:5C:4F:0A:CA:CC:86:35:22
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 65D42465AF4B0D2BB22EF384997A8F09B5FD6275
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e36352e39362e302f32322d3234203d3e2034383038.roa
Signing time: Mon 11 May 2026 11:10:17 +0000
ROA not before: Mon 11 May 2026 11:05:17 +0000
ROA not after: Mon 10 May 2027 11:10:17 +0000
asID: 4808
IP address blocks: 202.65.96.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 May 2026 09:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:d4:24:65:af:4b:0d:2b:b2:2e:f3:84:99:7a:8f:09:b5:fd:62:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: May 11 11:05:17 2026 GMT
Not After : May 10 11:10:17 2027 GMT
Subject: CN=EEEE841EF8C3A486BCACF1F05C4F0ACACC863522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:73:e6:98:7e:aa:6b:3a:3c:d0:2d:d6:83:
6d:ae:c8:f5:77:f7:1f:1b:42:81:e1:90:b5:85:7e:
9b:a0:81:15:6c:c5:a3:8b:06:a3:5d:72:d1:9e:00:
c7:04:e9:95:a2:8e:21:ed:d5:80:15:73:09:67:91:
19:0c:ed:99:65:58:51:b5:36:44:72:f7:50:99:b8:
53:d8:f9:e2:e8:e8:a2:7a:fe:d4:74:9a:66:7b:81:
c7:a5:38:2b:db:83:ec:be:62:ab:30:72:cb:19:de:
71:eb:e0:17:6f:77:94:c9:16:7f:ec:87:0e:c4:cc:
67:69:55:a3:9c:17:0a:1c:ec:51:e9:43:dd:8f:32:
22:ba:5b:4b:fb:02:9f:87:a3:f8:16:1d:df:8f:0b:
45:e8:22:8b:0a:b7:bf:15:14:e1:f0:a4:12:ee:8e:
81:88:db:be:b8:04:8a:cb:ac:2d:19:64:8d:6b:b8:
5b:5b:2a:98:0c:5b:e9:97:d8:3f:00:63:4c:a4:29:
ce:c1:22:f1:9a:20:c6:71:d5:fc:64:98:08:fe:f7:
ed:05:99:c3:f3:17:03:bf:07:26:20:e9:70:2d:28:
ec:37:a5:8a:a0:28:af:db:d1:00:3a:6b:2c:ff:d5:
b8:ba:44:9d:58:a6:0e:99:6c:b9:fb:28:60:01:82:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EE:84:1E:F8:C3:A4:86:BC:AC:F1:F0:5C:4F:0A:CA:CC:86:35:22
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e36352e39362e302f32322d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.65.96.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:e0:d8:08:9c:4b:bc:16:d0:aa:8c:92:e2:07:3f:3d:46:4b:
00:80:ed:4d:8c:84:42:4e:0a:d1:c2:a2:28:0d:07:23:94:00:
fb:76:9e:66:fe:88:56:65:a2:86:2f:b8:a2:d9:97:67:14:1b:
90:22:95:5f:f2:85:c5:da:4c:51:b8:d9:70:a8:3d:b9:c7:f5:
0f:5c:73:63:08:2b:15:ac:07:97:72:c1:57:ab:37:09:ac:76:
a6:7f:ad:89:d6:ee:76:cc:dc:3c:15:de:92:4e:19:56:78:5e:
ae:c5:50:9f:33:8c:81:88:fb:ea:5f:cb:a8:6a:fc:92:bf:66:
a4:5f:47:f1:08:93:e6:97:9e:53:30:6c:60:52:c6:cb:65:99:
2e:c5:0a:48:a7:2a:29:3c:38:f1:a8:b7:1b:97:e7:69:96:cc:
3a:4f:51:02:0c:5a:88:fc:99:69:f8:ca:65:36:dd:e5:82:b1:
c9:e3:06:73:8d:9d:78:3c:22:4c:3b:54:5c:36:f5:75:80:e5:
91:97:33:d7:80:30:1f:1e:cb:d7:57:cf:b6:d7:9d:49:dd:87:
e6:8f:34:4a:4c:82:a5:6d:02:cb:69:90:73:92:fd:e5:4d:fd:
74:8a:8a:ec:ce:eb:b2:6a:93:e7:0f:2b:3e:ed:de:56:33:0e:
84:a0:06:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:42:34 2026 by rpki-client