Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e36352e39362e302f32322d3234203d3e2034383437.roa
File: 3230322e36352e39362e302f32322d3234203d3e2034383437.roa (raw, json)
Hash identifier: lg4zOwehK+X9l7wIkRdVBqS30OcmWmCyCoWAflc/mhE=
Subject key identifier: 1E:F7:2B:8A:36:02:4D:A8:56:C0:41:3D:AA:15:00:64:A3:4A:9A:C5
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 38BEA964623E61F1D69DE8DB81A05B9033424955
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e36352e39362e302f32322d3234203d3e2034383437.roa
Signing time: Mon 11 May 2026 11:10:17 +0000
ROA not before: Mon 11 May 2026 11:05:17 +0000
ROA not after: Mon 10 May 2027 11:10:17 +0000
asID: 4847
IP address blocks: 202.65.96.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 May 2026 09:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:be:a9:64:62:3e:61:f1:d6:9d:e8:db:81:a0:5b:90:33:42:49:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: May 11 11:05:17 2026 GMT
Not After : May 10 11:10:17 2027 GMT
Subject: CN=1EF72B8A36024DA856C0413DAA150064A34A9AC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:2e:a9:b0:51:73:51:32:60:7b:4a:04:35:
c3:b0:e9:ec:07:2b:1c:9c:91:ee:ef:30:ec:94:5d:
de:6d:d3:74:b6:88:f0:44:55:4e:e0:99:4a:fa:3c:
00:99:5f:6e:8b:64:ce:b7:80:9d:bc:b0:d5:03:8f:
3a:e3:e9:99:f8:d6:ee:d3:59:21:cb:20:3c:89:f7:
b0:4c:46:d8:e8:37:40:55:e8:c4:f8:1d:7d:da:1c:
69:5f:bd:fe:0e:6c:df:1c:67:3f:8e:dc:4c:b2:aa:
56:5e:78:b5:1d:00:17:54:a8:ac:e4:26:f2:b9:b2:
75:b5:a5:d2:6e:0d:7a:63:c8:f4:73:0b:0f:60:99:
7b:64:a7:c5:d0:78:c1:d8:5d:d3:13:41:14:0d:73:
f1:ee:eb:ae:0c:dd:13:d2:98:5f:83:f1:0c:1c:14:
e7:bf:e8:3b:90:41:62:7c:67:f8:19:21:7d:9b:96:
b2:ab:c0:5c:a4:12:74:35:7a:d7:1f:17:38:db:55:
3d:95:ff:38:f8:5e:a3:cd:de:80:e6:3f:f1:95:2d:
28:e9:d1:6b:9d:a7:fe:3b:21:d1:29:ca:af:9a:b7:
08:0a:ab:2f:fa:cd:69:68:4a:6a:9a:d5:61:e9:a9:
64:d0:cb:1b:82:1b:b7:d0:af:57:ff:eb:f5:a1:30:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F7:2B:8A:36:02:4D:A8:56:C0:41:3D:AA:15:00:64:A3:4A:9A:C5
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e36352e39362e302f32322d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.65.96.0/22
Signature Algorithm: sha256WithRSAEncryption
01:62:1e:84:24:bb:d7:da:9a:57:a4:dd:17:f1:60:b6:05:58:
dc:cf:ab:fc:1f:3f:77:13:49:af:91:07:bd:c6:67:a8:f1:41:
b8:ce:15:14:7b:e1:c7:a1:4d:1d:a5:50:22:d0:99:84:6d:6c:
9c:21:2c:27:2f:9c:7d:0a:4d:58:52:18:7d:98:a9:3f:66:67:
fd:15:97:40:18:ac:6b:fc:07:bb:7d:2e:4a:fd:12:04:3f:66:
1e:91:b5:91:15:35:81:a3:90:a5:03:a7:c0:f2:01:ee:c4:4c:
a6:2a:c4:b8:8c:f6:a1:87:8a:1d:dc:3e:c4:dd:39:95:1e:ad:
30:d5:ce:8d:f1:eb:b8:e4:f6:0c:63:3f:3d:e7:61:23:45:0e:
a4:d0:04:d8:ed:4f:f1:7d:24:2e:3f:18:ab:0a:57:20:37:52:
11:67:ac:4f:8c:24:12:c3:b9:f4:da:f4:5f:bb:e3:09:41:77:
4a:24:0e:6e:cb:4b:3b:7e:87:93:3f:40:cb:a3:95:d8:63:85:
84:a1:a5:fe:ec:88:63:80:8d:7f:0e:b2:5b:73:26:a4:8e:3a:
d6:49:48:bf:2a:e1:42:80:86:cc:bb:b1:2e:b7:8a:b5:79:07:
e3:5b:b2:b7:5a:78:8f:d5:3e:47:74:af:4a:28:55:a1:dc:fa:
41:39:8e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:02:57 2026 by rpki-client