Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235322e302f32332d3233203d3e2034383131.roa
File: 3130332e3234332e3235322e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier: xT1aGnuPQo88YV6XcRifzYKNgSSzKx4oQnFedNrQzSQ=
Subject key identifier: 64:24:F9:5D:67:74:25:D2:80:AA:86:AE:24:87:F9:DF:9F:44:D5:93
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 102D0687E3BC01F4062A381FCF4CF4E1E58D887C
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235322e302f32332d3233203d3e2034383131.roa
Signing time: Sat 09 May 2026 07:42:35 +0000
ROA not before: Sat 09 May 2026 07:37:35 +0000
ROA not after: Sat 08 May 2027 07:42:35 +0000
asID: 4811
IP address blocks: 103.243.252.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 13 May 2026 05:36:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:2d:06:87:e3:bc:01:f4:06:2a:38:1f:cf:4c:f4:e1:e5:8d:88:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: May 9 07:37:35 2026 GMT
Not After : May 8 07:42:35 2027 GMT
Subject: CN=6424F95D677425D280AA86AE2487F9DF9F44D593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:5c:44:c0:fa:db:1c:8c:1a:e6:bb:df:5b:
f4:34:1b:de:d4:8e:c9:41:ff:94:72:fe:7e:e5:8b:
e9:e3:ca:f2:9b:36:4a:bf:da:b4:3d:d7:aa:b1:c5:
5f:13:f1:fd:2f:6d:d2:e4:1b:bf:49:61:81:a0:2d:
d8:d5:92:32:7c:13:40:f6:0a:44:89:1e:09:1c:e6:
9a:25:ad:23:22:e6:cb:f6:f3:56:0c:fc:8b:72:ef:
7c:af:8d:0f:e4:4e:fb:8d:a3:d5:59:7e:53:58:99:
35:52:1f:3e:d4:7f:47:e7:d4:57:22:c9:bf:90:14:
ef:8c:c3:7e:a8:89:4c:2f:60:f3:aa:ea:45:b2:28:
91:e9:05:54:f1:d2:63:d8:8a:1b:60:9d:9a:84:46:
5e:8e:51:80:1e:eb:ad:47:dd:0d:55:e7:1b:9c:90:
f8:be:3b:c0:95:a0:34:92:23:5c:e5:d5:97:49:e2:
ff:d8:99:74:7a:c9:ff:bc:ff:94:6c:ec:d2:96:b7:
ba:6f:96:bb:82:fe:a3:c2:ab:72:9b:63:47:85:c3:
31:c6:36:34:f9:57:3f:2e:5b:26:e8:83:9d:0e:38:
80:aa:4c:d5:34:9b:a8:51:85:d5:57:00:74:98:c9:
7a:1d:41:95:ad:f5:6a:b2:2b:67:d0:fc:f1:4a:d8:
5b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:24:F9:5D:67:74:25:D2:80:AA:86:AE:24:87:F9:DF:9F:44:D5:93
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235322e302f32332d3233203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.243.252.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:c4:40:04:30:be:1e:ee:a6:8f:a4:16:66:ed:6d:ff:8c:a9:
df:d7:b5:df:e5:2c:41:b0:2d:ee:25:87:ce:2a:d9:e0:9c:0a:
e7:5f:1d:e6:a7:9a:65:88:29:4c:6c:41:f5:1e:05:89:4a:6e:
b4:ea:e5:b2:dd:10:31:71:6d:60:a3:5a:e7:dd:e2:bb:b9:fe:
9c:94:06:2b:cd:db:94:10:ec:60:dc:46:33:bb:e3:45:db:a7:
f7:cd:f2:af:52:d5:4f:ad:db:73:89:ac:f5:dd:85:6f:65:c8:
35:74:ea:99:64:86:dc:48:78:29:76:9a:a4:f9:c0:e3:cd:d2:
8f:ee:a9:53:32:5d:2c:55:07:0d:5e:bc:b1:ba:6e:7b:f3:de:
52:82:6c:05:d8:51:87:54:f3:8b:01:b3:4d:89:f2:57:e5:53:
90:02:a8:f3:69:d6:b2:7d:cb:ef:d5:42:d5:cc:f3:7b:fa:cc:
08:ca:25:fb:5f:a8:92:2d:df:29:90:4c:0f:49:aa:fd:04:78:
6c:1e:13:38:97:d5:f7:e4:40:89:c3:c6:d6:77:16:dd:83:42:
bf:2f:42:51:50:ec:18:4f:4e:73:2a:a5:6a:86:fb:18:de:b8:
66:61:c2:40:82:f8:67:7c:c2:47:91:71:94:6a:20:b1:49:ab:
41:0a:c4:8b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 10:37:00 2026 by rpki-client