Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235342e302f32332d3233203d3e2034383131.roa
File: 3130332e3234332e3235342e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier: c3/ap0Nhh1Qwb3J6y2zmgPSih5iANzYGazkz45l/HgY=
Subject key identifier: C7:A9:53:B6:8C:F0:ED:8A:27:28:48:8A:AD:C8:A6:F7:8B:F7:51:56
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 166B1593692CC694E7745BB4A46130EA3ED00C5A
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235342e302f32332d3233203d3e2034383131.roa
Signing time: Sat 09 May 2026 07:43:06 +0000
ROA not before: Sat 09 May 2026 07:38:06 +0000
ROA not after: Sat 08 May 2027 07:43:06 +0000
asID: 4811
IP address blocks: 103.243.254.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 13 May 2026 05:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:6b:15:93:69:2c:c6:94:e7:74:5b:b4:a4:61:30:ea:3e:d0:0c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: May 9 07:38:06 2026 GMT
Not After : May 8 07:43:06 2027 GMT
Subject: CN=C7A953B68CF0ED8A2728488AADC8A6F78BF75156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1b:de:95:16:27:9f:73:74:66:d9:10:42:90:
b4:b8:c1:54:20:e2:e0:b1:af:7d:45:72:65:8d:e4:
6a:6e:2a:bf:af:d3:a9:02:74:66:66:59:b7:f6:0b:
83:4a:96:1c:f5:fe:05:ff:5b:3d:01:8d:8e:4a:90:
e9:73:7f:6f:cf:64:3e:31:f5:ee:55:79:a0:ad:51:
d2:5b:10:e1:b2:f0:c8:a0:1e:74:03:cb:46:e1:16:
f7:66:d5:73:9c:68:d9:de:dd:38:57:28:96:2f:1c:
c7:6a:e7:6a:fb:58:04:b8:31:6d:b2:c4:4f:50:37:
a7:a8:81:20:90:a2:8e:9a:dc:79:c4:73:22:58:53:
10:ae:29:6d:33:41:6f:98:f4:c1:6b:cd:34:97:1b:
95:24:00:cd:68:93:47:25:9b:e7:7f:e5:b5:2e:e4:
2c:5e:04:dc:00:e7:f2:fc:f1:50:01:9d:2a:0d:e5:
b5:ea:7a:cb:14:a4:73:95:80:43:e6:f3:67:53:2e:
ba:4a:ef:6a:e9:6d:fa:fb:2e:04:18:ab:1c:f3:b2:
b8:8c:75:c1:2d:13:5e:23:97:9e:11:73:82:d7:48:
42:55:f4:0b:b4:9b:ea:47:94:9e:ee:39:86:41:ad:
f6:2b:53:06:5f:64:de:98:a2:ad:de:7c:a8:9b:5c:
7b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A9:53:B6:8C:F0:ED:8A:27:28:48:8A:AD:C8:A6:F7:8B:F7:51:56
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235342e302f32332d3233203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.243.254.0/23
Signature Algorithm: sha256WithRSAEncryption
78:7a:88:bf:6d:cc:81:92:5b:a3:12:f5:fc:a4:29:8c:eb:cb:
79:46:be:bf:ed:d0:d9:48:f9:7d:eb:fd:d8:28:62:5b:33:0f:
3c:d3:8b:4a:8e:16:c3:92:58:f9:3d:1f:f0:ea:34:8b:0c:38:
b0:51:49:43:90:0c:85:9f:15:d4:f2:00:84:a1:20:e7:5d:9d:
bf:1a:17:86:09:2e:99:0c:50:16:8f:14:6c:63:b0:a0:ab:40:
8d:07:bf:0b:9a:31:12:52:dc:c9:33:c8:11:47:09:76:ae:8f:
08:07:d6:b2:2b:ae:ae:32:57:a4:86:d7:94:d2:c0:4f:72:92:
fd:2a:6c:a5:fa:dc:b4:5d:b0:fc:9b:c0:9b:3c:35:0b:0f:f0:
25:ce:40:9d:6f:ba:e6:23:a6:25:e4:0c:17:3a:37:db:09:af:
1a:39:d9:51:88:e9:a3:5e:92:9d:52:b0:c6:68:40:a8:c7:e3:
93:a6:10:0a:10:c5:78:62:b3:38:04:36:bf:15:49:96:35:da:
5f:44:82:82:2f:ee:83:70:7b:6d:fa:c8:6c:08:90:fe:84:2a:
98:03:71:36:75:cd:5a:23:42:d8:a2:f4:58:dc:99:88:b1:65:
90:9b:a7:46:56:7c:0c:b4:5f:bd:cb:f5:2d:1b:46:87:c2:82:
b0:8e:d0:ca
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 10:16:57 2026 by rpki-client