Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/--5p3HNP_npcM9WwQGiJmHx5u0U.roa
File: --5p3HNP_npcM9WwQGiJmHx5u0U.roa (raw, json)
Hash identifier: Rl9Es6qphuLb/+2nbxNbdm0tzkYUplAdlWLJexuDZlE=
Subject key identifier: FB:EE:69:DC:73:4F:FE:7A:5C:33:D5:B0:40:68:89:98:7C:79:BB:45
Certificate issuer: /CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Certificate serial: 0299
Authority key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/--5p3HNP_npcM9WwQGiJmHx5u0U.roa
Signing time: Tue 16 Sep 2025 07:28:27 +0000
ROA not before: Tue 16 Sep 2025 07:28:27 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 62468
IP address blocks: 45.248.8.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665 (0x299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Validity
Not Before: Sep 16 07:28:27 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=FBEE69DC734FFE7A5C33D5B0406889987C79BB45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:66:97:45:99:83:41:86:3f:6e:4e:f0:a2:
8e:c6:5d:3d:d3:dd:35:c1:99:e1:a8:5d:58:75:5a:
1b:b1:46:df:71:71:60:6c:6d:df:da:d5:e8:b5:a8:
3c:fd:59:6e:b7:2e:ea:77:c5:44:7f:35:20:1c:f3:
9d:2d:7c:41:62:26:c5:8b:90:c3:99:51:b4:33:07:
17:f3:28:9e:85:92:80:a4:25:17:5f:ad:63:d8:76:
23:7f:49:3c:03:ab:7e:25:1c:3b:5e:f3:47:26:77:
14:b7:71:64:a5:94:13:fe:73:ef:51:db:ab:4a:df:
a0:e8:0e:09:bb:5f:e1:34:b5:a3:68:43:eb:09:6d:
52:c0:a6:70:27:bc:42:db:6f:7c:4f:52:a7:a8:5e:
32:6e:c2:87:d7:d3:d9:8d:b7:3f:28:6d:f8:bb:92:
29:d0:ad:06:e9:73:3c:32:75:2a:20:03:ae:13:35:
c0:07:00:dc:8f:f6:59:f6:8c:a5:88:53:9a:f9:27:
8c:21:2c:af:65:07:a5:38:4a:24:42:f6:47:06:01:
ac:9a:5f:e4:ea:0a:f5:44:e4:90:88:c1:5d:17:3c:
95:4a:d1:39:54:3f:40:e6:36:83:b5:74:d5:b8:3c:
fc:62:43:1c:a9:f5:93:13:97:ac:34:a9:66:12:cb:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EE:69:DC:73:4F:FE:7A:5C:33:D5:B0:40:68:89:98:7C:79:BB:45
X509v3 Authority Key Identifier:
keyid:AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/--5p3HNP_npcM9WwQGiJmHx5u0U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.8.0/22
Signature Algorithm: sha256WithRSAEncryption
61:a2:5e:1e:58:b1:44:05:92:69:e0:ea:6e:02:1e:1b:a2:63:
77:2b:1f:a6:d1:fc:ec:1e:35:c6:55:23:22:5b:69:5e:e4:f6:
42:86:68:b4:51:c9:7a:b5:a7:98:f7:02:f3:7c:d0:07:c1:42:
f8:af:33:73:45:c6:8c:58:79:42:6f:42:bf:a1:4e:f8:39:fa:
20:c4:9f:f7:a7:f2:85:34:49:35:dc:e7:06:df:55:7b:be:fe:
3b:db:67:63:12:2c:f5:95:96:66:63:1f:0e:24:e5:78:0a:17:
61:9a:16:64:c9:67:db:bd:57:ab:9a:9c:35:b8:0c:63:f4:e9:
b5:dc:f9:7e:e1:b3:69:1b:23:22:9b:2e:c3:09:4a:81:e5:e5:
6a:2e:f3:e1:45:35:ee:61:88:5d:27:ce:2b:4f:9e:ef:b1:5c:
12:cf:2f:ea:15:12:d4:ba:97:51:24:be:ee:f6:8c:9b:1e:04:
73:0b:28:81:8d:51:66:3c:de:84:b5:5f:2a:18:2d:98:80:e0:
13:98:ac:70:dc:93:ae:53:dd:49:02:76:0f:55:c0:8c:cb:d8:
47:b1:1e:55:2c:de:a5:ba:0a:c8:15:6b:26:e5:59:9d:01:73:
f6:df:b2:f8:cf:7b:0a:1f:38:14:60:b6:71:45:7e:3a:72:15:
57:97:21:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:25 2025 by rpki-client