Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/-8aUEH0vhq9u6QiOx6jnn7G_sdA.roa
File: -8aUEH0vhq9u6QiOx6jnn7G_sdA.roa (raw, json)
Hash identifier: VXlM9/7epgqetzNxis2Oa1geLZqhGqAt4ohU5/UsDIw=
Subject key identifier: FB:C6:94:10:7D:2F:86:AF:6E:E9:08:8E:C7:A8:E7:9F:B1:BF:B1:D0
Certificate issuer: /CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Certificate serial: 13
Authority key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/-8aUEH0vhq9u6QiOx6jnn7G_sdA.roa
Signing time: Sat 17 May 2025 07:52:52 +0000
ROA not before: Sat 17 May 2025 07:52:52 +0000
ROA not after: Sat 16 May 2026 10:06:17 +0000
asID: 14618
IP address blocks: 43.254.192.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Validity
Not Before: May 17 07:52:52 2025 GMT
Not After : May 16 10:06:17 2026 GMT
Subject: CN=FBC694107D2F86AF6EE9088EC7A8E79FB1BFB1D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:1f:4f:49:80:26:a2:c3:38:4f:0f:87:18:
77:2f:f1:21:ba:4d:75:b3:94:f5:7f:fe:da:74:65:
4d:d1:22:1b:36:63:ca:c4:c3:fd:a0:bf:0e:37:34:
6b:6d:ff:8b:4a:20:c4:51:f4:63:5e:99:29:6d:de:
42:ec:a4:f2:ed:d2:a3:34:45:37:4f:b2:3c:eb:7a:
3c:92:c0:80:53:92:1d:88:55:5e:f9:70:d7:59:0d:
fe:bf:97:11:3c:5a:9f:09:c3:12:b4:d6:48:e3:1f:
f5:d9:da:85:ba:b1:b1:25:2e:0b:a3:84:a7:06:70:
96:86:26:c1:23:16:7d:c3:d1:39:d6:19:6e:54:c4:
b2:3f:f7:05:8f:7c:4a:39:76:0a:43:f5:17:27:b1:
8d:f6:51:66:92:75:20:d4:cb:c2:d2:b9:5c:0c:ea:
64:d9:f4:f0:61:a2:ed:40:e9:c6:52:07:ec:e7:96:
e1:4d:36:be:39:d2:21:c7:27:7d:73:8f:76:76:7c:
f4:07:c8:df:18:04:13:2d:b2:60:e3:31:b8:7d:ef:
bf:63:7a:ad:a6:2a:e5:bc:38:2b:55:53:d2:68:ee:
e8:fd:ff:42:df:a0:e7:37:98:10:f3:5a:26:9e:6a:
bf:f5:2f:78:cd:ee:97:71:9e:47:b9:d9:07:4a:13:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C6:94:10:7D:2F:86:AF:6E:E9:08:8E:C7:A8:E7:9F:B1:BF:B1:D0
X509v3 Authority Key Identifier:
keyid:AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/-8aUEH0vhq9u6QiOx6jnn7G_sdA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:22:6c:70:10:61:54:9b:0e:6f:e0:fe:7e:88:a2:c9:65:b7:
cb:49:4c:93:a7:52:d5:a6:01:f2:6c:1d:af:6d:cf:03:ba:d1:
c5:2e:b0:53:b6:9a:3e:c6:5a:48:2a:8a:06:a3:4d:c9:68:56:
c8:e2:cd:88:72:09:b6:63:c1:d6:12:b9:ca:86:e8:8d:bd:cb:
4e:5f:40:d5:db:0d:e3:45:d1:9e:70:c3:91:2c:f0:2e:53:a0:
af:95:af:6d:ab:8b:41:b6:3b:13:bc:b9:01:0c:8c:1d:ab:69:
19:cb:63:ed:3d:2d:22:68:5c:a9:1b:6e:70:b1:20:6b:f9:a5:
af:3d:ce:f4:3e:a0:a7:d7:49:83:93:36:13:d7:74:1f:48:19:
4b:13:6a:e8:94:2a:6e:79:13:50:83:e0:f7:a2:1f:db:70:3f:
bf:c1:af:62:76:11:9a:c8:a9:00:ae:7f:9b:99:b3:8a:e0:c0:
a1:a3:f9:19:30:8f:79:6c:b3:70:69:33:7c:5b:50:c0:41:3a:
f3:a1:6e:32:1b:cc:09:8a:12:6f:45:6a:e4:87:fe:71:76:4d:
33:80:51:47:f8:19:ec:2c:dc:ab:07:1f:bf:37:c3:a6:e1:33:
ea:33:28:44:76:a8:ac:48:c8:8a:44:3a:42:31:49:0e:4a:d0:
b7:18:5c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:50:02 2025 by rpki-client