Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/0SApI_yjyt058-yY4QkK-9_hHf0.roa
File: 0SApI_yjyt058-yY4QkK-9_hHf0.roa (raw, json)
Hash identifier: wc8AtkR1KwoxzppGOgBW08GNL1QcRHViEidhlZwYxg8=
Subject key identifier: D1:20:29:23:FC:A3:CA:DD:39:F3:EC:98:E1:09:0A:FB:DF:E1:1D:FD
Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Certificate serial: 42
Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/0SApI_yjyt058-yY4QkK-9_hHf0.roa
Signing time: Fri 22 Aug 2025 06:30:23 +0000
ROA not before: Fri 22 Aug 2025 06:30:23 +0000
ROA not after: Thu 20 Aug 2026 07:49:18 +0000
asID: 139140
IP address blocks: 2402:7d80::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Validity
Not Before: Aug 22 06:30:23 2025 GMT
Not After : Aug 20 07:49:18 2026 GMT
Subject: CN=D1202923FCA3CADD39F3EC98E1090AFBDFE11DFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:7d:89:8f:b7:67:d5:ab:38:89:a1:8e:2c:
81:24:ad:2f:84:0a:ec:d8:4f:64:fd:2c:6f:9a:12:
93:df:58:7e:de:c2:69:d8:d4:e2:df:09:b8:a6:95:
68:3b:e2:55:c7:7b:37:00:6e:fd:63:35:49:68:c7:
d7:aa:b6:66:a3:88:8e:2b:c7:98:5f:74:34:d9:03:
33:2d:21:be:4d:55:0d:59:65:19:28:a1:62:ea:07:
b5:a3:da:07:0e:05:20:3e:0c:15:1e:81:08:7a:be:
c0:df:7b:42:01:c4:00:66:17:e1:06:83:b9:4b:49:
ee:a7:21:a0:9a:64:6c:ac:7b:e7:31:77:40:07:6d:
39:aa:bb:4e:8f:5a:c7:b5:aa:97:6f:39:b2:04:c3:
34:fb:fc:5f:50:a7:4e:9e:34:f3:b3:b9:fa:4d:9e:
5d:02:f3:3d:93:8d:c7:62:e5:79:63:0b:37:10:a6:
e1:86:f5:19:75:11:35:ee:42:1a:f5:d6:53:bc:a5:
8e:40:d3:65:d4:4f:ec:33:4e:03:88:d3:80:97:37:
ca:34:3e:2b:e4:6d:bc:68:00:46:26:6d:19:9a:a5:
e5:7f:23:73:92:e3:17:8d:60:7d:98:ec:6e:f6:35:
13:9e:3d:aa:65:9a:84:c3:d9:5b:3a:33:f6:5b:75:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:20:29:23:FC:A3:CA:DD:39:F3:EC:98:E1:09:0A:FB:DF:E1:1D:FD
X509v3 Authority Key Identifier:
keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/0SApI_yjyt058-yY4QkK-9_hHf0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:7d80::/48
Signature Algorithm: sha256WithRSAEncryption
4f:6e:64:93:26:9f:dd:e2:31:ad:ec:15:b1:03:f0:b1:d8:13:
7a:fe:f6:e5:b1:8c:ec:30:73:5c:9c:93:f8:2c:33:df:fe:f7:
3c:e9:e6:f5:83:b6:dc:2d:9e:fc:cd:32:dc:c9:75:e1:c1:be:
4b:95:7a:bd:b5:74:5e:28:58:cf:30:69:24:0b:6c:f5:2a:a1:
87:08:bf:aa:75:60:20:fe:12:a8:bf:0a:1e:83:18:c2:f0:5b:
ad:d8:89:89:4f:db:02:a8:91:cf:fa:ee:3d:67:d4:47:86:a0:
1c:1e:94:38:19:f3:4a:f4:91:00:f7:2d:c8:28:29:b1:ea:aa:
53:0a:23:5a:bd:8d:11:08:5f:b9:ef:d4:3f:ee:6d:4b:5b:b2:
77:8f:3d:69:b0:9c:2e:0e:d8:9b:39:13:e7:91:31:36:3d:4e:
21:61:e1:c2:b3:ee:1d:41:b5:34:98:32:53:0e:70:71:f3:e5:
aa:10:ec:6c:4f:20:8f:2f:04:c8:9b:52:61:ce:49:8f:39:39:
2a:f3:31:cb:c0:2c:e0:7c:d6:6d:32:49:58:bd:66:22:c7:dd:
84:6a:fc:72:8b:2b:d7:f9:66:c7:8a:f8:f0:cd:dc:50:15:53:
31:f0:87:57:52:31:4f:7b:c1:13:57:1a:c6:8e:23:00:ca:e4:
84:c8:44:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:50:54 2025 by rpki-client