Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/48PI8nKO3eXLthPohUMH2IkmHzc.roa
File: 48PI8nKO3eXLthPohUMH2IkmHzc.roa (raw, json)
Hash identifier: wGq0gkHVOoB6G8/9fs3JtbwMIPVr6AlID9NzzTnK8T8=
Subject key identifier: E3:C3:C8:F2:72:8E:DD:E5:CB:B6:13:E8:85:43:07:D8:89:26:1F:37
Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Certificate serial: 15
Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/48PI8nKO3eXLthPohUMH2IkmHzc.roa
Signing time: Fri 22 Aug 2025 06:24:00 +0000
ROA not before: Fri 22 Aug 2025 06:24:00 +0000
ROA not after: Thu 20 Aug 2026 07:49:18 +0000
asID: 138457
IP address blocks: 103.61.62.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Validity
Not Before: Aug 22 06:24:00 2025 GMT
Not After : Aug 20 07:49:18 2026 GMT
Subject: CN=E3C3C8F2728EDDE5CBB613E8854307D889261F37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:3b:a4:56:20:cc:94:1f:42:2c:02:c7:68:
21:b7:b1:93:3d:21:9d:2e:b1:04:f3:ef:af:a3:2e:
9e:8a:f6:30:66:05:55:49:53:64:2a:14:c0:df:89:
66:03:0c:89:94:f5:3a:d4:33:6e:9c:fc:58:8e:d9:
12:5c:18:c0:4f:83:8f:95:4f:c3:94:b7:69:7c:37:
f5:69:d6:c9:ba:8c:74:48:7e:46:85:e6:9c:80:c1:
33:81:08:e1:57:37:09:c4:7b:bd:30:d9:f2:dd:b5:
97:9f:5b:08:b0:fb:27:ec:cc:12:34:a0:df:9a:3d:
98:dd:f2:f5:a1:b5:72:df:be:7b:2a:a5:f5:18:5a:
65:ff:0f:b2:b3:9f:3a:52:c1:42:38:d1:c5:ba:ff:
ee:79:4b:bf:b3:bd:7f:01:45:dc:c0:49:9a:76:de:
82:72:44:b0:54:bc:0c:48:57:61:86:6b:ca:de:18:
0d:64:60:6b:2b:b6:cf:ba:17:68:8e:6c:0a:6e:6a:
2f:12:d9:0e:c6:25:27:80:1d:0d:e9:1c:51:8f:50:
8c:bb:72:9f:93:f8:4c:5a:b1:9d:42:9b:c0:8c:50:
0c:59:c6:76:cb:b2:f7:03:9e:d5:17:c4:f6:50:36:
8f:04:22:c1:0a:15:fd:f9:77:55:8a:17:8d:2a:f9:
bf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C3:C8:F2:72:8E:DD:E5:CB:B6:13:E8:85:43:07:D8:89:26:1F:37
X509v3 Authority Key Identifier:
keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/48PI8nKO3eXLthPohUMH2IkmHzc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.62.0/24
Signature Algorithm: sha256WithRSAEncryption
42:61:c5:93:30:dd:6e:16:7a:4f:ce:09:fe:86:4c:81:23:d6:
93:c9:88:e3:3b:1c:d0:4d:24:18:6c:7c:a4:fb:b2:e9:ce:a8:
f1:b0:2a:1c:41:90:f9:f7:9e:2a:5b:72:8d:c6:5b:00:67:1d:
f1:4c:2b:01:6d:7a:1d:21:6d:43:36:5f:e8:2a:07:29:52:9d:
7d:7d:33:60:a5:d1:04:23:e1:ea:68:12:d3:ab:ec:64:36:ec:
4a:c4:42:77:30:4c:78:92:65:fb:b4:84:e6:e8:36:f9:cb:d0:
a0:18:f6:ee:a4:8a:b2:67:9a:59:6e:31:c8:02:4d:06:e7:0b:
12:b3:b4:c2:9b:6c:af:fd:a4:cd:a8:cf:12:6b:e8:45:dd:f3:
51:a8:b0:17:a3:8c:04:d9:e0:7e:66:32:bf:83:dd:2e:29:95:
5e:72:86:c3:a6:08:29:81:bd:ab:23:76:2e:f1:5e:f4:3e:ee:
b4:44:85:13:ea:e7:44:e7:e1:fd:e3:8a:b2:58:f0:29:86:f2:
52:86:25:72:2c:6f:25:ea:92:5b:eb:74:ec:3a:48:10:f2:dd:
39:c3:ff:4f:0f:49:e4:32:fb:09:67:7c:31:ef:27:6f:18:e3:
b3:a2:75:29:31:b4:ab:1f:1e:fc:b1:d8:f4:92:68:e4:6b:84:
21:2e:d7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:48:30 2025 by rpki-client