Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/4OmMwHZdd0WjdZK52xGL4UYdR-s.roa
File: 4OmMwHZdd0WjdZK52xGL4UYdR-s.roa (raw, json)
Hash identifier: Zzi/3bmJfIrw0XdJjnutorU7VeSwCIv8oXloxDA5R2c=
Subject key identifier: E0:E9:8C:C0:76:5D:77:45:A3:75:92:B9:DB:11:8B:E1:46:1D:47:EB
Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Certificate serial: 48
Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/4OmMwHZdd0WjdZK52xGL4UYdR-s.roa
Signing time: Fri 22 Aug 2025 06:35:04 +0000
ROA not before: Fri 22 Aug 2025 06:35:04 +0000
ROA not after: Thu 20 Aug 2026 07:49:18 +0000
asID: 138457
IP address blocks: 2402:7d80:fffe::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Validity
Not Before: Aug 22 06:35:04 2025 GMT
Not After : Aug 20 07:49:18 2026 GMT
Subject: CN=E0E98CC0765D7745A37592B9DB118BE1461D47EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:2b:f1:38:00:40:0b:6d:0b:3d:e8:ca:d9:
29:fb:ec:89:df:6f:1a:5a:b7:e2:0e:a1:09:22:6d:
c5:e7:e9:1c:c4:bf:59:d3:b7:93:e2:cf:3a:8a:33:
14:00:d7:8f:45:c7:2b:ad:d5:cd:76:f5:6c:67:6b:
b1:63:75:59:f8:df:28:91:77:eb:7e:1b:6b:af:9e:
f4:48:b0:2f:64:cc:24:da:f2:09:e5:25:f0:b7:5c:
e6:3d:7b:4f:bd:be:06:bb:ab:1e:46:92:ae:37:d6:
c1:6e:df:dc:e7:4f:70:8d:5b:cb:b5:ca:0c:b2:d3:
ca:41:58:d8:b4:a1:de:1e:ae:1e:b2:a8:a9:21:9a:
96:ee:e7:61:bf:fc:fb:0e:ce:91:1e:0f:76:68:f0:
f2:9c:e9:aa:e7:ee:40:6a:d4:da:48:47:74:da:6f:
6f:c2:88:78:a4:92:92:b3:50:84:c5:86:df:6a:b9:
a5:5a:2b:b6:d1:09:93:91:ec:ab:01:5f:24:a7:87:
fb:4a:b6:f3:86:6d:00:53:14:5d:a4:c7:52:4f:32:
3b:56:6b:3f:ea:ce:96:fc:05:f6:94:1e:ce:9a:d7:
2e:81:b1:d3:3c:00:2c:e2:36:83:6e:8b:fd:82:d2:
cc:ae:41:de:65:c2:02:23:6b:6e:57:3e:d7:b9:5f:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E9:8C:C0:76:5D:77:45:A3:75:92:B9:DB:11:8B:E1:46:1D:47:EB
X509v3 Authority Key Identifier:
keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/4OmMwHZdd0WjdZK52xGL4UYdR-s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:7d80:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
8d:08:6a:b2:39:80:a9:4e:a5:fa:da:20:26:26:c6:34:cc:29:
f8:ee:d3:85:e8:c2:5c:79:c8:66:e1:a7:f8:8b:2d:66:41:af:
5f:0f:41:fb:4e:1b:7a:7d:c3:5b:84:65:6b:b8:4b:d3:5a:55:
65:61:e9:58:54:bc:48:0b:f2:20:5f:22:6a:19:af:f8:e7:bc:
eb:85:1e:dd:cd:b8:f1:db:54:da:5f:89:84:01:13:d8:21:40:
60:34:9c:ca:a2:01:96:68:1d:c0:27:ea:5e:5d:32:b8:39:b7:
a3:e4:3d:d2:30:a6:70:cf:f2:55:24:4a:ee:1d:36:88:68:6f:
84:89:c7:76:bd:c7:22:ec:54:aa:21:02:46:1c:aa:d3:91:9f:
8a:ea:e2:6a:f3:6b:5e:ba:54:b4:ea:cf:66:da:fa:51:ba:d2:
05:8d:92:84:4e:f9:10:9c:a1:c6:98:40:f1:b0:4d:18:cc:68:
a0:16:41:d9:76:97:53:7d:29:ec:21:89:fc:f4:13:bc:c6:6a:
77:7e:85:7d:9c:13:cd:cc:a9:ab:68:b9:7f:5d:b8:bc:5a:67:
9c:42:5f:08:74:84:86:ce:f3:2c:71:23:a0:0a:87:40:27:aa:
a3:53:d6:72:db:4d:6e:8a:14:2d:b9:c4:64:1d:0e:18:39:19:
4a:25:1a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:46:19 2025 by rpki-client