Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/AyzRhScMACwFuVHUAO3-qxrlECU.roa
File: AyzRhScMACwFuVHUAO3-qxrlECU.roa (raw, json)
Hash identifier: U6GIOyoEyfazTP2/etmQKFGyacYKWaGNhoftZVH0YKg=
Subject key identifier: 03:2C:D1:85:27:0C:00:2C:05:B9:51:D4:00:ED:FE:AB:1A:E5:10:25
Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Certificate serial: 25
Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/AyzRhScMACwFuVHUAO3-qxrlECU.roa
Signing time: Fri 22 Aug 2025 06:27:16 +0000
ROA not before: Fri 22 Aug 2025 06:27:16 +0000
ROA not after: Thu 20 Aug 2026 07:49:18 +0000
asID: 63582
IP address blocks: 45.120.241.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Validity
Not Before: Aug 22 06:27:16 2025 GMT
Not After : Aug 20 07:49:18 2026 GMT
Subject: CN=032CD185270C002C05B951D400EDFEAB1AE51025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:f3:3a:18:a1:47:16:39:c4:2f:24:48:fa:
75:6d:72:01:da:23:cd:e0:35:bf:84:c9:e8:2d:9f:
60:14:17:49:93:fa:d2:38:2c:cd:a5:13:84:e2:b6:
05:55:35:24:f3:a8:f8:94:4c:16:dd:34:ec:cd:3d:
0e:a5:55:ed:6f:f3:1d:6c:40:09:c8:33:d1:33:54:
3a:63:41:1b:a4:c3:0f:a8:52:ff:b2:57:0e:2a:1a:
55:b5:33:84:66:e9:df:71:97:95:cd:4e:e3:36:6f:
fc:57:da:a1:6c:c0:e5:e1:b4:07:63:5b:5e:1f:40:
c3:a3:bd:38:95:3b:10:c3:08:c0:fc:61:fb:96:c1:
bf:3f:7c:12:e2:47:aa:38:78:c9:e1:26:57:4f:4f:
43:a8:4c:28:7d:2f:37:22:7f:0a:3b:7f:43:b8:4d:
2f:37:66:00:c4:d3:db:1c:af:8a:ed:48:db:f0:3f:
70:5c:40:13:47:9c:04:00:b8:81:2d:92:66:b0:3e:
1d:ae:dc:9e:ff:a7:42:b0:23:46:1b:fe:f4:47:aa:
91:80:30:54:96:56:95:25:69:6a:97:07:51:b1:dd:
b7:24:88:63:7b:cf:18:e3:21:47:d2:d6:ca:57:a4:
8f:a2:1a:3c:cb:10:aa:53:fa:c6:3e:d5:9e:74:fa:
ca:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2C:D1:85:27:0C:00:2C:05:B9:51:D4:00:ED:FE:AB:1A:E5:10:25
X509v3 Authority Key Identifier:
keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/AyzRhScMACwFuVHUAO3-qxrlECU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.120.241.0/24
Signature Algorithm: sha256WithRSAEncryption
16:3d:5b:7c:45:67:7b:3e:83:c7:ee:e0:28:b0:92:94:6c:83:
f2:51:f0:8a:9f:ce:e4:5e:71:47:ab:52:de:40:3c:d0:93:72:
a6:02:7b:f5:f3:f5:cd:c7:8d:7c:1e:c2:c2:bd:04:07:2d:79:
32:67:43:ca:a1:c5:f9:17:ff:43:32:c9:ee:5b:2d:f6:46:40:
6b:f8:61:47:8e:79:ad:b7:4c:7d:05:a8:22:60:b9:b0:f7:29:
f1:50:0f:a9:fe:08:f5:dd:34:61:44:a9:3c:db:98:57:ff:4c:
fb:0c:ca:a6:de:96:2c:b4:fc:06:40:f7:49:35:c5:9e:07:11:
93:51:5e:ff:92:06:a3:41:ba:f2:e8:79:79:0b:6a:aa:dd:54:
08:a9:d0:ce:8c:35:af:c6:fc:85:13:57:7d:87:0d:32:58:a1:
03:6e:a2:df:6b:5a:62:b8:16:64:5f:56:fb:d1:45:ea:c8:3f:
6e:11:86:30:57:96:f5:f1:08:c8:98:cd:12:1b:34:45:20:36:
c3:8e:b5:f9:92:5f:ac:81:c8:90:fe:8a:7c:b9:33:07:3e:92:
18:01:2f:cd:5e:34:c7:da:fd:cb:d2:c7:ee:6e:50:66:6a:d7:
ce:32:da:0e:35:12:14:b9:74:0e:c0:a3:ed:d7:d2:8a:0c:8d:
52:36:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:48:34 2025 by rpki-client