Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/EddpC0PX3ghbWmMIM3YunZBLCNQ.roa
File: EddpC0PX3ghbWmMIM3YunZBLCNQ.roa (raw, json)
Hash identifier: 1YQGOZR+yxIYCtoe7phxDtAfptqZ5BJZQiIprcx8QeI=
Subject key identifier: 11:D7:69:0B:43:D7:DE:08:5B:5A:63:08:33:76:2E:9D:90:4B:08:D4
Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Certificate serial: 1F
Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/EddpC0PX3ghbWmMIM3YunZBLCNQ.roa
Signing time: Fri 22 Aug 2025 06:24:02 +0000
ROA not before: Fri 22 Aug 2025 06:24:02 +0000
ROA not after: Thu 20 Aug 2026 07:49:18 +0000
asID: 63582
IP address blocks: 103.61.60.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Validity
Not Before: Aug 22 06:24:02 2025 GMT
Not After : Aug 20 07:49:18 2026 GMT
Subject: CN=11D7690B43D7DE085B5A630833762E9D904B08D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:ed:a2:f9:a7:f4:1f:d2:3f:4f:71:ea:5e:
97:7f:e8:0f:11:33:2e:9c:23:71:11:be:31:30:8d:
7d:6a:ec:05:3c:9d:15:29:2d:37:78:84:16:91:e8:
c1:ef:ac:9f:3b:6d:eb:37:2a:8d:f1:ed:75:8d:f2:
0a:94:87:a2:72:23:a3:6f:df:1c:f4:16:5e:12:8b:
2a:fb:12:6d:39:99:93:f7:16:31:96:e1:48:52:8c:
ef:51:dd:82:56:aa:15:eb:b8:69:96:a1:1d:9e:b1:
86:6e:16:9b:a3:80:7e:b1:f7:04:80:7d:ff:c1:ac:
ef:49:16:cf:b1:9d:1f:35:04:c3:6a:ad:fa:87:b1:
00:82:33:6c:9c:1c:68:16:dc:0c:74:bd:f4:56:86:
5a:82:d2:fd:3b:c6:68:08:d9:6c:9d:ca:0f:f6:e7:
41:a8:1e:6f:e4:8a:fb:38:85:20:96:e2:38:6b:74:
7f:1d:32:44:18:6c:28:ce:45:d1:af:18:8c:05:34:
f9:bf:6f:ea:c9:6a:fe:59:bd:cc:81:5c:c5:e4:f2:
de:71:29:70:07:97:cd:cc:ba:49:57:fd:f9:4a:55:
2d:30:a7:8a:78:8d:2b:f7:40:fd:e3:35:f4:fc:51:
38:6b:50:9e:af:34:be:13:e9:d2:3c:ff:30:9d:58:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D7:69:0B:43:D7:DE:08:5B:5A:63:08:33:76:2E:9D:90:4B:08:D4
X509v3 Authority Key Identifier:
keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/EddpC0PX3ghbWmMIM3YunZBLCNQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.60.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:40:8b:d7:24:8d:a7:b0:a4:4a:2a:7f:70:ac:f3:4b:7b:78:
57:a8:d3:ed:05:68:92:7d:3d:63:93:33:38:7d:1f:8c:5e:af:
8d:04:7b:0b:08:cb:f3:0f:ca:85:75:24:a7:91:46:99:6f:f8:
d6:be:0d:d0:54:40:37:49:0c:4d:34:d8:43:f2:70:f7:94:5e:
55:d3:cb:28:d5:3d:b9:07:06:df:0a:e7:f7:ce:c6:de:d4:16:
c6:8b:aa:35:4a:72:dd:cd:6b:39:01:38:72:a7:4b:12:83:26:
84:85:48:37:49:ee:87:4b:5d:86:a8:6b:bb:67:03:a1:0b:a4:
59:c9:a4:a7:d2:17:a2:5f:96:41:54:c3:cd:5c:7c:7a:37:ee:
b6:59:58:02:34:4b:4e:64:1d:03:f9:e2:04:19:ff:1e:50:c9:
5e:d4:c7:aa:23:be:d9:b4:92:3a:fc:c3:50:de:12:bc:8f:2a:
27:1f:dc:74:a7:db:ed:ab:9b:6f:fd:ec:99:84:78:80:57:41:
a8:5e:8c:d2:a8:0a:ea:ce:5f:73:5b:15:39:9d:11:92:0c:d5:
2f:a4:5f:c8:0e:32:ef:03:e6:d5:c4:83:de:7b:09:5a:3e:a8:
00:3b:e4:ca:b8:e5:3c:63:45:6e:9a:f4:9a:34:15:1d:ab:ab:
3a:fb:d9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:44:08 2025 by rpki-client