Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/FFkYLY3JOcASV08PQtRXXZcIyJM.roa
File: FFkYLY3JOcASV08PQtRXXZcIyJM.roa (raw, json)
Hash identifier: Fr4Vrm5uWBGNm7ezsDK2vpLy0C/0X0glvP2xuPXtxD8=
Subject key identifier: 14:59:18:2D:8D:C9:39:C0:12:57:4F:0F:42:D4:57:5D:97:08:C8:93
Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Certificate serial: 0E
Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/FFkYLY3JOcASV08PQtRXXZcIyJM.roa
Signing time: Fri 22 Aug 2025 06:23:58 +0000
ROA not before: Fri 22 Aug 2025 06:23:58 +0000
ROA not after: Thu 20 Aug 2026 07:49:18 +0000
asID: 12076
IP address blocks: 103.61.60.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Validity
Not Before: Aug 22 06:23:58 2025 GMT
Not After : Aug 20 07:49:18 2026 GMT
Subject: CN=1459182D8DC939C012574F0F42D4575D9708C893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:43:4e:6e:df:64:10:00:68:f0:51:8c:27:d4:
7a:27:d0:76:23:a0:2d:ec:d1:1e:b0:b6:b2:9d:ab:
c6:b5:21:20:0b:e8:49:59:78:99:90:5f:09:57:58:
e0:e6:b9:35:4e:4c:2b:fb:29:de:0c:35:ca:cc:0a:
c1:73:c7:20:79:93:31:70:e6:e6:e7:e9:3d:17:28:
96:8d:6a:40:22:64:b8:5a:44:9b:93:3f:a8:ef:90:
a3:c4:54:68:59:f8:d1:91:fc:bd:08:69:06:35:09:
8d:d8:9a:cb:41:a4:db:89:6b:cd:e5:3f:c7:6c:95:
34:03:9f:51:91:7d:83:1e:73:a4:81:81:e4:3e:95:
2c:3e:ec:95:41:1b:ef:1e:20:59:fd:c9:3c:4c:65:
45:7d:1d:0d:43:92:34:e9:a5:3a:d7:41:52:3d:6b:
03:97:89:05:ac:4c:5c:74:02:ed:fd:cd:3a:82:76:
8f:8a:d1:fc:e1:0c:69:a9:b9:3b:96:2b:64:2b:8a:
6c:46:24:80:c8:91:c8:f3:4c:4d:72:60:ed:98:51:
d7:c9:b5:16:57:9a:9b:56:e6:e5:ab:ed:88:31:da:
45:ba:1d:f4:f2:86:d3:ef:e5:dc:81:ac:b9:62:33:
ae:84:87:5e:aa:62:72:86:2e:a6:f0:48:c5:fb:64:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:59:18:2D:8D:C9:39:C0:12:57:4F:0F:42:D4:57:5D:97:08:C8:93
X509v3 Authority Key Identifier:
keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/FFkYLY3JOcASV08PQtRXXZcIyJM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.60.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:bd:eb:55:28:be:35:36:40:32:e6:36:aa:85:d5:b9:2a:8c:
66:55:33:78:61:be:55:13:78:fd:de:df:b5:34:3a:3e:99:6f:
10:c2:e8:6f:c5:7d:a5:27:6d:f0:82:ad:01:b5:69:b3:d8:95:
4f:c7:7e:f3:b4:78:1f:60:e7:e3:d9:3e:f4:26:10:5f:4e:5d:
29:57:13:92:46:94:7e:63:21:5e:4d:09:22:56:3f:45:0a:05:
4b:ca:f5:f7:45:5b:5c:84:2d:6e:aa:a8:e4:4c:92:04:f4:02:
04:58:e6:2c:19:d7:5a:40:5e:7d:a5:1a:b6:10:56:a9:5a:df:
a0:60:8f:50:e7:a8:b5:c7:42:0e:86:2d:1d:33:41:a1:2a:9c:
64:8e:76:70:7d:70:c3:db:f0:1b:24:16:a1:de:91:f1:fc:cd:
ac:d0:07:8d:b5:b5:7a:c4:2c:95:45:17:56:dd:ce:db:99:82:
92:89:16:2f:e6:e3:19:54:a1:1e:bd:6f:37:39:d4:12:b1:46:
0f:fe:7f:fc:40:39:24:a2:fd:35:85:83:86:4c:02:7d:f9:0c:
d0:00:b1:3d:5c:36:0a:a3:dc:03:1b:d0:97:d8:66:5d:66:6b:
32:ab:1d:d1:39:7f:97:9c:01:73:77:1d:3b:10:6b:a0:53:9a:
36:03:04:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:49:00 2025 by rpki-client