Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/HxMZLtqaa40_-D3AlM2bEsyeA-s.roa
File: HxMZLtqaa40_-D3AlM2bEsyeA-s.roa (raw, json)
Hash identifier: uWZazcNrfKEifOCxlQsAhWAMFnu1iK2gEPxndGegHQo=
Subject key identifier: 1F:13:19:2E:DA:9A:6B:8D:3F:F8:3D:C0:94:CD:9B:12:CC:9E:03:EB
Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Certificate serial: 24
Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/HxMZLtqaa40_-D3AlM2bEsyeA-s.roa
Signing time: Fri 22 Aug 2025 06:27:16 +0000
ROA not before: Fri 22 Aug 2025 06:27:16 +0000
ROA not after: Thu 20 Aug 2026 07:49:18 +0000
asID: 139140
IP address blocks: 45.120.241.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Validity
Not Before: Aug 22 06:27:16 2025 GMT
Not After : Aug 20 07:49:18 2026 GMT
Subject: CN=1F13192EDA9A6B8D3FF83DC094CD9B12CC9E03EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bc:6e:cd:d9:e0:5b:1e:e3:16:2d:c9:39:b0:
1c:f4:20:98:ec:00:c5:70:31:a4:76:a5:b2:01:0f:
d9:16:f8:bc:4f:72:98:34:66:e6:4f:7a:15:79:4f:
68:09:83:be:e1:71:1f:33:48:82:af:26:67:67:c6:
1e:74:18:a4:c5:47:66:86:33:ab:21:76:ac:f0:35:
c3:a4:05:83:87:c4:cc:0f:cc:f6:9c:ec:77:d6:37:
d5:e8:d0:db:b4:29:3f:e9:de:4f:a2:57:0f:9a:32:
b4:da:7f:9b:93:85:5e:8d:4a:2a:f7:42:97:70:8e:
db:48:85:50:97:8d:cf:b1:b1:4a:db:ca:7e:1c:78:
3a:84:eb:7b:eb:b2:80:f9:7b:04:04:d7:89:07:af:
8d:a3:59:3c:08:78:93:7b:56:84:e6:a9:d8:55:c9:
72:90:ca:00:61:b3:4b:bd:c2:19:72:95:94:b5:74:
47:7d:e2:c9:59:f9:25:35:be:da:68:3f:1d:2a:4f:
25:94:ca:36:1e:a4:6f:f5:9d:ec:3d:e0:73:99:46:
2e:29:cc:72:10:62:fb:c7:96:8c:7c:24:1b:67:10:
df:57:1e:d6:39:2e:64:96:7d:5c:b7:1f:31:19:6f:
1b:17:df:0f:d9:dc:fc:c9:4e:9b:9b:46:7b:f2:3b:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:13:19:2E:DA:9A:6B:8D:3F:F8:3D:C0:94:CD:9B:12:CC:9E:03:EB
X509v3 Authority Key Identifier:
keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/HxMZLtqaa40_-D3AlM2bEsyeA-s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.120.241.0/24
Signature Algorithm: sha256WithRSAEncryption
94:b6:c6:95:88:73:d6:3f:7a:5d:a9:55:72:a3:50:27:c7:b7:
73:7a:de:d0:93:4c:c5:b7:af:af:04:fd:0f:fd:e2:e9:9e:66:
5e:34:e8:b9:b6:9a:db:60:93:80:38:14:21:45:ba:dd:c7:3b:
ea:67:7d:75:c3:a1:12:dc:fc:3d:31:f1:41:66:13:4d:aa:1c:
eb:2f:a4:e2:0e:2d:55:46:b8:13:8e:c8:e5:6c:06:91:79:1d:
22:61:dd:4b:19:98:2b:3b:5c:3d:68:e6:8d:85:76:f5:e4:7c:
1c:97:1e:6f:a5:ee:54:b6:1f:cf:99:3b:4f:5e:42:da:61:70:
06:e9:94:99:e0:25:15:a9:a3:80:b9:97:7e:bf:0f:ed:60:09:
20:98:53:c4:cd:a5:5a:0c:b2:7f:2d:e2:05:ff:5e:ba:e3:25:
79:ec:2d:53:f4:9f:93:f5:57:4f:a5:50:d5:16:ef:ce:ca:f1:
4d:40:81:f9:2e:e2:88:0b:ea:04:8f:4f:27:cf:c6:89:75:15:
26:c1:de:33:79:05:13:a1:fd:a9:88:02:25:39:c1:04:45:da:
c4:03:2e:7d:71:ec:4f:db:66:35:04:01:84:4f:4c:80:f3:84:
7b:a8:b8:35:ae:5d:e3:cd:2e:0d:c5:6a:05:23:bf:eb:27:db:
c8:0b:54:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:45:47 2025 by rpki-client