Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/QMCfLhYzOUYS1HQTXwl9Np_g1T8.roa
File: QMCfLhYzOUYS1HQTXwl9Np_g1T8.roa (raw, json)
Hash identifier: NhYojcApnv0WL6juLFawof9E8Xsyg4+DmgjPN1HgsK8=
Subject key identifier: 40:C0:9F:2E:16:33:39:46:12:D4:74:13:5F:09:7D:36:9F:E0:D5:3F
Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Certificate serial: 1E
Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/QMCfLhYzOUYS1HQTXwl9Np_g1T8.roa
Signing time: Fri 22 Aug 2025 06:24:02 +0000
ROA not before: Fri 22 Aug 2025 06:24:02 +0000
ROA not after: Thu 20 Aug 2026 07:49:18 +0000
asID: 12076
IP address blocks: 103.61.63.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Validity
Not Before: Aug 22 06:24:02 2025 GMT
Not After : Aug 20 07:49:18 2026 GMT
Subject: CN=40C09F2E1633394612D474135F097D369FE0D53F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:12:74:f4:54:1d:81:cd:f9:5f:c0:4e:95:
ce:c3:4c:86:20:ea:f9:d3:56:f4:8a:b7:7a:59:a4:
8a:6e:82:85:4a:42:ec:36:e3:40:80:15:e7:33:58:
84:e0:9b:40:f0:0d:6b:cc:c6:a6:f7:5e:77:9c:77:
7c:05:a9:c3:cc:94:16:47:c1:88:91:db:fa:4c:83:
bc:20:77:7c:6a:3d:20:d8:dc:37:16:0a:9b:70:15:
0a:be:24:0d:e8:4d:04:81:e1:f1:91:d6:76:81:16:
6b:80:b2:84:34:73:b3:b6:a3:de:93:79:86:7f:2a:
3a:2e:4f:05:50:68:fb:05:f0:82:90:4f:b1:c4:14:
71:01:54:ca:8f:16:56:de:18:58:69:ea:e4:10:69:
3c:6f:9a:f3:76:fe:7c:54:a4:c5:05:0f:31:10:fb:
75:51:27:ef:d4:4e:c7:c4:a1:e8:b7:b9:31:e7:dd:
dc:01:28:d4:e3:14:1d:6a:fb:9d:47:f2:64:b2:e5:
46:f5:1d:42:8b:d2:ca:25:1a:dd:78:7c:a4:03:e9:
68:95:87:17:75:ad:8c:08:66:e7:02:fc:d0:67:13:
74:96:31:3b:e2:ef:d2:ee:39:d4:ed:ab:d1:a9:2e:
01:f9:c6:0e:39:1b:45:eb:14:2d:a3:1a:89:09:93:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C0:9F:2E:16:33:39:46:12:D4:74:13:5F:09:7D:36:9F:E0:D5:3F
X509v3 Authority Key Identifier:
keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/QMCfLhYzOUYS1HQTXwl9Np_g1T8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.63.0/24
Signature Algorithm: sha256WithRSAEncryption
11:58:40:a1:00:f9:7b:3e:a2:9e:05:b6:1f:60:1b:12:42:1e:
6b:e3:cb:fb:a3:3c:7c:97:4d:2c:f0:dc:ac:90:54:35:c3:5b:
17:cf:44:ed:9b:d0:f9:37:be:87:ce:b9:c8:c5:29:a9:f6:fc:
ae:3d:8e:e6:49:36:9c:23:f3:34:6a:03:54:e7:01:96:96:e3:
91:11:2c:16:ff:d7:3c:75:22:08:f3:3d:19:92:cf:a1:06:ea:
25:05:12:be:d1:83:92:9a:4e:a1:70:f4:66:60:3f:42:1e:15:
4b:e8:76:b5:7a:af:b4:cb:02:c6:f4:2b:21:14:f3:7e:84:9d:
f2:59:c8:29:4e:e7:40:1c:c1:e2:f7:87:da:6f:3b:a1:12:b3:
5a:d4:78:31:ab:20:c7:ac:b4:ee:58:6d:5e:c7:c3:dd:3a:9d:
71:39:7f:83:92:ad:33:ee:85:e6:01:45:64:44:bc:e5:ae:97:
dd:3d:33:24:d7:6b:b0:c9:82:57:e7:f1:94:45:36:5e:40:52:
ab:b6:22:a4:3f:cc:37:79:f5:63:0a:89:08:c5:cd:21:81:72:
35:ca:36:db:fd:95:22:24:69:d4:d1:9b:d2:b0:82:8e:c2:d8:
b3:c4:eb:c4:e0:24:dc:b9:ef:ef:28:35:34:28:fe:54:4f:42:
ce:06:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:50:59 2025 by rpki-client