Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/W7FNGZeU9H4i4T2BLs8CXODHjJQ.roa
File: W7FNGZeU9H4i4T2BLs8CXODHjJQ.roa (raw, json)
Hash identifier: 86UbbjFeTxp7AuSsBiVXg0jfjPHyGV/DSlvQ1avjwxo=
Subject key identifier: 5B:B1:4D:19:97:94:F4:7E:22:E1:3D:81:2E:CF:02:5C:E0:C7:8C:94
Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Certificate serial: 26
Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/W7FNGZeU9H4i4T2BLs8CXODHjJQ.roa
Signing time: Fri 22 Aug 2025 06:27:16 +0000
ROA not before: Fri 22 Aug 2025 06:27:16 +0000
ROA not after: Thu 20 Aug 2026 07:49:18 +0000
asID: 139140
IP address blocks: 103.61.60.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Validity
Not Before: Aug 22 06:27:16 2025 GMT
Not After : Aug 20 07:49:18 2026 GMT
Subject: CN=5BB14D199794F47E22E13D812ECF025CE0C78C94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:00:f0:f1:44:b3:83:8b:d5:05:67:d7:eb:3d:
c9:cb:0f:7b:73:aa:17:6d:88:1e:9a:a8:6a:f8:1d:
2d:96:25:5d:16:ca:c9:00:cf:55:74:58:8b:88:ba:
a1:2d:b0:5b:34:6b:db:5e:c5:0b:8e:c8:51:98:c3:
5b:9c:53:c9:23:a2:c5:cb:db:41:e6:c8:d4:0b:1f:
7b:fb:89:24:ff:61:b9:24:1b:3d:43:ca:13:62:35:
b5:0c:73:27:5a:20:ca:fc:96:16:57:fb:46:2b:c8:
5d:7e:1b:86:79:f1:99:f3:a8:f3:0d:c3:00:56:0e:
d7:79:3f:32:9a:78:27:e0:79:f2:ed:8d:8f:e3:3a:
07:a9:91:06:02:26:92:f0:00:08:3f:be:6d:9d:bf:
21:df:2a:98:3e:0b:aa:98:d2:af:89:df:17:f7:f2:
b1:b1:b1:ad:bf:4e:e1:d7:e7:61:42:4a:b7:12:47:
35:c5:c7:10:fd:16:fe:66:df:10:bb:cd:4e:67:41:
c1:03:a9:94:0a:cd:b4:c8:29:65:d5:ce:35:70:a8:
15:f7:e4:f8:c0:23:fe:47:f0:0b:6c:46:ca:ac:98:
09:89:d3:ad:f1:9e:6d:de:b4:3d:fa:b6:99:51:ad:
0f:f0:c0:76:9d:2f:b5:53:ff:8e:c6:25:89:cb:c3:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B1:4D:19:97:94:F4:7E:22:E1:3D:81:2E:CF:02:5C:E0:C7:8C:94
X509v3 Authority Key Identifier:
keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/W7FNGZeU9H4i4T2BLs8CXODHjJQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.60.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a4:a3:2a:40:05:70:7d:79:47:e3:a4:b0:91:9d:f6:f1:b2:
3a:18:e9:c6:b5:95:5a:c6:92:54:fb:e2:24:aa:21:7d:a0:03:
dc:ff:8d:4e:2e:59:59:3b:88:0a:31:c6:12:b0:b6:88:5b:74:
15:0b:a5:63:20:2f:c4:64:04:18:b2:78:d3:3f:40:18:cd:0e:
8b:2d:99:3e:63:20:a3:d6:e6:5a:98:5f:4a:cb:49:8f:09:ae:
cb:ea:18:24:ee:4e:24:a1:31:1d:51:34:49:29:c8:fb:45:bf:
92:e2:3c:51:d4:ef:81:01:9c:da:6c:ff:8f:10:1d:01:4a:c0:
d8:ee:58:9c:64:90:03:0f:1b:9c:26:33:7f:23:e1:5f:0f:63:
78:f4:20:6c:e3:88:bb:de:1f:c3:39:26:f7:6e:fc:a0:d4:15:
38:21:3a:a8:cb:47:60:11:d4:78:f4:1f:1e:8c:4d:6f:5a:fc:
9f:b4:42:49:b4:4e:28:bf:2c:b9:93:cb:d0:f7:eb:32:9f:05:
fb:77:13:70:02:1b:13:4b:3f:17:30:30:1a:cd:0a:7d:4e:83:
21:91:95:5c:44:a8:6b:01:d3:d1:5c:67:e4:a7:51:e9:15:4b:
69:15:23:01:64:ca:2b:a2:b9:e5:60:9a:7b:c3:52:d6:39:df:
40:3d:f8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:48:53 2025 by rpki-client