Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/bEAAH5aATzK8eqhZ-B9SgShK9jE.roa
File: bEAAH5aATzK8eqhZ-B9SgShK9jE.roa (raw, json)
Hash identifier: TytTcgxV6k1C6oJeXYis5QY2UElY5/5TFAMkioSUlDo=
Subject key identifier: 6C:40:00:1F:96:80:4F:32:BC:7A:A8:59:F8:1F:52:81:28:4A:F6:31
Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Certificate serial: 11
Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/bEAAH5aATzK8eqhZ-B9SgShK9jE.roa
Signing time: Fri 22 Aug 2025 06:23:59 +0000
ROA not before: Fri 22 Aug 2025 06:23:59 +0000
ROA not after: Thu 20 Aug 2026 07:49:18 +0000
asID: 139137
IP address blocks: 103.61.62.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Validity
Not Before: Aug 22 06:23:59 2025 GMT
Not After : Aug 20 07:49:18 2026 GMT
Subject: CN=6C40001F96804F32BC7AA859F81F5281284AF631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:2d:49:ed:79:f0:8d:59:46:16:39:af:24:
ed:a9:3e:15:de:56:f3:b4:e2:53:da:19:7d:ef:6c:
93:e3:78:e4:56:9e:fa:d4:52:cb:e6:37:6b:3d:b5:
70:7a:eb:b5:7d:c7:c7:b6:d5:1d:c2:ca:db:b1:b8:
91:f0:37:21:a1:6f:bf:6e:31:13:eb:52:51:10:28:
6f:09:38:0d:35:18:8a:19:7c:d0:7d:50:e2:54:0b:
eb:34:52:88:03:f0:80:42:e7:f0:e9:3a:e1:6a:c8:
53:30:52:cf:5f:5b:a9:dd:bb:6b:68:8e:74:64:ae:
06:87:43:31:47:97:df:13:60:37:1f:0b:6f:a4:a7:
29:3d:fc:03:a8:19:ba:ea:cd:02:1d:fa:4a:b1:4e:
90:69:6c:ee:b4:3e:0f:5f:5b:f4:1c:7f:29:3f:37:
3e:83:0f:43:33:92:0b:fa:0c:3b:be:3a:21:1a:d6:
f9:ea:3c:82:62:d9:0e:ea:74:f8:16:b9:09:82:8f:
cf:5e:d7:aa:8a:ba:27:d1:dd:18:36:6e:b1:79:2f:
18:6f:ae:ff:24:79:9a:42:09:5f:eb:92:b5:e3:b1:
83:01:46:1e:90:dd:ca:81:14:e8:93:0c:5c:74:d1:
85:c6:7d:4a:f1:3c:b4:2b:4c:d1:77:7c:28:27:c2:
31:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:40:00:1F:96:80:4F:32:BC:7A:A8:59:F8:1F:52:81:28:4A:F6:31
X509v3 Authority Key Identifier:
keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/bEAAH5aATzK8eqhZ-B9SgShK9jE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.62.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:df:84:34:38:00:c9:83:68:ea:27:3c:62:58:17:95:c1:1b:
a7:a5:3d:e6:f3:a5:d5:22:08:45:1b:9e:57:ae:82:e9:3a:9a:
51:37:e8:7d:27:45:a8:22:07:7b:61:48:99:47:94:f3:46:fb:
88:56:1c:b8:4c:82:76:92:bc:31:ce:1a:b7:a0:cf:bd:ab:83:
b1:78:42:56:c6:7a:40:3c:cf:1f:eb:88:99:69:f0:1b:38:73:
43:dd:2f:82:21:a7:49:63:fd:9a:6a:6d:3f:2b:43:7e:2d:03:
65:31:6c:27:75:d6:cb:2e:7e:1c:1a:df:cb:ab:97:ea:86:66:
94:45:08:a6:8e:25:70:84:61:4b:e7:22:5b:09:fc:c4:21:a2:
74:c9:62:cd:b7:85:c4:a9:f8:06:f1:32:1a:55:b1:7e:45:9d:
87:1f:f6:ee:4f:bd:bc:03:c3:68:30:b8:fb:1d:b5:62:53:89:
c9:70:df:7b:13:f5:b8:83:2d:64:1d:92:76:4c:80:6f:c0:bd:
54:1f:63:e9:46:21:0c:6f:6d:dd:54:16:51:0a:5d:c7:f2:f1:
23:bb:70:09:85:98:72:4e:01:16:4c:bb:5b:38:b8:10:b9:7a:
c1:98:41:3e:f3:4e:48:72:22:98:d1:ed:b9:36:7e:27:e4:50:
94:d5:71:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:48:33 2025 by rpki-client