Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/fOJpl53zG3Pjs97UUlI6499ky1Q.roa
File: fOJpl53zG3Pjs97UUlI6499ky1Q.roa (raw, json)
Hash identifier: T7VmGNRiQn2WgQuhGgQEx84p4+3yegJ/VgoOo17g2mg=
Subject key identifier: 7C:E2:69:97:9D:F3:1B:73:E3:B3:DE:D4:52:52:3A:E3:DF:64:CB:54
Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Certificate serial: 3C
Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/fOJpl53zG3Pjs97UUlI6499ky1Q.roa
Signing time: Fri 22 Aug 2025 06:30:21 +0000
ROA not before: Fri 22 Aug 2025 06:30:21 +0000
ROA not after: Thu 20 Aug 2026 07:49:18 +0000
asID: 138457
IP address blocks: 2402:7d80::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Validity
Not Before: Aug 22 06:30:21 2025 GMT
Not After : Aug 20 07:49:18 2026 GMT
Subject: CN=7CE269979DF31B73E3B3DED452523AE3DF64CB54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:dc:e0:fc:b5:53:f9:34:aa:eb:7e:73:5d:
8a:1e:3d:4a:bf:47:ec:ec:16:d3:51:9b:98:54:a5:
9c:54:31:eb:20:0e:29:67:f6:5c:84:4e:52:64:d7:
05:08:a2:cf:02:91:da:f7:c3:19:7e:bb:6d:bc:5c:
0e:01:5e:6b:d4:cd:17:e2:da:e8:9a:08:18:eb:7d:
d7:44:30:82:e8:c8:16:89:2d:45:94:40:5c:9f:3f:
18:b2:5e:bb:ab:ba:ed:57:7d:c5:cb:8a:99:a5:11:
b7:b8:99:13:79:df:c6:d1:4b:be:d6:20:f7:30:06:
58:3d:da:92:45:b5:c9:c9:4e:bb:60:69:c5:77:8b:
bc:50:dd:62:20:00:38:67:eb:ea:e5:d9:28:aa:ff:
e6:f4:a4:eb:93:c8:38:95:28:13:e6:76:9c:ea:37:
c6:ab:c9:f4:40:0f:61:68:96:d2:d9:fd:02:db:47:
77:58:2e:95:cf:f9:ea:9e:bf:2c:a3:ef:39:ff:00:
d9:a1:73:12:3b:ef:5f:44:0b:92:7e:8c:b1:e1:c1:
23:c4:03:bd:0b:01:00:2e:67:ed:51:63:48:98:36:
95:11:54:5a:42:08:b8:24:6f:02:81:1c:07:f6:76:
a8:bf:d4:46:16:50:7c:66:5b:44:10:55:51:5f:ff:
94:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E2:69:97:9D:F3:1B:73:E3:B3:DE:D4:52:52:3A:E3:DF:64:CB:54
X509v3 Authority Key Identifier:
keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/fOJpl53zG3Pjs97UUlI6499ky1Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:7d80::/48
Signature Algorithm: sha256WithRSAEncryption
5b:11:15:d4:6e:2a:a5:96:aa:27:ea:80:8a:63:4d:72:52:75:
6f:31:f6:2a:cd:28:83:75:a4:b7:9b:61:ae:97:cb:46:bd:6e:
a8:14:bf:c6:cd:5a:d1:41:e1:9a:64:88:4c:36:f6:93:a6:ef:
97:42:99:04:6e:eb:34:68:24:3f:42:cf:fb:13:cf:a1:4a:90:
e9:cb:43:34:4b:db:66:c2:e6:20:2c:ee:eb:c8:b3:4a:8b:cd:
f1:19:58:08:e6:86:28:a9:0a:ce:38:ef:e7:20:5b:80:eb:10:
c0:d5:f0:ff:b1:10:b3:5e:13:d5:e8:b1:17:73:49:a0:46:bf:
71:cb:f1:49:02:a0:93:93:2b:ac:c1:2e:70:fc:bb:57:32:81:
91:9f:d9:4c:fd:98:e0:00:e0:d0:3f:63:42:07:41:bb:50:b1:
ca:b3:ac:d9:d6:ad:d6:7b:4b:41:9d:21:19:f0:7a:ba:26:2b:
4c:e2:30:a9:ea:f5:da:f8:b4:a3:73:7a:1e:88:13:b3:ac:9e:
c6:c9:24:56:fa:20:b9:32:34:02:8f:cc:82:e7:15:40:94:4c:
55:78:fc:c9:ac:35:4d:e0:0e:3b:93:c9:c5:15:99:cf:8f:df:
2b:67:a5:82:7a:7c:6a:7d:4b:a4:57:24:18:4b:ba:94:df:8a:
67:cf:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:48:13 2025 by rpki-client