Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/hd4p8bRkbnzPLiIvE4WzEc4L6v4.roa
File: hd4p8bRkbnzPLiIvE4WzEc4L6v4.roa (raw, json)
Hash identifier: NXyCQvHS203M2U7q90eaDOnQ2hj2vQiZl4tKD3oJpKU=
Subject key identifier: 85:DE:29:F1:B4:64:6E:7C:CF:2E:22:2F:13:85:B3:11:CE:0B:EA:FE
Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Certificate serial: 2D
Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/hd4p8bRkbnzPLiIvE4WzEc4L6v4.roa
Signing time: Fri 22 Aug 2025 06:27:17 +0000
ROA not before: Fri 22 Aug 2025 06:27:17 +0000
ROA not after: Thu 20 Aug 2026 07:49:18 +0000
asID: 139140
IP address blocks: 103.61.62.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Validity
Not Before: Aug 22 06:27:17 2025 GMT
Not After : Aug 20 07:49:18 2026 GMT
Subject: CN=85DE29F1B4646E7CCF2E222F1385B311CE0BEAFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:ef:5a:b5:c0:6c:f6:f3:be:b0:56:fb:63:
22:50:5b:8b:74:06:ea:61:f0:d3:5d:69:34:1c:fd:
3e:37:65:5f:e6:d7:df:d8:df:5a:f9:eb:5c:24:2e:
5d:8a:63:8d:61:66:db:e9:2c:30:25:db:90:8c:a8:
8b:05:b4:90:76:c9:7e:eb:75:c7:5c:3e:2c:d6:58:
22:1c:f1:cc:13:80:e1:e2:49:39:8d:f0:5f:d1:fb:
a2:af:d5:a8:e5:88:f9:00:d9:d1:d4:62:b5:9c:03:
f8:b6:dc:d7:cd:f8:03:77:ce:34:ed:ab:ea:7e:69:
b6:57:65:c3:6b:48:e5:e2:3e:0b:16:38:fc:e3:3b:
e1:20:f2:bc:df:94:f6:02:ef:2d:9a:90:39:e3:1c:
02:51:5a:d8:ca:fd:77:7a:b3:46:ec:71:af:f4:be:
9e:2b:df:4f:9e:ee:31:8a:63:89:e8:6e:57:31:46:
5a:0a:af:62:f8:37:e0:8b:42:bf:24:cc:4f:7c:00:
1b:93:92:44:6a:28:ca:c3:8f:96:74:94:ef:ec:61:
81:33:0a:91:27:aa:25:d6:51:ce:18:77:7e:35:dd:
87:b3:73:06:07:9a:58:36:df:73:12:c2:e1:d5:c8:
e0:76:9f:2a:3a:07:e1:a1:e3:9b:57:da:ec:18:1d:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DE:29:F1:B4:64:6E:7C:CF:2E:22:2F:13:85:B3:11:CE:0B:EA:FE
X509v3 Authority Key Identifier:
keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/hd4p8bRkbnzPLiIvE4WzEc4L6v4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.62.0/24
Signature Algorithm: sha256WithRSAEncryption
58:75:2c:60:b7:a2:b0:a6:09:0b:cb:a9:c8:f2:62:19:fb:9f:
dd:96:60:d6:cb:94:0b:ac:21:ac:31:da:b3:4d:b6:95:a4:e3:
0a:e5:81:13:d8:06:75:9a:1c:37:cf:7c:34:2e:fc:1a:19:98:
62:23:f8:40:71:1f:b8:56:8b:fc:0c:cd:51:f4:e8:94:6f:ed:
88:d1:d4:0e:b5:34:65:63:47:ef:36:95:b5:20:c9:72:51:a9:
ef:a6:6e:62:db:4d:fb:f0:4e:17:b5:27:a8:e1:ef:fd:45:b1:
a8:5a:ad:ab:e0:44:31:8e:15:d3:1b:1a:7e:e4:2c:6c:22:ea:
33:db:73:32:de:0b:2e:10:ba:e0:c4:1b:72:04:ad:5d:69:15:
c8:49:44:4a:16:c2:84:ba:8c:3c:dd:35:f8:99:72:28:37:e0:
89:c5:83:6c:fe:5f:bf:ad:44:20:ee:1a:24:56:95:ed:72:46:
cf:5a:5e:55:5f:30:df:f8:d5:50:9f:22:c3:df:ec:48:68:8f:
0e:85:38:50:06:69:a4:76:7a:67:ff:b2:25:a9:3c:75:6c:36:
58:4b:56:79:3b:be:a9:d6:cc:1a:03:f3:f8:89:84:ad:32:36:
7d:1c:91:82:c3:42:89:e2:d8:b6:9d:bc:79:c6:7c:6a:2d:ce:
9a:e3:ce:ef
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4
OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2
MjcxN1oXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoODVERTI5RjFCNDY0NkU3
Q0NGMkUyMjJGMTM4NUIzMTFDRTBCRUFGRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALog71q1wGz2876wVvtjIlBbi3QG6mHw011pNBz9PjdlX+bX39jf
WvnrXCQuXYpjjWFm2+ksMCXbkIyoiwW0kHbJfut1x1w+LNZYIhzxzBOA4eJJOY3w
X9H7oq/VqOWI+QDZ0dRitZwD+Lbc1834A3fONO2r6n5ptldlw2tI5eI+CxY4/OM7
4SDyvN+U9gLvLZqQOeMcAlFa2Mr9d3qzRuxxr/S+nivfT57uMYpjiehuVzFGWgqv
Yvg34ItCvyTMT3wAG5OSRGooysOPlnSU7+xhgTMKkSeqJdZRzhh3fjXdh7NzBgea
WDbfcxLC4dXI4HafKjoH4aHjm1fa7BgdWhMCAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBSF3inxtGRufM8uIi8ThbMRzgvq/jAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E
4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy
LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9oZDRwOGJSa2JuelBM
aUl2RTRXekVjNEw2djQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZz0+MA0GCSqGSIb3DQEBCwUAA4IBAQBYdSxgt6KwpgkLy6nI8mIZ+5/dlmDW
y5QLrCGsMdqzTbaVpOMK5YET2AZ1mhw3z3w0LvwaGZhiI/hAcR+4Vov8DM1R9OiU
b+2I0dQOtTRlY0fvNpW1IMlyUanvpm5i20378E4XtSeo4e/9RbGoWq2r4EQxjhXT
Gxp+5CxsIuoz23My3gsuELrgxBtyBK1daRXISURKFsKEuow83TX4mXIoN+CJxYNs
/l+/rUQg7hokVpXtckbPWl5VXzDf+NVQnyLD3+xIaI8OhThQBmmkdnpn/7IlqTx1
bDZYS1Z5O76p1swaA/P4iYStMjZ9HJGCw0KJ4ti2nbx5xnxqLc6a487v
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:49:00 2025 by rpki-client