Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6SxtQP3DrofnLHda_35CH9nSdtE.roa
File: 6SxtQP3DrofnLHda_35CH9nSdtE.roa (raw, json)
Hash identifier: EltO10fLVmTZNw1eX5XH7pnxpe70KdZMzCibcxk66xc=
Subject key identifier: E9:2C:6D:40:FD:C3:AE:87:E7:2C:77:5A:FF:7E:42:1F:D9:D2:76:D1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7F90
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6SxtQP3DrofnLHda_35CH9nSdtE.roa
Signing time: Wed 06 Aug 2025 07:33:15 +0000
ROA not before: Wed 06 Aug 2025 07:33:15 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.246.24.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32656 (0x7f90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Aug 6 07:33:15 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E92C6D40FDC3AE87E72C775AFF7E421FD9D276D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:17:16:9e:62:4d:c7:20:f9:0d:31:c5:0a:4e:
45:27:5a:24:00:1e:1a:ae:5a:9b:f5:d7:88:f4:72:
2e:41:26:21:b5:12:6f:31:fa:c8:55:4a:00:3d:b0:
2d:c0:1d:2f:92:78:bf:38:6d:b7:15:d3:07:76:12:
c5:f7:51:1a:3e:84:48:8e:e3:de:a6:4a:ac:3e:42:
08:dd:de:2c:48:ac:9f:fd:5f:51:96:31:6c:28:84:
25:b0:b8:a9:1f:23:27:20:74:56:00:6c:aa:50:0e:
d4:56:5f:32:5a:c3:4f:d9:b2:7b:a4:ff:cf:78:14:
cb:db:70:77:91:b9:fc:b5:28:82:0e:32:ec:be:74:
bb:09:e0:f3:b2:c5:08:43:e9:de:a5:1f:4b:02:56:
4e:f7:10:a5:26:27:d7:47:21:86:1f:ec:c0:f9:bb:
df:bd:6b:8c:25:51:37:0d:0e:2d:7d:74:73:36:6a:
b4:d3:63:23:55:46:0c:74:4e:c4:af:ab:26:82:d8:
68:17:e3:5b:34:a8:e1:c5:83:ad:5f:3f:8b:e4:71:
63:45:aa:54:b0:e2:23:ca:3b:c8:b2:d8:d2:a3:a5:
7b:7a:6a:73:ea:1c:25:b4:51:4a:c0:b3:9f:76:37:
2e:c1:6a:95:1d:ab:90:33:f6:c1:ff:cc:d3:88:c9:
aa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2C:6D:40:FD:C3:AE:87:E7:2C:77:5A:FF:7E:42:1F:D9:D2:76:D1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6SxtQP3DrofnLHda_35CH9nSdtE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.246.24.0/22
Signature Algorithm: sha256WithRSAEncryption
95:5e:2a:8e:66:05:9f:ac:b1:31:49:dd:90:0d:b1:f1:6e:59:
66:75:f4:1f:e5:1d:c7:ba:24:2c:d7:b9:0e:9b:59:31:43:8e:
89:26:4b:ff:d1:20:23:3a:56:dc:a3:d1:1a:a9:45:0a:d9:0f:
4f:82:5b:0b:03:91:64:e0:50:98:2f:21:92:0d:79:b8:cc:5f:
c1:74:18:b1:b4:0b:7a:d4:de:4f:f4:c1:44:75:ab:6c:fe:91:
17:48:f4:2d:05:6a:dd:af:12:e6:f8:93:c0:cc:1e:9c:30:ca:
e3:4c:7d:96:ac:e4:75:3b:c6:1f:5b:38:3e:da:08:74:87:59:
93:fe:19:7b:16:7c:bf:7f:e0:d9:ba:ff:fe:6c:7d:8b:57:e2:
ba:88:e8:1a:ca:06:aa:ab:26:e5:b8:60:a2:9d:86:21:c6:6d:
82:92:c3:46:11:97:e8:3e:89:04:9f:a4:a4:b5:ec:37:1e:a2:
38:e4:2b:97:97:be:9b:12:05:a6:34:7e:a6:68:9c:9e:f9:46:
ca:c6:80:4f:0b:b2:94:44:da:55:1f:17:12:3a:0e:33:bb:17:
17:20:22:56:a6:77:c7:0b:c0:5c:68:88:8d:b2:b3:08:c7:fb:
59:f0:b3:d6:1e:fb:b7:9e:e0:35:d7:39:cc:a1:21:22:f0:bf:
bd:fe:1b:ee
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICf5AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA4MDYw
NzMzMTVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU5MkM2RDQwRkRDM0FF
ODdFNzJDNzc1QUZGN0U0MjFGRDlEMjc2RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDuFxaeYk3HIPkNMcUKTkUnWiQAHhquWpv114j0ci5BJiG1Em8x
+shVSgA9sC3AHS+SeL84bbcV0wd2EsX3URo+hEiO496mSqw+Qgjd3ixIrJ/9X1GW
MWwohCWwuKkfIycgdFYAbKpQDtRWXzJaw0/Zsnuk/894FMvbcHeRufy1KIIOMuy+
dLsJ4POyxQhD6d6lH0sCVk73EKUmJ9dHIYYf7MD5u9+9a4wlUTcNDi19dHM2arTT
YyNVRgx0TsSvqyaC2GgX41s0qOHFg61fP4vkcWNFqlSw4iPKO8iy2NKjpXt6anPq
HCW0UUrAs592Ny7BapUdq5Az9sH/zNOIyaq3AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU6SxtQP3DrofnLHda/35CH9nSdtEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzZTeHRRUDNEcm9mbkxI
ZGFfMzVDSDluU2R0RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAIr9hgwDQYJKoZIhvcNAQELBQADggEBAJVeKo5mBZ+ssTFJ3ZANsfFuWWZ19B/l
Hce6JCzXuQ6bWTFDjokmS//RICM6Vtyj0RqpRQrZD0+CWwsDkWTgUJgvIZINebjM
X8F0GLG0C3rU3k/0wUR1q2z+kRdI9C0Fat2vEub4k8DMHpwwyuNMfZas5HU7xh9b
OD7aCHSHWZP+GXsWfL9/4Nm6//5sfYtX4rqI6BrKBqqrJuW4YKKdhiHGbYKSw0YR
l+g+iQSfpKS17DceojjkK5eXvpsSBaY0fqZonJ75RsrGgE8LspRE2lUfFxI6DjO7
FxcgIlamd8cLwFxoiI2yswjH+1nws9Ye+7ee4DXXOcyhISLwv73+G+4=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:39:24 2025 by rpki-client