Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6qdARHxgqLb_sc1enXb0ZCiDZZ0.roa
File: 6qdARHxgqLb_sc1enXb0ZCiDZZ0.roa (raw, json)
Hash identifier: 6bueCw5EAsSKsvnDFv0t/AIuvd95Q3wQuAvbWELMnQ4=
Subject key identifier: EA:A7:40:44:7C:60:A8:B6:FF:B1:CD:5E:9D:76:F4:64:28:83:65:9D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7F84
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6qdARHxgqLb_sc1enXb0ZCiDZZ0.roa
Signing time: Wed 06 Aug 2025 07:33:11 +0000
ROA not before: Wed 06 Aug 2025 07:33:11 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 103.236.44.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32644 (0x7f84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Aug 6 07:33:11 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EAA740447C60A8B6FFB1CD5E9D76F4642883659D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:20:df:27:65:09:f3:6f:35:42:2e:0a:22:
75:cc:fc:bc:20:5d:62:87:86:b9:90:3b:c2:30:54:
e8:58:4d:4a:b4:e5:bc:ca:55:df:07:0f:79:9f:63:
0c:6e:54:74:d4:45:d0:05:42:23:67:e7:35:23:e6:
b0:5d:98:d6:4d:d8:b9:9a:42:3d:83:34:fd:8a:9b:
cb:1e:64:55:d0:0d:9f:f5:77:80:ea:2a:42:bf:1c:
f4:fe:01:8c:11:d5:89:d6:3d:45:9e:e1:a3:ab:64:
28:af:06:3e:0c:07:3f:b0:42:e1:ec:d7:7f:38:fc:
4a:df:1d:8d:47:77:f5:c0:09:d3:3c:3b:4c:28:4d:
62:a4:3a:1e:37:07:5d:97:3f:ae:8d:e2:74:c8:24:
17:16:9c:33:23:10:fa:26:4f:ab:ea:6b:e1:20:e1:
37:fa:3c:29:25:03:21:f1:dc:ee:56:b5:20:61:7a:
e8:b6:0e:c0:12:f4:59:2a:eb:bf:b5:95:a5:56:ca:
01:4f:a8:82:12:54:dc:28:69:e5:80:3e:96:af:b1:
18:61:78:09:e2:ce:65:81:aa:9f:70:64:df:a7:fa:
53:a6:8b:b5:f6:0e:a7:7f:3c:2c:c1:e8:f4:72:fb:
38:6b:9d:a8:c2:b3:61:e9:18:4e:22:85:a6:d4:76:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A7:40:44:7C:60:A8:B6:FF:B1:CD:5E:9D:76:F4:64:28:83:65:9D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6qdARHxgqLb_sc1enXb0ZCiDZZ0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.236.44.0/22
Signature Algorithm: sha256WithRSAEncryption
80:9d:2c:cb:1f:80:44:7d:67:f9:fd:69:93:7d:7b:39:6e:dd:
c6:c5:ad:45:c3:95:6f:00:01:13:b3:92:18:d9:50:29:a3:36:
ca:92:00:c7:ef:3e:4a:73:f9:cb:b4:a2:82:aa:e9:31:66:ba:
1e:cb:19:c9:2a:b6:07:f0:23:99:83:8a:98:5b:72:89:a7:87:
f0:6e:03:7e:e2:6f:15:ea:9b:27:1b:7f:63:fe:1e:72:8e:c4:
96:6d:24:79:e6:b9:b2:22:2c:ef:c4:2e:da:38:18:c3:cd:3a:
b3:b0:d1:3e:ba:0b:36:ba:2c:42:ca:19:61:47:da:1c:de:49:
fe:5d:82:7f:28:b3:c4:a9:29:82:ee:0a:df:1f:31:33:63:b1:
e7:36:57:10:05:03:37:ff:0f:61:34:db:b7:6f:c9:18:54:0b:
de:63:a3:d8:34:23:3a:bf:9e:22:67:bb:6b:3d:b4:24:df:e4:
73:24:e8:ba:5f:ee:c9:2a:72:1f:d7:58:76:21:9d:5d:f7:c6:
ca:c3:61:ee:91:c7:cd:2a:d1:ab:96:8d:45:e6:52:90:df:74:
15:b2:5f:fd:49:58:98:2f:78:95:90:01:d7:5c:7b:0e:6a:ba:
de:be:82:66:0e:9d:f0:c1:b8:57:45:4b:d2:43:d9:cc:d8:13:
e8:59:d5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:35:18 2025 by rpki-client