Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/E8k6HOUpJcgGSHBnvAJUc3RzsFQ.roa
File: E8k6HOUpJcgGSHBnvAJUc3RzsFQ.roa (raw, json)
Hash identifier: 9cwtJW5exCVRvI29LdcswfWX+79bTzBtMVJ0k2OU9AM=
Subject key identifier: 13:C9:3A:1C:E5:29:25:C8:06:48:70:67:BC:02:54:73:74:73:B0:54
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7F83
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/E8k6HOUpJcgGSHBnvAJUc3RzsFQ.roa
Signing time: Wed 06 Aug 2025 07:33:11 +0000
ROA not before: Wed 06 Aug 2025 07:33:11 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 103.236.16.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32643 (0x7f83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Aug 6 07:33:11 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=13C93A1CE52925C806487067BC0254737473B054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:66:4d:59:b9:63:d1:a8:fe:b6:d2:4d:46:
4b:b5:6b:32:09:ef:44:6c:f9:d1:04:8a:df:56:33:
56:6a:56:a2:91:04:e7:f3:02:23:ed:a3:89:c6:72:
c5:1f:e0:be:47:5d:54:e6:a3:49:ce:71:8c:c1:b8:
15:ad:a0:d1:23:09:b4:2f:d7:fe:be:f8:04:c9:dd:
aa:03:ad:0e:e1:af:52:16:5e:eb:e6:17:43:ba:d7:
66:5e:4d:cf:7a:77:30:8c:77:b6:f9:8e:50:86:75:
b7:18:bf:d9:a6:ee:b3:a6:0b:1f:3d:8b:21:7e:ea:
6c:2f:d5:45:88:c8:b3:37:bd:7a:cf:8a:8a:62:cd:
eb:67:c9:39:6b:b7:e9:f9:34:88:e2:a8:20:2a:ce:
3b:27:cd:79:73:5d:ba:bf:d7:26:21:02:bf:63:a7:
ea:a8:7c:bc:86:38:1d:47:58:fa:a2:5c:43:f8:90:
7a:ef:89:99:5e:e7:90:07:cc:8e:41:fe:c8:0f:15:
93:aa:06:e3:78:1b:51:25:43:b7:ef:af:f7:70:b1:
15:6b:48:af:f8:d0:c0:bb:f9:d1:ef:74:4a:dc:c3:
a2:dc:17:e4:87:f2:a3:a5:3d:d8:b2:65:e7:ed:61:
3b:b1:3d:81:cf:24:80:52:e5:76:06:43:70:e7:22:
80:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C9:3A:1C:E5:29:25:C8:06:48:70:67:BC:02:54:73:74:73:B0:54
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/E8k6HOUpJcgGSHBnvAJUc3RzsFQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.236.16.0/22
Signature Algorithm: sha256WithRSAEncryption
26:21:28:e3:e7:56:1e:7e:f7:81:71:be:79:99:81:8c:6d:d2:
37:b8:83:04:66:26:a7:14:8b:20:ea:4e:fa:49:53:aa:39:bf:
3b:94:f2:2a:b6:1c:6f:86:20:ac:e3:50:4d:8e:7a:93:bc:d2:
85:11:8d:50:ed:23:ac:1f:ad:d6:dc:7f:70:c5:a3:1c:01:8b:
f0:7d:e7:58:0e:5a:1f:bb:5c:83:d5:f6:dc:b0:59:53:b7:e0:
27:a4:25:b3:8b:37:c3:94:0d:92:43:ce:7c:17:f1:fd:4c:c5:
ce:63:34:1f:7f:ab:f5:77:79:c6:54:10:63:13:46:18:23:08:
97:e9:a8:b6:51:88:14:e1:ca:5b:fb:b5:52:b7:02:1b:c3:9b:
e7:33:75:4c:ab:30:ff:70:9b:fe:17:c8:85:ac:60:77:25:6d:
1e:05:bf:c8:18:f5:7b:68:25:2b:ef:74:40:c9:51:61:d7:20:
ac:8b:e7:aa:5c:b5:b7:40:e1:4a:88:72:e2:4e:b5:3a:59:97:
df:74:d0:d9:9c:1d:b5:59:01:28:4a:93:d8:27:6f:c7:bc:b8:
b6:e2:fd:a9:fd:85:f1:fb:90:ce:0d:7b:06:29:ed:cd:f5:3a:
fe:14:ef:3a:3f:12:c9:a3:ba:93:4e:72:00:c2:ad:a6:56:58:
60:cf:00:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:36:24 2025 by rpki-client