Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/HENqmW8P5dcEQIfswIqgbjfICaE.roa
File: HENqmW8P5dcEQIfswIqgbjfICaE.roa (raw, json)
Hash identifier: 2uQSitIo9B3RR+cJnZzNJCmzNIkok2Z3w96MqLM6zRk=
Subject key identifier: 1C:43:6A:99:6F:0F:E5:D7:04:40:87:EC:C0:8A:A0:6E:37:C8:09:A1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7F96
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HENqmW8P5dcEQIfswIqgbjfICaE.roa
Signing time: Wed 06 Aug 2025 07:33:16 +0000
ROA not before: Wed 06 Aug 2025 07:33:16 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.246.76.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32662 (0x7f96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Aug 6 07:33:16 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1C436A996F0FE5D7044087ECC08AA06E37C809A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ef:aa:50:65:e0:99:b8:a4:54:6e:18:76:69:
82:86:47:f2:b0:5b:fd:04:fb:f9:e2:0b:ce:d5:e0:
48:c8:e0:31:02:a3:da:91:50:a9:df:72:87:a2:ca:
52:27:8a:d6:07:58:17:7e:b7:38:b4:41:3c:f1:ec:
6d:6a:57:9c:2c:8f:95:ff:62:4c:05:56:be:a3:f1:
98:74:f1:ef:20:d4:99:bd:d5:a7:71:4c:c0:f3:90:
af:83:24:a7:51:6f:d9:65:e4:51:5a:db:67:af:7d:
4d:71:ab:69:90:3a:51:98:75:24:ad:a9:7f:ce:5a:
31:17:1b:e5:1d:4e:4f:a9:52:af:4b:4b:33:d7:fe:
27:b3:4e:f4:66:ac:1c:9d:eb:2c:01:b2:0e:8f:06:
08:41:c9:bd:7c:44:ae:92:78:0e:46:3b:82:69:53:
a5:90:fe:2b:a1:6d:62:4f:ef:ea:39:a3:28:97:81:
fa:b4:93:d2:09:7a:e8:92:fc:98:43:2c:16:b7:30:
37:42:d3:8e:cf:4e:55:38:fe:4e:4c:c4:d2:58:d0:
43:11:8b:00:1d:bf:ce:79:5c:cd:c2:dd:cf:48:16:
d7:87:ea:09:97:8a:ca:90:9f:38:07:a3:e9:5c:c1:
57:49:a9:b1:4d:f4:50:45:71:1a:b5:e2:06:23:c9:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:43:6A:99:6F:0F:E5:D7:04:40:87:EC:C0:8A:A0:6E:37:C8:09:A1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HENqmW8P5dcEQIfswIqgbjfICaE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.246.76.0/22
Signature Algorithm: sha256WithRSAEncryption
07:09:59:aa:75:2b:b7:d2:34:8c:c3:d2:21:39:dd:fa:60:19:
4b:5d:fc:f5:95:60:4d:66:7f:29:bf:f8:c3:41:0e:c3:31:79:
a5:2a:7d:e9:cb:fe:f1:9e:f5:d1:09:d3:a6:f7:7c:75:b8:c9:
89:c4:d7:3d:3c:be:13:b1:91:ee:f3:34:cf:92:8a:74:78:1c:
7b:c2:ee:71:57:13:07:b0:7d:e3:01:1e:b2:fc:ff:27:c6:f9:
25:50:99:d7:85:2c:16:a7:db:bd:67:ee:94:0e:1b:65:55:0a:
bd:98:0f:b7:46:36:99:de:89:df:80:7e:98:21:19:ed:c5:2e:
e3:c1:bb:fb:80:84:c8:dd:2c:23:18:26:6a:41:6e:5a:d5:34:
ee:b7:e8:ae:f1:1d:24:95:dd:45:86:74:92:11:de:dd:b4:38:
00:20:54:19:ac:77:c3:a1:c1:06:f7:17:d6:23:33:f5:7a:f9:
5c:6a:ad:04:49:df:01:30:84:f9:bf:48:19:e9:5d:33:28:89:
be:a8:74:e0:5b:46:fc:62:94:3b:1e:26:e6:39:0d:d7:29:1a:
02:72:e5:bb:be:b8:aa:10:6e:85:6c:30:0b:85:01:bc:e8:e2:
87:ea:74:ed:69:40:f7:34:fe:dd:f9:31:18:a8:1b:55:37:80:
20:87:7b:94
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICf5YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA4MDYw
NzMzMTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFDNDM2QTk5NkYwRkU1
RDcwNDQwODdFQ0MwOEFBMDZFMzdDODA5QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCX76pQZeCZuKRUbhh2aYKGR/KwW/0E+/niC87V4EjI4DECo9qR
UKnfcoeiylInitYHWBd+tzi0QTzx7G1qV5wsj5X/YkwFVr6j8Zh08e8g1Jm91adx
TMDzkK+DJKdRb9ll5FFa22evfU1xq2mQOlGYdSStqX/OWjEXG+UdTk+pUq9LSzPX
/iezTvRmrByd6ywBsg6PBghByb18RK6SeA5GO4JpU6WQ/iuhbWJP7+o5oyiXgfq0
k9IJeuiS/JhDLBa3MDdC047PTlU4/k5MxNJY0EMRiwAdv855XM3C3c9IFteH6gmX
isqQnzgHo+lcwVdJqbFN9FBFcRq14gYjyW/LAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUHENqmW8P5dcEQIfswIqgbjfICaEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0hFTnFtVzhQNWRjRVFJ
ZnN3SXFnYmpmSUNhRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAIr9kwwDQYJKoZIhvcNAQELBQADggEBAAcJWap1K7fSNIzD0iE53fpgGUtd/PWV
YE1mfym/+MNBDsMxeaUqfenL/vGe9dEJ06b3fHW4yYnE1z08vhOxke7zNM+SinR4
HHvC7nFXEwewfeMBHrL8/yfG+SVQmdeFLBan271n7pQOG2VVCr2YD7dGNpneid+A
fpghGe3FLuPBu/uAhMjdLCMYJmpBblrVNO636K7xHSSV3UWGdJIR3t20OAAgVBms
d8OhwQb3F9YjM/V6+VxqrQRJ3wEwhPm/SBnpXTMoib6odOBbRvxilDseJuY5Ddcp
GgJy5bu+uKoQboVsMAuFAbzo4ofqdO1pQPc0/t35MRioG1U3gCCHe5Q=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:35:25 2025 by rpki-client