Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dwtM8IvxpnRcEvVh7Cyv0u7G7C0.roa
File: dwtM8IvxpnRcEvVh7Cyv0u7G7C0.roa (raw, json)
Hash identifier: KyC8NCezfjeRtd9aDyBaeuIag6fWROOAIKe36HPDndA=
Subject key identifier: 77:0B:4C:F0:8B:F1:A6:74:5C:12:F5:61:EC:2C:AF:D2:EE:C6:EC:2D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7F7F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dwtM8IvxpnRcEvVh7Cyv0u7G7C0.roa
Signing time: Wed 06 Aug 2025 07:33:10 +0000
ROA not before: Wed 06 Aug 2025 07:33:10 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32639 (0x7f7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Aug 6 07:33:10 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=770B4CF08BF1A6745C12F561EC2CAFD2EEC6EC2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:76:60:13:20:05:24:3b:7e:d6:36:ec:e8:
99:11:bb:c0:ad:c8:00:1b:a6:de:5c:a2:c3:ad:4e:
4d:ab:1b:8e:a6:98:3b:9d:bf:6d:59:6c:ad:fc:b2:
c2:76:85:5a:45:a9:36:56:02:34:0a:22:9e:95:77:
b3:35:c1:96:ba:cd:4b:4f:6b:9c:96:bd:36:4e:cc:
41:d5:47:e1:28:c4:60:76:68:34:82:1a:03:04:e1:
22:b0:70:a6:53:91:8d:b8:f8:67:61:98:b2:a9:bd:
fc:05:ec:8d:d8:07:59:c0:c5:f5:c4:8a:7b:3d:24:
86:bc:93:67:26:af:ea:2f:a0:e6:dd:2a:f3:a7:b1:
4c:14:98:42:a8:20:c0:9e:6e:b8:a2:60:eb:23:bd:
75:9c:27:93:2a:cf:08:89:ae:09:e3:55:9e:eb:96:
bb:d9:9f:cb:48:10:57:78:39:0b:8f:e8:b5:06:c6:
c3:7c:ea:2a:7b:25:49:2f:0a:d1:a4:d3:ed:cb:03:
00:1b:97:e1:07:5d:85:94:1e:19:9f:5c:8e:23:a8:
7e:a4:27:29:c8:84:66:3e:5f:00:84:c1:30:59:1f:
71:1d:c2:1d:c3:67:d7:d4:33:40:cc:74:fa:6f:2b:
d5:8a:1c:b0:63:74:44:1e:54:82:5e:73:8f:b3:04:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0B:4C:F0:8B:F1:A6:74:5C:12:F5:61:EC:2C:AF:D2:EE:C6:EC:2D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dwtM8IvxpnRcEvVh7Cyv0u7G7C0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:f7:8c:be:15:c8:1a:a3:28:df:a6:79:a3:c6:b2:ea:d4:73:
fb:ff:b6:c5:64:88:bc:70:37:e3:44:ce:ac:9a:0b:e8:5e:bc:
d9:bc:e3:97:15:6f:59:40:79:89:8a:08:02:c0:ce:10:b5:f9:
29:05:e9:d0:76:0a:7e:bb:30:b2:b2:2e:4f:4d:f0:70:40:2b:
6e:60:72:70:e6:a9:46:d5:e1:f1:47:f9:43:1e:72:07:ca:e0:
20:73:97:be:81:4d:61:a5:ce:2f:24:2a:99:51:73:5b:fe:40:
fa:ab:bb:d1:71:89:8c:f7:ab:6f:88:95:6c:41:c2:5f:ec:fc:
8f:57:9d:cf:60:e9:10:cd:24:d5:8c:bb:45:a5:c5:ea:06:38:
83:d6:79:bf:85:54:85:b0:b2:88:d2:c3:4c:3f:cd:5e:96:41:
63:3c:95:97:2a:65:14:09:80:02:f4:9a:98:d6:55:52:d0:44:
dd:3d:1a:f4:5a:be:bb:d2:be:a6:4c:4b:08:55:c6:19:18:d4:
df:31:9a:65:d7:fd:44:ea:85:ab:dd:aa:69:06:f4:74:91:65:
0d:f0:19:3e:e4:7f:a8:6a:84:a0:04:14:9a:06:c5:74:64:4a:
cf:02:c0:f6:eb:45:79:38:87:d6:86:3f:3e:48:18:71:db:a0:
cd:ff:e6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:37:12 2025 by rpki-client