Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1584/Sgz7N-BpTI9xZtcLhs5bGN13oXE.roa
File: Sgz7N-BpTI9xZtcLhs5bGN13oXE.roa (raw, json)
Hash identifier: IaarH07KouL4UwBwsIRwaqiz1WQsV9ugmF/k6aEGNmI=
Subject key identifier: 4A:0C:FB:37:E0:69:4C:8F:71:66:D7:0B:86:CE:5B:18:DD:77:A1:71
Certificate issuer: /CN=F76C9E43361DEA446077AD7029057380AFFF3266
Certificate serial: 246F
Authority key identifier: F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/Sgz7N-BpTI9xZtcLhs5bGN13oXE.roa
Signing time: Sat 13 Sep 2025 03:03:22 +0000
ROA not before: Sat 13 Sep 2025 03:03:22 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 24424
IP address blocks: 2404:280::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9327 (0x246f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F76C9E43361DEA446077AD7029057380AFFF3266
Validity
Not Before: Sep 13 03:03:22 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=4A0CFB37E0694C8F7166D70B86CE5B18DD77A171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:f3:9f:23:8f:2f:3d:e4:70:3f:c8:49:1c:
c9:d3:b1:05:e5:54:2c:ec:88:8f:86:5e:93:6f:0b:
72:d8:73:c4:63:93:d2:9b:cb:ba:08:80:cc:40:6a:
3c:7a:d7:65:76:f2:56:1e:d1:e1:f0:11:8e:aa:30:
b7:c6:9f:df:72:ae:31:ff:9f:21:45:b4:8b:fa:e2:
6b:4a:72:ea:b1:45:c0:71:40:13:e9:be:c5:69:8d:
0f:4e:bd:4d:b6:4d:6f:d2:f6:70:bf:e0:98:a1:05:
b7:c6:8c:bd:76:dd:e1:d3:e6:00:95:1b:a7:4b:5c:
55:88:72:2c:3b:f7:6b:52:4a:2e:43:0a:e8:e0:28:
22:6e:45:eb:75:2f:de:4c:1a:95:32:85:cd:e4:de:
77:83:a7:bc:27:01:fc:50:de:9d:6a:11:90:db:a5:
a3:e1:39:3e:76:03:aa:b0:d5:37:21:0d:27:fd:f8:
fd:3f:d8:42:62:19:f3:ad:85:f6:ce:fc:c7:35:50:
47:e7:f9:d1:1c:80:bd:cf:91:12:d4:60:08:0a:95:
4f:19:f3:4d:f3:d8:9f:a4:39:85:e3:17:08:b7:8e:
b7:46:c4:04:8b:ea:61:bd:2b:57:92:95:35:2a:01:
fc:4e:61:61:1e:62:d4:b2:98:78:79:7f:52:5f:ce:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0C:FB:37:E0:69:4C:8F:71:66:D7:0B:86:CE:5B:18:DD:77:A1:71
X509v3 Authority Key Identifier:
keyid:F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/Sgz7N-BpTI9xZtcLhs5bGN13oXE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:280::/32
Signature Algorithm: sha256WithRSAEncryption
3f:05:e9:c8:36:60:a7:ee:d2:91:d8:d2:80:04:67:8a:c0:55:
9a:96:b9:da:ba:08:f0:a9:ca:21:9a:bf:b9:3b:ec:93:ed:88:
fc:a8:4f:7a:83:2d:4d:90:c6:9d:92:41:ad:69:b7:64:2c:b9:
1d:6c:f1:61:a4:b4:7f:05:8f:2a:ce:69:21:90:8d:fb:c2:6d:
d1:c4:d5:1b:24:b9:c9:cb:bb:d8:0e:f7:b5:fa:9a:9d:0d:d8:
e3:fe:52:98:b9:01:47:72:a9:18:5c:1f:7e:8b:3d:ee:e0:1b:
62:4d:12:d6:60:be:93:61:be:e8:af:2d:9b:5c:40:68:c3:5a:
36:37:b5:6b:b3:94:c6:6b:69:f4:4d:15:bb:d9:d5:db:7c:48:
0e:83:18:3e:09:20:ce:86:d3:b5:66:fa:95:7f:43:3b:b0:47:
04:e0:21:df:be:ec:c2:3d:ca:fa:68:37:e4:bb:9b:2a:77:c6:
bd:cd:6a:18:15:cc:00:5a:dc:a1:d4:53:d2:ac:22:c2:f3:5b:
4b:94:d7:09:0f:59:16:e1:88:cd:68:ed:4e:d2:50:d8:10:fc:
70:76:0d:b0:46:9d:fa:3e:63:04:35:fb:60:be:b5:95:52:00:
5b:39:3e:b3:87:2f:79:00:1d:84:20:ea:a8:81:f2:f9:e9:a0:
ec:df:87:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:27:17 2025 by rpki-client