Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/nbUssdIHSjWfeIh8L_-mJVYgAZA.roa
File: nbUssdIHSjWfeIh8L_-mJVYgAZA.roa (raw, json)
Hash identifier: zmncN5W9l/SLW+y/pIfUzhguaT/pe9S0Xfsqg1Y0LbY=
Subject key identifier: 9D:B5:2C:B1:D2:07:4A:35:9F:78:88:7C:2F:FF:A6:25:56:20:01:90
Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Certificate serial: 4F8B
Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/nbUssdIHSjWfeIh8L_-mJVYgAZA.roa
Signing time: Sat 13 Sep 2025 03:02:34 +0000
ROA not before: Sat 13 Sep 2025 03:02:34 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4808
IP address blocks: 163.53.44.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20363 (0x4f8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Validity
Not Before: Sep 13 03:02:34 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=9DB52CB1D2074A359F78887C2FFFA62556200190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:cb:3f:99:71:76:a8:df:89:a5:50:53:ce:2f:
71:fd:ea:87:72:7f:ea:bb:0b:00:74:69:02:1f:b8:
3d:15:ae:43:30:d7:62:97:cf:2d:a2:44:51:2f:ab:
56:7e:5f:eb:05:e7:49:07:43:5e:6b:7a:95:11:93:
5c:d0:97:60:7f:3d:04:40:fc:c3:f2:6d:90:0d:98:
2a:c1:79:a3:6f:f5:1e:d0:08:10:53:ff:8e:c0:21:
f5:42:19:6c:46:3e:92:d1:dd:4d:5b:37:7d:72:bc:
26:2a:fd:ed:d8:84:fc:94:ce:ca:b7:cc:5c:86:f1:
37:13:e5:47:3c:e3:4d:88:2d:34:9f:6d:44:ec:6b:
1f:28:3b:59:be:3a:92:15:57:8a:a5:b9:ac:4c:8b:
99:69:f8:44:da:62:c5:c6:4f:5e:78:a1:97:92:90:
a7:3b:5b:f7:b9:e4:6b:1a:7b:00:41:d7:82:a1:1c:
8e:eb:1c:b6:65:2f:ef:52:83:c7:43:9b:21:30:c5:
e3:40:30:47:74:a8:d8:d4:67:51:35:8e:58:b4:cd:
fd:16:8b:e8:ec:40:53:d3:12:48:40:33:61:a1:13:
b2:ac:c8:59:0b:37:b4:af:a7:c7:6f:02:0d:bc:04:
87:01:55:11:24:55:bb:23:55:15:9b:39:83:8c:06:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B5:2C:B1:D2:07:4A:35:9F:78:88:7C:2F:FF:A6:25:56:20:01:90
X509v3 Authority Key Identifier:
keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/nbUssdIHSjWfeIh8L_-mJVYgAZA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.53.44.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f9:69:f3:e1:49:13:e7:2a:52:c8:57:2b:a6:06:c6:95:26:
a9:4c:85:82:a3:58:1f:1b:9d:b9:cc:41:db:8e:8c:a0:8d:c0:
13:e0:68:d9:9b:ff:05:27:66:20:0f:ca:e3:53:1a:09:33:61:
f4:9f:0a:8e:ca:32:7a:6d:9f:16:c8:f6:9c:55:97:f7:8d:7b:
21:14:5c:cc:60:ec:75:9d:50:45:b0:89:5c:71:77:d1:9a:42:
da:99:58:3f:8d:8c:59:78:95:2b:86:1e:50:53:2e:c7:19:60:
2e:45:96:6c:86:e0:a5:e8:e2:d5:1d:e6:46:f3:85:d6:37:92:
cc:39:ac:2e:77:8c:d8:6d:d7:df:32:a4:41:92:dd:40:ff:96:
b5:8f:ca:a3:ab:25:5a:d2:c1:5e:5e:f7:df:fb:68:ac:52:a0:
4f:29:dd:ae:18:af:e4:a8:ab:3f:77:89:e9:cc:27:bc:7d:67:
7a:ea:15:fd:95:32:7e:65:71:ba:bf:3e:67:cc:89:9a:90:9a:
79:6f:11:22:c4:b3:b7:6a:8c:eb:dd:1c:36:60:d4:02:f1:43:
3f:bc:45:55:88:7c:31:f5:52:64:30:4c:a9:e7:51:06:14:24:
a0:83:45:8d:10:3c:bb:78:da:70:97:8e:ee:03:ab:23:22:3d:
9b:7f:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:43:05 2025 by rpki-client