Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/YSs_cApXy5hyZCIx8MkVJHX0PcI.roa
File: YSs_cApXy5hyZCIx8MkVJHX0PcI.roa (raw, json)
Hash identifier: R5u6ObqX0aK5BGq8IO0xZvGNu+y+5fQGd6Js78u5ESA=
Subject key identifier: 61:2B:3F:70:0A:57:CB:98:72:64:22:31:F0:C9:15:24:75:F4:3D:C2
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 05
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/YSs_cApXy5hyZCIx8MkVJHX0PcI.roa
Signing time: Tue 15 Apr 2025 09:24:30 +0000
ROA not before: Tue 15 Apr 2025 09:24:30 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 140869
IP address blocks: 103.119.12.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 15 09:24:30 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=612B3F700A57CB9872642231F0C9152475F43DC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:db:68:bf:fb:1b:df:70:09:1b:d4:6f:3f:
79:a3:1e:f1:b2:82:13:f3:9a:0a:9c:d4:b3:9a:98:
91:f8:38:8a:f8:eb:96:31:bb:47:cd:85:45:27:9b:
0e:4c:2d:0f:3e:e5:6d:2b:f4:e0:f7:0b:b6:d2:c0:
3f:23:de:4e:6d:70:2e:45:16:a7:75:c7:3e:99:16:
25:4c:dd:d4:3f:35:7c:72:58:37:44:29:86:a8:d0:
27:b3:ed:43:c3:91:8a:15:37:81:16:4f:30:89:27:
25:e5:3f:f5:2d:a0:d4:83:64:78:fd:03:8c:12:63:
7b:5b:de:22:de:51:45:04:f7:51:7f:3b:a6:e8:e8:
37:57:45:6e:47:90:c6:00:b6:99:29:2f:4e:a2:c9:
f8:14:f4:0d:76:57:0e:b0:b2:83:3b:a6:c0:01:89:
d2:1c:a6:73:00:ba:23:8c:12:a1:40:d8:45:ef:e7:
20:8a:6d:eb:e5:29:d1:64:49:8e:b3:c7:01:e8:1c:
46:df:2b:90:3f:9b:9f:da:e0:6d:d8:90:ac:d5:06:
92:ef:7e:49:54:54:f5:66:2a:7c:10:98:08:cc:b6:
a3:a7:de:f4:75:6a:2e:a8:5d:1e:49:94:2b:b2:35:
a0:7a:2d:95:42:87:4d:d4:fa:73:59:55:c8:5b:54:
38:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2B:3F:70:0A:57:CB:98:72:64:22:31:F0:C9:15:24:75:F4:3D:C2
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/YSs_cApXy5hyZCIx8MkVJHX0PcI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.12.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:fa:92:40:e7:aa:b9:ee:e8:11:6d:dc:fd:47:83:61:90:1e:
94:17:86:c8:57:80:c6:1b:00:6c:80:ae:9d:ff:f7:c1:8b:29:
bd:ae:83:5b:1f:23:db:db:11:b5:82:02:1c:4a:26:2d:53:66:
f4:d3:69:47:e5:e8:cc:4f:1e:1a:a7:f5:56:2e:9e:d7:98:84:
84:3e:2c:33:ce:af:6d:48:47:90:a5:a0:d5:42:8b:d9:60:ed:
e5:fe:84:3a:57:de:9a:a8:eb:d4:f9:0a:a5:ef:38:83:51:fd:
09:96:b5:1e:a3:63:3d:47:7a:46:1a:72:91:9e:fd:fa:d1:09:
5d:f6:58:25:ae:af:28:be:aa:e6:6e:f7:04:09:c3:c3:b0:87:
1f:2e:44:45:2d:90:e2:ec:a6:ab:af:3f:c8:75:4e:e5:e3:7d:
2b:2c:5f:14:92:9a:1d:cd:2b:98:56:85:35:fc:f9:c1:57:35:
20:0e:d4:f9:52:32:25:94:a7:d4:ad:73:63:ff:5f:d9:33:5e:
88:a2:d5:1a:75:90:25:2c:b7:1d:f0:b5:3b:59:6c:eb:84:ff:
31:a1:6d:84:c8:15:c5:c2:4f:e3:c9:0a:e3:41:d9:36:d6:ed:
46:e7:f9:40:dd:2d:6e:bc:90:44:d5:66:66:a4:e9:d6:72:9a:
3a:69:7e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:50:51 2025 by rpki-client