Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2776/bftn28qHIgZXG_89lVEwmYGC41k.roa
File: bftn28qHIgZXG_89lVEwmYGC41k.roa (raw, json)
Hash identifier: Al+FOQdcjS+X7tENhRLV/ra6iO04nybaQNl24Dd3sTA=
Subject key identifier: 6D:FB:67:DB:CA:87:22:06:57:1B:FF:3D:95:51:30:99:81:82:E3:59
Certificate issuer: /CN=86DB0D88746FFC0814E589A139240F2F742D0C56
Certificate serial: 12BC
Authority key identifier: 86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/bftn28qHIgZXG_89lVEwmYGC41k.roa
Signing time: Wed 22 Jan 2025 03:29:45 +0000
ROA not before: Wed 22 Jan 2025 03:29:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63566
IP address blocks: 122.11.0.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4796 (0x12bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86DB0D88746FFC0814E589A139240F2F742D0C56
Validity
Not Before: Jan 22 03:29:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6DFB67DBCA872206571BFF3D955130998182E359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:d0:d3:68:8d:c0:d9:56:e2:1d:5d:37:2f:
5a:26:4a:68:a1:ef:f9:58:c6:3b:4a:18:e7:d4:92:
90:a7:48:17:ef:08:05:6f:8e:0c:23:70:98:ba:56:
29:ad:36:18:02:a7:a1:a2:a2:54:f8:cd:72:d0:49:
3a:18:98:6e:00:69:f6:2e:04:a6:3f:20:45:e6:09:
3f:36:8f:7c:e7:6a:ad:62:51:02:bf:3d:96:82:87:
3e:8a:65:27:7a:85:1c:03:f3:52:8d:75:f5:f9:a5:
20:23:e8:64:7c:21:44:af:c2:71:89:3c:a8:b8:50:
75:e8:06:e4:7c:8f:7f:91:5d:53:9c:d6:f2:40:56:
f6:d6:98:b3:9d:92:c9:30:74:71:f7:c7:10:e9:52:
6d:21:0c:b4:46:5a:98:6f:8f:08:ed:f6:94:c0:22:
34:52:bb:d4:b2:d9:31:02:56:a5:d8:a6:39:ae:a4:
e1:06:c4:8d:91:70:5f:27:7b:0c:63:00:b3:86:b9:
be:32:14:5f:da:ec:17:a9:95:30:8d:af:ca:c6:82:
21:fb:83:47:da:b9:a9:a9:5b:18:7d:a3:0f:af:d8:
5a:8e:0b:af:c5:32:55:65:63:77:72:30:81:5e:db:
73:43:92:b7:6d:83:a3:a9:0c:4c:92:50:23:22:a5:
09:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FB:67:DB:CA:87:22:06:57:1B:FF:3D:95:51:30:99:81:82:E3:59
X509v3 Authority Key Identifier:
keyid:86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/bftn28qHIgZXG_89lVEwmYGC41k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.11.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:6b:90:98:f1:7a:bb:8c:c3:12:2a:45:d0:17:86:5d:80:52:
1c:4a:68:e8:cf:6e:80:82:fe:e5:7d:61:91:2b:7b:bd:fb:93:
09:bc:9d:7f:6c:6b:13:50:fd:fd:45:49:99:e6:b0:96:98:a8:
a5:a2:35:4e:c1:80:20:27:c3:58:84:8f:a4:52:45:dd:3a:65:
03:11:94:10:ce:f8:0a:4b:79:5e:c4:5c:1b:94:78:36:b4:bc:
6c:f5:cc:96:45:0d:40:9b:ee:e5:58:63:99:4f:9b:4e:4a:f1:
58:33:ce:14:d5:f1:0a:17:1d:d9:3a:69:c7:59:08:ff:80:37:
cc:9b:bd:34:b9:63:67:c1:76:de:2b:31:0c:83:0e:4b:2d:80:
54:bc:8c:2f:e6:e3:c1:b1:db:16:26:3d:3d:3f:95:be:33:05:
b7:7a:73:6b:a3:f7:6f:ce:d4:5c:38:5b:ab:d7:dd:4a:db:e0:
8a:f7:66:f1:d8:29:a5:73:0e:c9:27:b9:52:95:f6:48:25:37:
cb:56:05:7e:90:03:df:71:15:b8:b7:6c:86:3d:c4:d6:6d:79:
f7:d5:98:e3:47:5e:6a:d2:9a:70:4f:c3:3a:ed:d7:fe:b6:05:
d8:b2:b7:e4:12:4c:37:bc:f9:1a:98:bf:b7:58:cb:d8:e5:68:
36:82:c5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 00:22:32 2025 by rpki-client