Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2927/bICgxX9gzfqagwtHn3C-XCZ5K_o.roa
File: bICgxX9gzfqagwtHn3C-XCZ5K_o.roa (raw, json)
Hash identifier: qOLH/4wbzxEHmnkgVYOHGh5jcKt7pnSrYyFM+SuxjZo=
Subject key identifier: 6C:80:A0:C5:7F:60:CD:FA:9A:83:0B:47:9F:70:BE:5C:26:79:2B:FA
Certificate issuer: /CN=73D211D5B210E3B196054DB71892D8E38A4E09EF
Certificate serial: 04
Authority key identifier: 73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/bICgxX9gzfqagwtHn3C-XCZ5K_o.roa
Signing time: Wed 25 Jun 2025 02:40:29 +0000
ROA not before: Wed 25 Jun 2025 02:40:29 +0000
ROA not after: Thu 25 Jun 2026 02:35:12 +0000
asID: 134760
IP address blocks: 103.41.164.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73D211D5B210E3B196054DB71892D8E38A4E09EF
Validity
Not Before: Jun 25 02:40:29 2025 GMT
Not After : Jun 25 02:35:12 2026 GMT
Subject: CN=6C80A0C57F60CDFA9A830B479F70BE5C26792BFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1a:a0:0f:41:ab:e4:dd:bc:c8:cf:2c:ff:a4:
54:a8:d6:ef:97:21:f0:c2:51:f9:9f:c1:8e:06:c1:
db:9f:9f:0f:13:de:41:55:42:0e:6c:f3:44:f5:14:
88:29:fa:88:c6:0b:4a:37:33:cf:3a:4d:3c:94:aa:
b1:08:f5:20:4e:ab:42:4c:81:b9:f3:8c:22:7a:d3:
82:55:d0:7c:b8:c3:02:9b:16:49:29:93:f1:ed:d0:
21:4f:40:18:59:45:bf:b9:ef:bf:6f:d6:26:b6:f5:
c3:a2:52:de:3c:e5:44:fb:fd:cb:7d:1c:9e:68:3e:
25:9f:67:fe:e1:20:eb:34:7a:77:a9:c5:93:35:e7:
7f:05:62:a8:47:c3:95:75:13:85:00:db:bc:a3:91:
50:ec:83:b0:0c:bb:27:a1:ae:69:27:94:95:af:e9:
73:05:64:11:cf:aa:c6:b6:71:ac:a9:d5:78:18:15:
18:f9:81:30:e4:42:c0:bd:c2:e2:37:7b:d7:6c:14:
f3:1a:53:eb:cf:d3:59:6b:10:fd:13:4a:db:be:2e:
6d:c7:ee:61:ee:e6:9b:0c:a5:fb:04:64:5c:48:8d:
70:42:1c:6e:e5:87:80:ab:af:07:b8:f0:3e:61:08:
2d:06:c9:f2:20:d8:60:e7:b8:18:5f:5c:bf:80:0f:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:80:A0:C5:7F:60:CD:FA:9A:83:0B:47:9F:70:BE:5C:26:79:2B:FA
X509v3 Authority Key Identifier:
keyid:73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/bICgxX9gzfqagwtHn3C-XCZ5K_o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.41.164.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:50:c0:5c:b2:86:60:9d:92:b8:7e:c8:3f:96:ed:be:15:40:
50:fe:05:25:2b:11:16:47:31:f4:93:31:ba:fc:39:64:88:c2:
91:63:6c:58:20:7b:4d:00:d2:e8:52:13:2b:af:37:db:fc:37:
39:37:03:0f:ef:64:e3:e1:56:1e:61:a8:d4:22:67:48:24:88:
f7:86:f0:46:ff:c6:b2:4d:0b:d0:2f:12:3f:53:8c:6c:88:af:
91:66:c2:a7:12:99:3d:fa:3a:f3:03:4e:da:8f:9b:ae:9d:6d:
6e:c7:67:16:c7:8f:9d:eb:cb:9f:3e:8e:fb:80:99:bd:33:40:
c8:ab:cd:7c:96:3b:bb:a6:ce:26:12:23:cd:ec:63:a9:49:b2:
b9:84:97:c5:5d:5f:cb:87:0f:db:f1:89:16:da:06:8c:59:2a:
d9:6e:5d:c7:ca:39:ae:ce:82:ff:a2:cb:eb:8d:f4:bf:2c:e9:
08:99:cb:86:fe:60:de:59:5e:9b:d1:65:11:be:7a:b7:9d:d4:
69:60:14:b7:9d:13:7c:0b:e8:00:a3:eb:d9:85:52:5e:76:90:
9c:79:c5:cf:2f:95:e6:35:cc:52:5c:f5:3c:34:53:c4:1e:cb:
9b:75:dd:f8:39:f2:a2:82:8e:34:d2:7d:29:c3:6d:05:1c:61:
32:ab:d4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:45:33 2025 by rpki-client