Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3026/ApUlRCl42XFMHwPJSxF-Cg-PNrE.roa
File: ApUlRCl42XFMHwPJSxF-Cg-PNrE.roa (raw, json)
Hash identifier: AcObfQtZA5Ps7aUh+zqQL9jt3zXdH7SKtkgzcJnLkjw=
Subject key identifier: 02:95:25:44:29:78:D9:71:4C:1F:03:C9:4B:11:7E:0A:0F:8F:36:B1
Certificate issuer: /CN=0CB04CC5A6B39B148DD710EF5C6E3F2D9380B455
Certificate serial: 06EF
Authority key identifier: 0C:B0:4C:C5:A6:B3:9B:14:8D:D7:10:EF:5C:6E:3F:2D:93:80:B4:55
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DLBMxaazmxSN1xDvXG4_LZOAtFU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/ApUlRCl42XFMHwPJSxF-Cg-PNrE.roa
Signing time: Fri 22 Aug 2025 15:20:09 +0000
ROA not before: Fri 22 Aug 2025 15:20:09 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 55991
IP address blocks: 103.235.101.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1775 (0x6ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CB04CC5A6B39B148DD710EF5C6E3F2D9380B455
Validity
Not Before: Aug 22 15:20:09 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=029525442978D9714C1F03C94B117E0A0F8F36B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:20:52:cf:5f:7a:9e:99:af:bb:61:dc:3b:
3e:1a:1c:4a:5b:b8:25:0f:bb:ad:31:73:08:cc:8b:
3d:45:84:6a:45:b8:28:67:e0:bb:b9:1f:50:d8:7b:
e3:e0:66:3f:62:27:94:e1:78:97:d8:9d:cf:28:13:
7e:d1:a2:fa:eb:18:6a:65:90:a5:fb:58:b7:7d:bd:
fd:c6:9e:4b:fc:39:fc:cf:1e:c9:7f:d9:8f:04:1f:
c9:60:45:00:25:0e:50:b4:c1:06:95:36:16:46:e9:
c8:be:b1:7a:ca:df:41:1b:de:56:c4:c1:68:b2:61:
61:a4:28:b1:af:98:45:25:12:fb:ba:73:a4:4f:61:
ac:a2:54:0d:14:1c:71:61:94:b5:03:4b:7e:d9:98:
af:a1:1e:1b:ca:d1:e5:2f:ff:78:b2:14:93:e4:45:
2e:bb:6f:81:bb:d8:d6:bb:0b:6f:ab:e3:7a:cf:80:
3a:85:7e:9a:53:f6:11:88:4b:2a:1c:a6:d0:3e:39:
57:12:f6:9b:92:f4:c9:80:62:ba:32:73:d0:1b:ff:
ac:0f:85:35:34:49:c0:07:2f:07:50:c0:82:a6:ef:
fa:ca:28:bb:b5:2f:e8:3a:ed:6f:d2:04:ef:cd:98:
f8:e9:ae:d3:5a:9a:12:24:e5:60:31:85:8f:17:13:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:95:25:44:29:78:D9:71:4C:1F:03:C9:4B:11:7E:0A:0F:8F:36:B1
X509v3 Authority Key Identifier:
keyid:0C:B0:4C:C5:A6:B3:9B:14:8D:D7:10:EF:5C:6E:3F:2D:93:80:B4:55
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/DLBMxaazmxSN1xDvXG4_LZOAtFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DLBMxaazmxSN1xDvXG4_LZOAtFU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/ApUlRCl42XFMHwPJSxF-Cg-PNrE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.235.101.0/24
Signature Algorithm: sha256WithRSAEncryption
17:9d:b0:98:4a:03:51:90:2b:fa:8e:d9:6d:4d:3a:8b:91:73:
57:91:b7:d3:49:7d:16:d6:46:53:1a:72:ee:2d:cc:f0:81:0e:
96:dc:35:59:78:2b:82:b6:8c:db:28:d7:8f:3b:02:ac:a2:de:
ff:29:b5:0c:3b:ff:0d:0f:e7:b4:85:c1:f3:d8:86:cf:09:0d:
bd:d0:8d:f5:bd:3b:87:df:7f:60:13:82:28:59:39:48:32:6c:
70:b0:e6:9e:6a:b7:7e:d8:fe:7f:a5:6a:0e:c8:f9:87:7d:59:
69:95:55:2c:25:a7:ac:c1:fb:80:7f:85:a7:a2:65:73:53:2a:
59:e0:fa:26:92:11:85:96:35:db:a0:30:fb:12:48:41:3c:1e:
5e:f7:74:5e:c0:a0:0f:64:8e:ca:f0:12:09:4a:ae:87:36:87:
7f:13:89:e0:15:10:e2:e8:cb:4c:ea:ff:7d:84:06:13:12:d6:
6b:43:5d:36:85:e3:5d:44:57:d6:e3:d2:25:72:54:38:e7:1d:
b5:94:d0:d3:c1:42:64:c7:5b:00:03:d0:72:6e:61:67:d1:a7:
dd:f5:b7:0c:b1:a5:a1:ba:2b:b3:15:89:a8:ae:5d:32:c3:c8:
db:6d:10:12:59:68:88:a1:9e:46:91:0f:bb:48:cc:40:93:88:
52:dc:94:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:09:28 2025 by rpki-client