Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/9XlWwC-yU30NU9T8BigEMtpaSNk.roa
File: 9XlWwC-yU30NU9T8BigEMtpaSNk.roa (raw, json)
Hash identifier: +nlM0bJ+1/Xiq3DQWhsWCFeTNRVV2lByLpKSHTdar4o=
Subject key identifier: F5:79:56:C0:2F:B2:53:7D:0D:53:D4:FC:06:28:04:32:DA:5A:48:D9
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 179E
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/9XlWwC-yU30NU9T8BigEMtpaSNk.roa
Signing time: Tue 29 Apr 2025 08:21:34 +0000
ROA not before: Tue 29 Apr 2025 08:21:34 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 2914
IP address blocks: 180.223.64.0/18 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6046 (0x179e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Apr 29 08:21:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F57956C02FB2537D0D53D4FC06280432DA5A48D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:72:bb:2e:37:6c:b8:56:ab:fb:86:6e:10:
3f:3c:ba:b3:76:00:97:d4:84:5c:e5:05:f7:f4:61:
12:ec:1c:34:25:e0:a7:e1:99:9b:1b:0e:5d:bb:c7:
74:49:be:95:a5:6d:1f:9d:4b:54:7f:bb:7a:cf:b5:
45:b4:25:b2:93:c3:d8:37:5b:6f:5c:33:ea:df:a8:
90:ed:22:78:73:db:4b:1a:be:25:47:a2:aa:39:6d:
f4:2e:8b:e5:d4:bd:62:28:51:90:38:1c:bb:39:82:
81:80:12:17:da:64:fd:5c:38:a2:cd:b4:ef:1c:70:
c4:1e:5e:3d:32:41:18:27:32:18:01:cb:42:fe:da:
e7:f7:14:d5:ec:eb:2e:82:59:42:c9:93:43:db:40:
37:a1:46:ae:a0:f1:9b:65:13:4b:f5:35:84:6e:a3:
b4:cc:71:2a:29:02:73:9b:9e:72:ee:7e:0d:70:82:
f3:3e:e9:5b:c0:4d:73:83:d5:c4:e3:a0:1b:a0:c2:
f0:26:1a:12:1f:27:fd:ed:e1:d8:c8:b1:75:f1:9a:
0c:b9:17:ca:4a:2d:8d:e3:9f:2e:6e:f7:62:26:41:
25:67:7c:e2:d1:63:d9:9f:39:fb:8d:59:9d:bc:e8:
e6:2b:76:05:7a:7f:bc:6e:48:76:70:0d:c8:59:70:
39:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:79:56:C0:2F:B2:53:7D:0D:53:D4:FC:06:28:04:32:DA:5A:48:D9
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/9XlWwC-yU30NU9T8BigEMtpaSNk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.64.0/18
Signature Algorithm: sha256WithRSAEncryption
95:1f:88:3f:76:ec:6c:59:08:df:1f:ca:80:d1:3d:a8:9f:2d:
e2:33:78:8e:d0:55:bd:a3:a3:85:09:7b:7c:76:8f:e7:bd:e8:
8a:3b:49:68:10:d0:7e:06:e2:3a:66:c0:ad:2b:34:93:e8:17:
46:54:1e:5c:b5:8e:07:aa:3a:ba:4d:0f:27:23:b6:6e:31:dd:
2b:26:da:f0:45:bd:9c:96:91:1c:37:d6:96:2d:92:1d:fc:54:
60:bf:29:ad:5d:ee:15:4c:c4:34:a3:e0:39:97:b0:1b:ac:e1:
f9:88:d4:60:38:d4:e8:cd:6b:dc:bb:96:b9:5d:04:15:aa:3d:
18:ca:79:11:12:66:9a:55:e1:92:bb:e5:2e:9b:a4:9e:09:cf:
fe:ea:45:c8:63:05:49:c7:22:72:70:8c:f5:08:64:f7:16:1c:
3b:c3:75:b5:bf:94:76:3b:fd:0f:5c:f9:ba:37:96:c0:af:ea:
8f:79:12:0e:0e:31:fc:38:c5:da:7e:63:7a:ec:8d:d4:47:d1:
b4:15:ef:ce:df:0f:0d:08:65:d2:1e:93:fa:af:40:1e:c8:6c:
40:e7:fa:d7:d6:a0:2f:e3:5e:f0:98:53:22:42:a3:c1:63:e9:
ec:94:c5:92:35:f1:ec:02:be:ee:39:5b:c4:f3:e4:e9:7c:f2:
b6:cd:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:44:27 2025 by rpki-client