Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/cAxTyqXPpy7ABQED70QsEHaL0Bk.roa
File: cAxTyqXPpy7ABQED70QsEHaL0Bk.roa (raw, json)
Hash identifier: k7FJO2AsHsXT7Z5eiZ/YuRqw98eIrxl8BzyKb7ijL7A=
Subject key identifier: 70:0C:53:CA:A5:CF:A7:2E:C0:05:01:03:EF:44:2C:10:76:8B:D0:19
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 19ED
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/cAxTyqXPpy7ABQED70QsEHaL0Bk.roa
Signing time: Thu 21 Aug 2025 01:35:15 +0000
ROA not before: Thu 21 Aug 2025 01:35:15 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4134
IP address blocks: 180.223.128.0/18 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6637 (0x19ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Aug 21 01:35:15 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=700C53CAA5CFA72EC0050103EF442C10768BD019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:40:f9:cf:cf:13:90:64:76:9a:84:73:c3:
d1:6a:e6:41:00:bd:a7:9d:05:0e:a3:f2:17:40:09:
ff:f3:0e:e4:34:81:be:62:ce:0a:1b:87:f7:55:bf:
b7:9f:0e:63:12:00:24:c6:ae:41:bc:0f:a4:20:3c:
36:9b:b7:58:d5:84:bb:c5:0a:16:c1:60:89:4b:b5:
22:75:03:79:2d:c8:48:18:ed:33:1c:eb:b6:9e:7a:
98:43:92:f2:0c:03:ee:97:dc:48:3e:14:77:ea:ad:
cb:ce:32:05:27:1b:8b:07:a1:56:fc:bc:9f:00:3e:
7b:68:1b:b9:7b:03:4e:08:d9:5a:82:97:67:a1:2c:
6a:60:91:53:45:d6:e3:31:44:68:94:09:b9:76:07:
fc:cb:38:f5:dd:94:86:fb:17:f1:53:e5:55:fe:f7:
91:70:3e:b3:ed:ed:f2:cc:a2:55:30:7c:13:6f:22:
d5:75:43:c5:9e:0d:cb:35:04:73:cf:08:e8:51:c0:
4f:cd:67:65:c8:4d:91:b4:2d:2c:0c:9e:f6:56:e8:
d5:f4:e8:68:7d:47:60:91:9a:79:1d:01:f6:aa:1d:
2c:da:08:82:03:26:30:2a:9f:6d:ae:2d:84:52:da:
1a:f9:06:2a:41:3c:09:68:16:94:98:e2:9b:a0:ca:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0C:53:CA:A5:CF:A7:2E:C0:05:01:03:EF:44:2C:10:76:8B:D0:19
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/cAxTyqXPpy7ABQED70QsEHaL0Bk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.128.0/18
Signature Algorithm: sha256WithRSAEncryption
82:79:95:59:b9:fa:c7:7c:ea:9f:b4:97:c2:2b:5c:73:52:85:
89:b4:23:f6:34:7b:29:46:56:8b:95:fb:4a:ee:c9:24:da:a8:
8d:68:76:3a:7c:4c:9a:b5:b8:60:03:94:57:01:18:d5:6e:48:
0a:eb:d5:58:ef:3b:05:1e:3f:b1:55:b9:0a:81:4a:7f:b5:3b:
73:ae:7f:4b:09:58:21:05:0d:8b:a9:d6:df:81:5c:04:e4:45:
40:a2:f6:24:b9:6c:a3:f2:17:50:78:e2:44:b1:7a:c3:a9:12:
ad:45:99:9c:8d:1f:f4:de:2f:06:b2:cf:38:cb:1c:91:05:74:
41:c6:ac:d7:9b:4a:17:d1:5e:b0:14:aa:7b:4b:3e:05:9f:c4:
f6:4c:aa:c3:29:30:9e:08:6b:ae:a1:2f:f0:10:ab:ee:c3:ac:
94:79:d1:7b:78:53:75:98:3b:a2:17:1b:4c:32:29:8f:63:52:
6d:91:3f:70:9d:80:71:dc:b3:e4:a7:31:13:76:02:2c:b6:63:
a6:47:a3:3c:e3:51:6b:56:e5:63:b7:c3:e7:e3:af:e5:e5:6f:
6d:89:45:1d:96:5d:fb:ca:a7:90:ce:b4:56:10:95:02:24:dc:
e0:9c:81:8f:3b:5d:46:17:01:3a:32:4c:7d:72:50:5b:32:ad:
6e:a3:28:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:48:12 2025 by rpki-client