Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/gkfnZQ6mHUQuO6gR3DcmAWtxhyo.roa
File: gkfnZQ6mHUQuO6gR3DcmAWtxhyo.roa (raw, json)
Hash identifier: HKqzm9HwxR+4AIZo34ShgzZzrkaDFDc42C7mN9NoMx0=
Subject key identifier: 82:47:E7:65:0E:A6:1D:44:2E:3B:A8:11:DC:37:26:01:6B:71:87:2A
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1861
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/gkfnZQ6mHUQuO6gR3DcmAWtxhyo.roa
Signing time: Fri 06 Jun 2025 13:20:46 +0000
ROA not before: Fri 06 Jun 2025 13:20:46 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 398704
IP address blocks: 180.223.127.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6241 (0x1861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jun 6 13:20:46 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8247E7650EA61D442E3BA811DC3726016B71872A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:a6:d9:03:5e:95:c8:9b:b5:fc:29:14:5f:
a6:a5:07:7e:20:d1:90:12:08:3c:17:49:ce:ae:ee:
99:09:7f:4c:cd:58:d4:7f:ba:f6:96:45:28:20:e9:
55:fc:ec:96:e3:d4:b1:b2:bc:e6:75:68:38:e9:6b:
a9:fe:7d:1e:51:73:f9:81:10:b8:84:45:f8:5d:e9:
c3:1c:c3:ae:b2:41:3a:14:8c:64:06:41:95:b1:66:
6f:0e:2e:02:3c:ba:91:d3:05:7a:dd:d9:e9:1c:6c:
a9:b3:57:e2:a5:ba:83:83:e5:ad:03:ec:b2:04:ad:
25:66:1f:1d:d3:18:3a:c6:d5:d0:cf:11:e9:59:a8:
e8:55:2d:b5:77:3f:50:e0:a4:df:25:31:01:d4:10:
57:00:8b:1e:73:a0:fd:54:2d:43:bc:97:f5:d4:17:
d5:d7:2d:02:20:7d:0f:dd:9c:02:e9:81:ba:c9:b1:
b9:0c:11:42:65:82:2a:f9:b7:57:13:e3:fd:56:68:
d4:3f:90:2a:b4:2e:a2:ce:a4:a1:93:29:35:f1:a9:
d9:04:b4:0c:de:cd:12:ba:a9:b1:47:fb:5a:95:e4:
e0:ae:32:c6:b6:b7:c9:b3:30:96:58:c7:06:77:9b:
a3:7f:68:2d:da:0f:e9:9b:b1:33:6f:78:33:fc:fa:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:47:E7:65:0E:A6:1D:44:2E:3B:A8:11:DC:37:26:01:6B:71:87:2A
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/gkfnZQ6mHUQuO6gR3DcmAWtxhyo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.127.0/24
Signature Algorithm: sha256WithRSAEncryption
78:7f:3b:69:40:32:10:1d:cb:ed:8c:a8:2a:27:99:b2:7b:4b:
3e:b6:f4:2b:80:e8:29:c4:9d:8d:23:b1:3f:e8:54:f3:7d:00:
03:3a:b8:6c:1c:41:0d:52:c8:e6:62:f6:75:0c:b9:fe:a6:48:
99:45:06:0e:fa:f2:5c:f5:e1:28:ae:a9:a9:97:31:a1:5c:2e:
49:46:d5:61:55:7f:53:af:93:08:78:4b:a6:a6:15:9e:40:02:
ab:be:55:9c:fe:73:79:ed:48:d9:79:39:64:89:a7:5c:9c:cc:
39:9f:04:bd:bd:2e:34:e3:33:8d:b3:4f:64:20:76:51:0e:86:
95:16:61:9c:87:46:d1:7a:f3:ce:e0:73:31:c2:a6:cc:e7:96:
00:09:cf:b5:ec:c2:23:c9:13:47:a5:03:9d:b7:5e:60:1a:ae:
33:e3:0b:39:a9:20:8f:37:83:f3:af:6d:21:a7:a5:19:22:62:
21:68:f0:33:5f:c8:2a:fa:9e:3e:fd:e5:79:69:6b:ed:36:7a:
f0:f6:8c:8a:68:ff:e6:8b:af:7f:31:fc:a3:5e:65:89:80:65:
9b:49:90:fe:69:27:ff:73:f4:52:a0:ce:f0:4b:fa:fb:bf:33:
5a:30:c7:f8:23:2b:d7:a2:94:a6:d5:04:03:e1:69:01:d3:49:
9b:6f:e2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:59:40 2025 by rpki-client