Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/6WUQ5B5vun0CoK_vLAyUdcYhk0Y.roa
File: 6WUQ5B5vun0CoK_vLAyUdcYhk0Y.roa (raw, json)
Hash identifier: 9SnwaZ1aA/kOcSBtXH6cQmmrvzUJK8pB6FbTGh869ws=
Subject key identifier: E9:65:10:E4:1E:6F:BA:7D:02:A0:AF:EF:2C:0C:94:75:C6:21:93:46
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 1446
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/6WUQ5B5vun0CoK_vLAyUdcYhk0Y.roa
Signing time: Tue 27 May 2025 00:18:50 +0000
ROA not before: Tue 27 May 2025 00:18:50 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 211392
IP address blocks: 45.250.152.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5190 (0x1446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: May 27 00:18:50 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E96510E41E6FBA7D02A0AFEF2C0C9475C6219346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:4f:da:04:a3:d6:6b:bb:3f:4b:2c:18:08:
6f:cf:2c:03:73:c5:34:a1:58:87:4f:da:87:9b:1c:
f6:fc:f3:b5:c5:eb:04:07:69:7a:aa:44:c3:a9:54:
61:55:e0:e1:87:24:6f:7b:56:e4:36:7b:bc:b0:51:
33:25:62:10:e1:56:24:0b:b7:5c:5d:b7:1a:52:1c:
42:15:78:f3:56:c7:6b:cf:0c:24:db:d8:07:43:ae:
46:6b:9e:72:a1:f2:96:c0:85:4a:33:e8:2e:a1:ce:
c5:14:bc:cc:7e:f5:83:1d:35:3a:c7:46:8a:47:a1:
ba:63:38:eb:db:a1:30:e3:1a:aa:09:66:8a:d8:48:
ec:dd:16:da:60:2b:20:e8:c7:f6:6a:65:11:40:06:
44:97:90:25:1d:9d:dd:b2:4a:72:6c:36:5e:69:06:
01:c7:8d:52:ec:e6:9e:5e:70:e2:58:f8:e6:ff:dc:
db:0e:e8:03:d7:05:ec:de:cd:8e:43:4d:f9:4e:b2:
1f:65:bc:60:de:4a:66:e2:dd:b7:18:07:1e:57:b4:
f0:ce:07:4c:a9:74:b1:cf:db:8c:ec:8c:1b:6e:81:
cf:96:98:b9:d6:1b:45:0f:60:52:47:10:ee:96:bd:
a1:8f:fd:f2:1f:d6:20:e1:1c:9a:9f:24:2b:02:d9:
41:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:65:10:E4:1E:6F:BA:7D:02:A0:AF:EF:2C:0C:94:75:C6:21:93:46
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/6WUQ5B5vun0CoK_vLAyUdcYhk0Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.250.152.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ff:6b:d8:45:f8:a6:95:61:3a:b0:b8:5a:5a:d9:50:1f:9f:
41:5f:a4:b7:fc:f7:ed:bf:f5:f8:8f:05:30:2f:b0:cc:24:5d:
84:2e:bb:c0:48:dc:e6:d0:bb:49:01:b3:18:f3:5a:12:77:dd:
2a:02:8a:50:9d:a6:49:9e:bb:69:b3:aa:f8:80:90:54:d7:de:
fd:ad:1c:82:be:bd:37:8d:d8:94:4b:a6:fd:77:fe:e0:44:fa:
34:e2:72:1c:35:a6:89:8a:66:1f:f8:92:9f:aa:68:12:f6:42:
8c:3a:05:85:49:06:2d:36:29:b2:57:c4:ad:ef:03:5b:81:2f:
9c:7a:ae:0c:63:7c:0a:27:26:a8:74:0e:73:f0:3b:be:56:95:
d0:8a:ea:58:4f:a6:3b:a4:7d:21:2d:7f:10:a7:36:de:08:74:
fd:90:e8:10:fe:1f:6f:13:25:dc:d9:8c:b0:fb:70:4e:e3:83:
4b:9c:6e:ec:08:c9:07:56:f1:99:5c:f7:33:8d:28:22:45:8e:
3e:82:0a:cb:67:a8:7d:e0:f3:25:5e:ca:31:34:a3:39:d8:cd:
c0:96:9c:b0:e0:ae:dd:e1:cc:9d:ad:8b:37:d4:18:4f:1d:44:
8e:17:09:8e:6b:81:f3:e6:31:e2:f1:5b:fa:a9:7f:e1:f9:a3:
f4:be:4b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:29:26 2025 by rpki-client