Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/-8IGttLfojDcSTWRcb4iUGPAkbI.roa
File: -8IGttLfojDcSTWRcb4iUGPAkbI.roa (raw, json)
Hash identifier: mwaUDUFpUsPg0HlxKJGxBjMJe1C9LI2EmugGukbbQGg=
Subject key identifier: FB:C2:06:B6:D2:DF:A2:30:DC:49:35:91:71:BE:22:50:63:C0:91:B2
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 07FA
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/-8IGttLfojDcSTWRcb4iUGPAkbI.roa
Signing time: Fri 23 May 2025 07:07:19 +0000
ROA not before: Fri 23 May 2025 07:07:19 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 56040
IP address blocks: 223.160.20.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2042 (0x7fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: May 23 07:07:19 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=FBC206B6D2DFA230DC49359171BE225063C091B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:36:d9:2f:91:55:98:f8:e1:2a:d1:64:41:40:
d4:8c:52:45:dd:bc:59:e8:2b:be:5a:5b:6f:ff:16:
e1:50:6c:6f:83:ce:29:e2:f4:61:6b:23:6e:1e:ce:
21:b3:c2:a0:3d:88:c1:1f:98:2d:57:9e:24:bd:ec:
b5:cd:de:7f:79:b5:b5:07:89:69:4c:bd:48:b2:c8:
90:eb:d2:7f:a9:23:0b:fc:d1:a3:40:fc:18:c6:ba:
35:d9:fd:40:6f:60:dd:d6:f7:64:b4:a2:04:7d:ca:
4b:2f:27:43:7a:67:00:d5:84:8f:72:41:4c:58:37:
2f:e2:f3:3b:77:f0:54:d1:d2:0a:20:26:f8:2c:18:
82:21:cb:92:fc:d6:7f:33:7f:4c:47:0a:b8:6b:9c:
b5:ca:11:97:d1:90:8f:20:1d:c3:c4:74:5a:78:7a:
40:35:64:34:f1:22:5e:53:9e:9f:44:0c:18:7e:7a:
90:0f:6f:20:a8:9e:a4:4e:26:0c:96:5e:9f:e5:ee:
64:5a:63:f3:67:69:e2:a9:6e:c4:31:fe:fb:9d:59:
f8:5c:e7:c8:93:e0:87:2d:35:aa:a1:1e:02:99:f8:
85:4f:86:7c:3c:99:d4:9d:a8:61:72:d6:ac:a1:86:
06:a8:f1:43:d9:bb:75:eb:86:e2:0b:01:5c:fc:3a:
82:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C2:06:B6:D2:DF:A2:30:DC:49:35:91:71:BE:22:50:63:C0:91:B2
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/-8IGttLfojDcSTWRcb4iUGPAkbI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.160.20.0/22
Signature Algorithm: sha256WithRSAEncryption
45:bb:0b:24:e8:4d:1d:9b:4e:e6:f6:5c:41:4e:05:b0:58:8b:
bc:45:fa:54:b8:99:b7:bd:3d:93:78:15:14:4c:c8:66:12:e9:
c3:fe:7a:1e:35:d7:8c:f4:7d:11:ee:8d:35:c9:1a:51:c6:86:
25:28:47:ae:f8:e3:d8:67:91:44:a0:34:1d:38:01:28:df:e6:
ca:1f:7a:27:bb:35:86:d4:a8:16:b6:5f:cd:f8:c7:2f:69:ce:
13:19:bf:81:f5:d1:e1:b9:34:99:2a:84:dd:a8:04:04:0f:7f:
c5:9d:62:0f:84:d9:43:a0:0c:09:94:90:11:12:e4:0a:8a:b9:
ee:8e:22:71:b2:c4:35:f7:d8:dd:b9:e0:3d:d3:4c:9f:e5:fd:
07:f5:3b:25:2c:98:88:ad:dc:f4:ae:7d:e2:2c:7c:bd:c1:ad:
a4:a4:a5:91:52:93:1e:a0:81:d1:ba:f2:2c:4f:24:f7:f7:31:
8e:83:4d:17:98:a3:7e:bb:95:a3:b3:c4:f7:26:82:aa:15:8e:
48:a8:86:9b:3c:be:da:2a:6c:76:ba:10:92:21:ab:90:f8:67:
e3:56:ed:21:ba:78:e4:3b:69:2d:dd:13:51:19:05:6e:e1:be:
68:66:3f:4c:2a:3b:b1:83:5c:91:61:ef:25:4f:21:37:d2:ad:
4a:c3:d7:1e
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICB/owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw
MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw
NzA3MTlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEZCQzIwNkI2RDJERkEy
MzBEQzQ5MzU5MTcxQkUyMjUwNjNDMDkxQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlNtkvkVWY+OEq0WRBQNSMUkXdvFnoK75aW2//FuFQbG+Dzini
9GFrI24eziGzwqA9iMEfmC1XniS97LXN3n95tbUHiWlMvUiyyJDr0n+pIwv80aNA
/BjGujXZ/UBvYN3W92S0ogR9yksvJ0N6ZwDVhI9yQUxYNy/i8zt38FTR0gogJvgs
GIIhy5L81n8zf0xHCrhrnLXKEZfRkI8gHcPEdFp4ekA1ZDTxIl5Tnp9EDBh+epAP
byConqROJgyWXp/l7mRaY/NnaeKpbsQx/vudWfhc58iT4IctNaqhHgKZ+IVPhnw8
mdSdqGFy1qyhhgao8UPZu3XrhuILAVz8OoLfAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQU+8IGttLfojDcSTWRcb4iUGPAkbIwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U
IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv
TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy8tOElHdHRMZm9qRGNTVFdS
Y2I0aVVHUEFrYkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
36AUMA0GCSqGSIb3DQEBCwUAA4IBAQBFuwsk6E0dm07m9lxBTgWwWIu8RfpUuJm3
vT2TeBUUTMhmEunD/noeNdeM9H0R7o01yRpRxoYlKEeu+OPYZ5FEoDQdOAEo3+bK
H3onuzWG1KgWtl/N+Mcvac4TGb+B9dHhuTSZKoTdqAQED3/FnWIPhNlDoAwJlJAR
EuQKirnujiJxssQ199jdueA900yf5f0H9TslLJiIrdz0rn3iLHy9wa2kpKWRUpMe
oIHRuvIsTyT39zGOg00XmKN+u5Wjs8T3JoKqFY5IqIabPL7aKmx2uhCSIauQ+Gfj
Vu0hunjkO2kt3RNRGQVu4b5oZj9MKjuxg1yRYe8lTyE30q1Kw9ce
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:11:25 2025 by rpki-client