Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/JXIjNxDoLCtazRHalFUI2M34jsk.roa
File: JXIjNxDoLCtazRHalFUI2M34jsk.roa (raw, json)
Hash identifier: LPSlyE3/EmZS72zVIdcaOWuoLHXefq508BqBFzd8FxI=
Subject key identifier: 25:72:23:37:10:E8:2C:2B:5A:CD:11:DA:94:55:08:D8:CD:F8:8E:C9
Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
Certificate serial: 0581
Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/JXIjNxDoLCtazRHalFUI2M34jsk.roa
Signing time: Fri 01 Aug 2025 06:34:47 +0000
ROA not before: Fri 01 Aug 2025 06:34:47 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 134768
IP address blocks: 103.236.74.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1409 (0x581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
Validity
Not Before: Aug 1 06:34:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2572233710E82C2B5ACD11DA945508D8CDF88EC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d7:91:ba:0a:e8:6d:88:f1:ad:60:28:0b:7d:
8c:51:d8:83:16:00:18:63:e6:67:46:58:44:e6:2a:
3e:dd:1f:31:fc:10:ea:f9:a7:e5:ba:6f:cb:a2:d4:
c0:8a:f0:e9:d3:54:97:d6:24:ff:fc:35:e9:7d:22:
89:37:45:30:f1:01:93:0d:f6:be:6c:a6:91:8a:11:
ca:dd:1f:9e:41:b9:29:71:73:58:d6:a3:eb:5d:74:
8d:f7:35:56:f9:53:a5:bf:d3:88:67:05:80:5d:e0:
75:70:a8:fa:b5:53:ee:60:f9:09:6e:25:3c:78:10:
0b:87:d5:e6:cd:b2:46:c7:6b:c1:9a:71:1f:34:fd:
e0:e6:7e:4d:df:7e:bd:4f:4e:95:5b:50:77:03:40:
77:6a:b6:2d:36:ee:46:b3:fa:d1:f3:33:c2:5b:11:
a7:5b:ad:14:b2:ac:5b:4f:73:71:e8:de:58:3d:85:
56:17:e0:aa:5f:f5:89:ce:89:8b:0d:7c:2c:c5:02:
ad:89:79:e4:8f:3e:a3:13:9e:a5:69:2e:cf:8f:35:
74:ae:bc:8f:07:c7:84:5a:e3:8f:c5:41:85:e2:bc:
75:35:db:43:4b:a8:79:ba:84:e0:7b:c1:68:7e:75:
54:ad:23:6d:02:64:f4:dd:79:2f:b0:3e:60:e9:88:
65:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:72:23:37:10:E8:2C:2B:5A:CD:11:DA:94:55:08:D8:CD:F8:8E:C9
X509v3 Authority Key Identifier:
keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/JXIjNxDoLCtazRHalFUI2M34jsk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.236.74.0/24
Signature Algorithm: sha256WithRSAEncryption
98:3b:51:a0:25:b8:85:ff:f5:70:e9:95:5d:76:65:34:0f:9d:
f0:37:80:1f:39:2b:0e:79:00:31:8a:42:d9:8e:50:33:44:3c:
f7:fa:fa:c0:26:e2:f8:06:7f:45:49:f3:1c:c8:51:73:fb:50:
2c:8c:f5:9d:b1:43:41:a3:22:43:8d:c6:aa:1f:ed:a0:19:0d:
83:6c:19:79:87:77:d1:50:4f:ea:45:ab:2b:6c:f9:ec:a6:fa:
7e:b2:97:47:8d:b0:0a:a4:f8:cb:b6:9e:71:0a:31:26:a8:5f:
55:d5:25:09:b2:79:13:7a:ba:5b:8c:73:6f:95:81:4e:e3:09:
68:6a:00:25:16:17:06:db:51:76:c6:7f:a9:38:07:91:6a:69:
5a:8d:ea:87:ff:a2:54:ac:d9:7e:4e:6d:d4:36:d5:3a:c0:16:
29:28:3d:f7:1d:00:3f:3a:e9:a2:c1:33:74:de:c1:44:14:79:
48:64:c1:fa:53:38:f3:6b:8d:06:92:1a:64:77:11:d6:46:cc:
fa:ca:1c:76:49:b4:8d:60:3e:f6:5d:3b:54:b2:19:79:97:77:
b1:3e:bb:73:88:6e:a5:21:c3:a5:6f:7d:75:5d:e9:35:7d:8b:
65:20:45:c5:57:f3:33:4a:05:d1:61:0f:e4:c1:80:34:17:54:
74:f7:0f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:28:17 2025 by rpki-client