Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3396/Kf3LpQBxSlsl-_6urq4NGFeLwNU.roa
File: Kf3LpQBxSlsl-_6urq4NGFeLwNU.roa (raw, json)
Hash identifier: vgo47MVbe1jdt+qM+TAEnzsTDcFBW80hb3tLyIo70XI=
Subject key identifier: 29:FD:CB:A5:00:71:4A:5B:25:FB:FE:AE:AE:AE:0D:18:57:8B:C0:D5
Certificate issuer: /CN=B6C10D728A382431BAC1F14930D0FC1E075953A6
Certificate serial: 6C
Authority key identifier: B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/Kf3LpQBxSlsl-_6urq4NGFeLwNU.roa
Signing time: Fri 17 Oct 2025 13:33:53 +0000
ROA not before: Fri 17 Oct 2025 13:33:53 +0000
ROA not after: Sat 26 Sep 2026 09:42:00 +0000
asID: 151261
IP address blocks: 202.58.122.0/23 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6C10D728A382431BAC1F14930D0FC1E075953A6
Validity
Not Before: Oct 17 13:33:53 2025 GMT
Not After : Sep 26 09:42:00 2026 GMT
Subject: CN=29FDCBA500714A5B25FBFEAEAEAE0D18578BC0D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:23:eb:a3:b6:a5:52:83:ab:b2:51:cd:cf:
e4:85:bc:b4:6a:76:b7:f8:1b:ea:3d:54:b3:ba:32:
0a:fd:b0:f3:51:a3:99:08:a9:68:53:b8:fe:44:13:
46:09:13:a0:60:38:ca:6c:6b:0b:cf:5c:37:f9:bb:
e9:14:cc:c1:ad:c5:cc:d9:e5:38:f9:1f:c1:8c:37:
ce:59:c9:dd:ee:66:89:8f:d3:7c:5b:3b:a9:d7:3a:
c0:9e:25:01:23:e5:96:95:09:20:50:cd:4d:75:cd:
d6:e0:c1:b4:b5:b9:56:ae:9d:d6:d9:59:fb:a1:7c:
cf:92:60:5f:93:94:1d:b9:c2:39:6b:59:7f:99:9a:
1c:c4:63:60:76:ed:71:f4:65:4e:0e:34:55:cd:7f:
b1:1d:33:70:9b:30:f9:3c:0c:64:74:2d:c6:3f:06:
0b:10:e2:ac:8e:e5:10:2d:e0:54:72:82:5c:06:22:
cf:d3:f2:79:8a:f4:ef:f0:ae:ef:2e:22:46:b3:9d:
a7:16:1f:85:b6:4b:5f:bb:27:1e:cf:6a:5e:e0:f1:
94:dc:af:8f:60:e2:31:65:a5:10:a5:46:bd:17:90:
89:62:e0:65:89:ad:ec:0b:a7:e9:50:c5:4e:14:cd:
5b:ba:a7:e7:49:a6:32:ea:8f:dd:d2:9c:24:ab:bf:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FD:CB:A5:00:71:4A:5B:25:FB:FE:AE:AE:AE:0D:18:57:8B:C0:D5
X509v3 Authority Key Identifier:
keyid:B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/Kf3LpQBxSlsl-_6urq4NGFeLwNU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.58.122.0/23
Signature Algorithm: sha256WithRSAEncryption
e7:50:0d:b0:f8:d9:8d:07:93:d9:fe:54:07:68:3d:f4:1a:85:
6f:cd:05:90:09:f7:0e:fc:e5:cd:18:8d:ea:cf:2c:91:5c:0e:
eb:bb:24:1b:bc:0a:d4:9c:cf:b8:85:fb:60:9e:bb:1c:3d:d9:
34:2a:fc:a3:15:d7:39:e3:2f:9a:db:1f:5b:38:fd:fd:67:e9:
72:70:de:94:a7:4b:22:f2:6f:57:5d:ea:b0:29:da:b8:e0:bd:
05:89:eb:fd:cb:10:6e:bf:97:7e:0f:7b:ad:c1:fb:4c:38:74:
3c:c7:de:a8:ce:b7:fd:44:36:50:6f:b4:79:f5:da:16:e4:23:
ec:de:cd:c1:e7:58:de:b2:7c:59:d8:c8:35:7b:9e:a5:b9:43:
c3:eb:0c:62:9d:89:a4:36:cc:2e:f3:d8:94:d8:6a:05:4e:32:
68:f3:56:8c:ac:20:96:2f:38:6b:c3:af:8c:38:e3:e3:54:75:
28:0a:4e:72:39:10:dd:01:eb:e7:ad:64:5c:8c:38:fe:54:fd:
65:c0:5c:a7:54:ab:0c:08:3a:56:58:96:00:6c:34:d2:8b:ca:
17:c6:86:d3:33:66:0e:9f:98:d2:78:4b:f3:18:e8:5e:8f:cd:
1e:5e:c0:97:44:71:6f:d4:37:ae:b9:09:e4:e9:d8:27:8b:74:
f9:a7:cd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:50:56 2025 by rpki-client