Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3396/loLhskS-iZNnvxWA0PZirro_KmM.roa
File: loLhskS-iZNnvxWA0PZirro_KmM.roa (raw, json)
Hash identifier: Pwatgv8DYXkuuWa++kua2bH5oIdl0XsHAQ6/LW4WROc=
Subject key identifier: 96:82:E1:B2:44:BE:89:93:67:BF:15:80:D0:F6:62:AE:BA:3F:2A:63
Certificate issuer: /CN=67B6C796F89103590FF1CC9071DFE4C0DF38FD4D
Certificate serial: 6B
Authority key identifier: 67:B6:C7:96:F8:91:03:59:0F:F1:CC:90:71:DF:E4:C0:DF:38:FD:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z7bHlviRA1kP8cyQcd_kwN84_U0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/loLhskS-iZNnvxWA0PZirro_KmM.roa
Signing time: Fri 17 Oct 2025 13:33:53 +0000
ROA not before: Fri 17 Oct 2025 13:33:53 +0000
ROA not after: Sat 26 Sep 2026 09:42:00 +0000
asID: 151261
IP address blocks: 140.210.0.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67B6C796F89103590FF1CC9071DFE4C0DF38FD4D
Validity
Not Before: Oct 17 13:33:53 2025 GMT
Not After : Sep 26 09:42:00 2026 GMT
Subject: CN=9682E1B244BE899367BF1580D0F662AEBA3F2A63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:84:dc:ae:de:b7:fc:ec:b9:c2:99:62:91:
ff:4d:f5:17:47:10:a5:06:9f:8b:21:9f:c4:c3:61:
1a:f1:36:99:7e:6d:78:d6:65:64:c9:31:31:d2:db:
fa:c4:9f:f3:f4:cd:a4:44:15:2f:65:c9:af:d2:12:
0e:b8:d0:c0:c0:04:0f:76:54:c8:8e:ed:26:03:1c:
00:69:ce:de:7d:84:d0:d1:29:08:3b:39:4f:9c:84:
c8:b8:5d:37:da:7f:e2:fb:e8:a5:91:b3:25:e8:6f:
e9:33:54:6f:5a:53:61:66:66:a5:eb:84:8d:52:13:
80:e4:09:60:0b:8b:79:80:5d:9c:4b:ed:bc:ed:b9:
28:91:97:07:00:eb:1b:f8:c1:10:1b:d8:49:8b:48:
6a:c3:d8:58:59:37:e0:e9:04:a1:d0:07:73:45:6a:
ee:db:f5:89:ea:ac:63:f3:d6:a8:57:b3:50:53:ef:
c1:4c:5f:7c:0b:e7:ab:c6:0c:3f:d3:68:e2:3f:a4:
d9:55:f2:7f:da:0f:cf:47:b7:e7:85:7a:df:3b:01:
73:9f:fd:d1:c4:50:30:e9:5a:c9:10:ee:97:94:2d:
62:2e:52:ed:28:6a:df:a3:6f:f6:3f:9b:55:b8:e1:
64:7a:61:ef:77:49:eb:02:7b:f3:e4:9d:cb:cd:ab:
10:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:82:E1:B2:44:BE:89:93:67:BF:15:80:D0:F6:62:AE:BA:3F:2A:63
X509v3 Authority Key Identifier:
keyid:67:B6:C7:96:F8:91:03:59:0F:F1:CC:90:71:DF:E4:C0:DF:38:FD:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/Z7bHlviRA1kP8cyQcd_kwN84_U0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Z7bHlviRA1kP8cyQcd_kwN84_U0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/loLhskS-iZNnvxWA0PZirro_KmM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.210.0.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:04:a9:a0:d5:8e:89:89:5b:a0:a4:fc:2c:f9:6b:bf:ff:66:
30:0c:39:12:7a:e4:bc:1b:11:d7:a3:17:53:6e:07:9b:d1:c7:
07:83:fe:81:68:9d:75:36:2b:9f:6a:a6:6e:a4:ae:4d:d2:ef:
be:3e:c5:92:f4:b8:ac:40:a4:87:39:bc:de:07:10:b3:84:2a:
9e:ee:e8:08:d3:68:be:23:f0:e1:f4:ea:d1:a7:b6:33:fd:74:
68:5f:0b:20:30:20:54:12:2c:b0:6f:b1:5d:03:ad:75:de:10:
27:3f:d6:50:0a:4c:94:c3:b3:eb:57:2e:b6:8d:11:d0:6c:fd:
46:f9:c6:1d:ec:b2:09:ed:a6:73:46:bf:ad:a0:5b:0b:b9:8c:
69:a2:7e:f5:d4:aa:37:10:23:9a:e2:e5:6a:c2:fd:b4:6a:f6:
30:ea:3c:8b:b7:42:9c:e5:27:3a:e2:f8:40:f1:18:31:5b:c3:
0c:f5:ad:68:7f:63:03:71:78:5c:33:c4:9d:90:7c:48:06:e9:
5a:72:8e:f2:fb:21:20:b0:25:01:b3:ab:11:6d:28:73:00:ec:
cd:70:13:b8:53:61:2d:3f:33:c6:3d:34:e2:ff:b7:d0:ba:e1:
56:69:56:2a:6a:a0:9f:32:f7:56:2c:52:1b:b5:2c:5f:50:ed:
5e:e1:55:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:50:56 2025 by rpki-client