Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/q-9Ry7-1k_3djUpTgosZ8igSYDc.roa
File: q-9Ry7-1k_3djUpTgosZ8igSYDc.roa (raw, json)
Hash identifier: 6k801Xs8mnm7m8Hxv8JUH3LVMp3KISuyxt42Gy19gjk=
Subject key identifier: AB:EF:51:CB:BF:B5:93:FD:DD:8D:4A:53:82:8B:19:F2:28:12:60:37
Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Certificate serial: 1853
Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/q-9Ry7-1k_3djUpTgosZ8igSYDc.roa
Signing time: Tue 22 Jul 2025 08:42:13 +0000
ROA not before: Tue 22 Jul 2025 08:42:13 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24429
IP address blocks: 2408:4016::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6227 (0x1853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Validity
Not Before: Jul 22 08:42:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=ABEF51CBBFB593FDDD8D4A53828B19F228126037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:92:a2:c5:f2:41:7f:48:5e:c4:47:0b:06:
87:49:8e:bf:cb:ba:b3:26:31:54:8c:48:2e:d3:b4:
fa:0a:fb:77:46:18:ed:f3:5b:73:45:b6:de:5e:4c:
94:3b:07:d7:30:73:1d:2d:57:d9:3e:d5:24:1e:fa:
b0:96:da:cf:aa:3b:de:58:6e:5f:f4:72:57:34:cf:
3c:ca:18:79:ff:3e:38:d0:3a:95:f8:e3:63:cc:f5:
1b:48:e3:91:a4:a3:74:d0:6a:ff:ed:75:88:83:62:
65:52:ff:7e:15:66:21:9b:6e:f7:b9:a5:b9:41:7d:
ee:fe:fc:fe:41:e4:97:25:a2:6b:fc:aa:b2:4e:bb:
bc:14:aa:41:d8:7f:53:c2:e7:18:bf:0e:0f:b2:b1:
f7:b5:21:c8:c3:5b:78:47:47:45:b7:19:0b:3f:0d:
3b:0a:00:7d:0d:40:aa:1d:01:24:c6:eb:83:7d:e4:
e6:9b:4f:94:1a:13:ba:2e:88:27:09:81:60:55:0e:
dd:94:22:01:c9:0f:df:6a:51:3d:2a:93:ba:59:3f:
0d:90:14:73:d8:cd:b7:74:d7:62:03:61:55:a8:e0:
3f:80:ee:04:f5:a6:a8:2c:12:cc:91:f7:2a:cc:2a:
4f:2e:0d:0c:3b:98:06:02:5d:0b:4f:d7:39:e7:99:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EF:51:CB:BF:B5:93:FD:DD:8D:4A:53:82:8B:19:F2:28:12:60:37
X509v3 Authority Key Identifier:
keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/q-9Ry7-1k_3djUpTgosZ8igSYDc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2408:4016::/32
Signature Algorithm: sha256WithRSAEncryption
72:1a:c4:3c:73:43:8f:72:fb:fd:f8:cb:47:72:0c:8d:d7:df:
a5:58:ea:39:98:57:a2:bf:ef:29:30:16:a6:43:b5:6f:a3:cc:
d3:58:ed:91:40:47:60:a5:8b:af:2e:bd:39:0b:71:0e:d4:88:
4b:70:89:2d:7e:1f:53:57:e8:5b:0f:42:20:ff:aa:a1:07:b5:
4f:96:8a:07:31:70:da:9c:cc:2e:c6:b6:51:40:c4:b2:09:ca:
b4:fa:60:10:f4:9d:1a:47:49:4e:ce:46:df:55:6a:bf:cd:cb:
65:9f:e6:62:de:7f:01:96:37:2a:46:76:28:57:ad:9b:f4:2b:
db:36:3c:eb:81:0d:ce:3b:24:1d:71:89:6c:b1:f0:9a:e6:ff:
f2:13:80:04:6a:da:88:1e:96:93:c9:3f:02:fb:a4:e6:e0:b4:
e9:31:31:ac:24:ed:19:48:11:a3:f7:ea:b2:d5:3a:e9:81:f8:
3e:6e:5f:1d:0b:eb:37:62:0a:08:53:89:c2:e9:00:81:03:a5:
e1:96:f4:08:75:bc:d6:82:6a:e8:28:d9:0a:16:0a:de:a4:b7:
56:0f:35:a2:32:13:a8:57:9a:d8:eb:69:26:6f:76:1f:f8:07:
8e:57:04:8a:68:92:e6:f3:ae:f3:3b:c0:75:47:ed:4a:ed:37:
a4:49:f5:94
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICGFMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjNC
QTZBRUYzQjhGQTJFNUQ5QjVFNDM0MzhFMDAyMEQ0MjZBMUVDQTAeFw0yNTA3MjIw
ODQyMTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEFCRUY1MUNCQkZCNTkz
RkRERDhENEE1MzgyOEIxOUYyMjgxMjYwMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6KJKixfJBf0hexEcLBodJjr/LurMmMVSMSC7TtPoK+3dGGO3z
W3NFtt5eTJQ7B9cwcx0tV9k+1SQe+rCW2s+qO95Ybl/0clc0zzzKGHn/PjjQOpX4
42PM9RtI45Gko3TQav/tdYiDYmVS/34VZiGbbve5pblBfe7+/P5B5Jclomv8qrJO
u7wUqkHYf1PC5xi/Dg+ysfe1IcjDW3hHR0W3GQs/DTsKAH0NQKodASTG64N95Oab
T5QaE7ouiCcJgWBVDt2UIgHJD99qUT0qk7pZPw2QFHPYzbd012IDYVWo4D+A7gT1
pqgsEsyR9yrMKk8uDQw7mAYCXQtP1znnmUktAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUq+9Ry7+1k/3djUpTgosZ8igSYDcwHwYDVR0jBBgwFoAUs7pq7zuPouXZteQ0
OOACDUJqHsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3
L3M3cHE3enVQb3VYWnRlUTBPT0FDRFVKcUhzby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvczdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L3EtOVJ5Ny0xa18zZGpV
cFRnb3NaOGlnU1lEYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD
BQAkCEAWMA0GCSqGSIb3DQEBCwUAA4IBAQByGsQ8c0OPcvv9+MtHcgyN19+lWOo5
mFeiv+8pMBamQ7Vvo8zTWO2RQEdgpYuvLr05C3EO1IhLcIktfh9TV+hbD0Ig/6qh
B7VPlooHMXDanMwuxrZRQMSyCcq0+mAQ9J0aR0lOzkbfVWq/zctln+Zi3n8Bljcq
RnYoV62b9CvbNjzrgQ3OOyQdcYlssfCa5v/yE4AEatqIHpaTyT8C+6Tm4LTpMTGs
JO0ZSBGj9+qy1Trpgfg+bl8dC+s3YgoIU4nC6QCBA6XhlvQIdbzWgmroKNkKFgre
pLdWDzWiMhOoV5rY62kmb3Yf+AeOVwSKaJLm867zO8B1R+1K7TekSfWU
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:19:05 2025 by rpki-client