Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/399/DO26kV11bZc29OtBTF6DwEgSFfo.roa
File: DO26kV11bZc29OtBTF6DwEgSFfo.roa (raw, json)
Hash identifier: eebJsYY/1T5gtOI9uUDpkP6O0+REZg4VZuwANoBsKo8=
Subject key identifier: 0C:ED:BA:91:5D:75:6D:97:36:F4:EB:41:4C:5E:83:C0:48:12:15:FA
Certificate issuer: /CN=51C4C1D52D2E3FE6BF3D9BF1B3D6924B49C5D4E5
Certificate serial: 4CD7
Authority key identifier: 51:C4:C1:D5:2D:2E:3F:E6:BF:3D:9B:F1:B3:D6:92:4B:49:C5:D4:E5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/DO26kV11bZc29OtBTF6DwEgSFfo.roa
Signing time: Sat 13 Sep 2025 03:09:17 +0000
ROA not before: Sat 13 Sep 2025 03:09:17 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 132203
IP address blocks: 203.205.136.0/24 maxlen: 24
203.205.137.0/24 maxlen: 24
203.205.155.0/24 maxlen: 24
203.205.159.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19671 (0x4cd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51C4C1D52D2E3FE6BF3D9BF1B3D6924B49C5D4E5
Validity
Not Before: Sep 13 03:09:17 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0CEDBA915D756D9736F4EB414C5E83C0481215FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:be:25:4b:3d:00:f9:3e:1d:35:e8:2b:3f:
55:a4:08:ba:67:28:c0:10:7a:24:81:12:2d:40:fa:
f6:37:c6:30:c3:9f:b3:9d:f6:07:7b:68:03:b0:dd:
24:69:86:d3:17:59:50:18:8e:d9:53:bf:14:59:e1:
ba:a4:8f:6a:1d:e5:84:d0:b2:a8:83:02:48:f9:2b:
a9:fb:3f:3d:b0:2b:10:d8:51:7e:40:c2:08:5e:2a:
2a:01:ae:ab:cb:96:9f:ee:6b:5e:28:c8:bc:97:73:
86:6e:e3:e1:ee:4e:a3:3e:26:a1:bd:9e:da:25:4d:
8b:53:02:62:7a:4c:1a:12:2c:64:cb:65:14:33:8e:
9c:83:ce:63:ac:ec:96:ca:e8:11:d0:34:2d:f0:76:
02:00:7f:c9:a9:5d:c2:c7:c5:5e:2c:16:24:82:ee:
53:b1:5a:b6:21:c9:e4:0b:36:6e:fc:15:44:29:98:
6b:fa:58:4d:3f:ca:a3:da:95:85:1d:ab:4f:61:36:
28:89:aa:ce:4f:b2:44:5d:ba:27:59:bf:d9:4a:6f:
07:22:b9:d6:9f:15:1b:5e:89:30:cf:48:e7:b7:c4:
83:40:ca:7b:9b:76:36:fb:94:db:b3:26:ae:a3:74:
17:33:0c:1f:1f:b8:47:dc:32:9b:5b:4d:51:a0:5f:
70:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:ED:BA:91:5D:75:6D:97:36:F4:EB:41:4C:5E:83:C0:48:12:15:FA
X509v3 Authority Key Identifier:
keyid:51:C4:C1:D5:2D:2E:3F:E6:BF:3D:9B:F1:B3:D6:92:4B:49:C5:D4:E5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/UcTB1S0uP-a_PZvxs9aSS0nF1OU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/DO26kV11bZc29OtBTF6DwEgSFfo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.205.136.0/23
203.205.155.0/24
203.205.159.0/24
Signature Algorithm: sha256WithRSAEncryption
59:68:e4:04:2a:5f:63:8e:8b:a3:b2:53:0a:9b:3c:76:ec:53:
1a:1b:f4:64:75:c6:b3:82:a3:3f:47:c2:61:30:10:9a:6a:9d:
41:01:df:04:99:d7:10:60:6c:f8:e1:f9:4f:37:b3:5e:79:49:
cc:ec:0a:1b:a0:e4:b5:a9:36:9e:72:db:ca:b8:5b:3b:54:0f:
01:0c:5b:8a:04:f9:53:60:74:c0:38:5b:e6:5c:a6:df:f3:7c:
bb:90:78:cc:c0:6f:8b:12:bf:1a:a5:1a:4b:3a:81:16:f0:24:
8d:c3:0b:bc:55:be:ed:c6:d8:a8:b2:8c:d2:fc:9b:d7:44:55:
92:ad:a4:e7:96:b5:c5:66:8a:61:10:c0:97:7c:e3:10:46:f5:
0e:7c:9f:4b:1e:a7:4b:e6:6a:25:d0:53:46:93:d1:a7:94:3c:
14:53:23:d6:50:32:93:de:54:b2:7d:84:6e:3a:f1:2c:ab:44:
2c:2d:3c:b6:a9:47:db:6c:a9:fc:0a:ee:6c:96:bd:45:03:8a:
d7:0d:e8:4a:02:d3:0b:7c:3f:5e:27:8b:67:be:3a:dd:07:8f:
ce:f5:cd:a0:7f:e7:80:db:53:a3:61:8f:04:d3:37:dd:e1:d5:
4b:2f:79:d8:bb:4a:ed:d7:9c:b9:2f:55:9e:e6:a7:2a:35:8e:
98:0f:2b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:28:42 2025 by rpki-client