Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/6ZUrfKdHyIyjAytkp3ArgmxCXkw.roa
File: 6ZUrfKdHyIyjAytkp3ArgmxCXkw.roa (raw, json)
Hash identifier: qDlgEKXGxO3Pi9CpL3SeUU5CoiVhJ+D1iDznOwVf3wQ=
Subject key identifier: E9:95:2B:7C:A7:47:C8:8C:A3:03:2B:64:A7:70:2B:82:6C:42:5E:4C
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 121B
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/6ZUrfKdHyIyjAytkp3ArgmxCXkw.roa
Signing time: Mon 05 May 2025 12:13:13 +0000
ROA not before: Mon 05 May 2025 12:13:13 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 62387
IP address blocks: 101.232.124.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4635 (0x121b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: May 5 12:13:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E9952B7CA747C88CA3032B64A7702B826C425E4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:b3:38:aa:6d:5b:e3:07:10:78:36:34:f5:
37:2a:19:7d:42:d6:93:e1:69:e9:5b:11:6f:1a:98:
0d:53:3d:ca:07:11:ad:ca:67:38:31:61:ba:1c:7f:
48:a9:04:a8:db:55:eb:3c:3c:06:41:be:33:c6:4d:
7d:bd:dc:ee:bf:b4:b5:32:f5:55:74:63:4c:ba:ba:
56:da:d5:99:9a:c2:1b:b3:6b:74:38:0a:1f:f2:12:
08:ba:78:90:c6:4b:c2:c7:4e:45:60:80:01:4b:3b:
5d:b2:e2:88:14:0b:e4:b6:5b:5f:94:e6:02:d1:67:
88:35:59:bf:f3:51:a8:a7:ce:d1:98:a8:39:3d:42:
5d:b9:18:0f:2b:14:56:6f:c1:42:8e:cd:5b:53:38:
7c:fa:7c:d9:62:74:4f:89:0c:73:8f:d1:5f:00:28:
3f:4b:40:75:ee:ab:07:8f:25:c9:90:a9:3a:90:49:
1d:12:52:87:e6:df:90:b2:bb:69:b3:61:ce:5f:e6:
d8:88:ff:61:12:07:b6:83:f4:4b:96:ac:5b:cb:94:
20:08:2f:2b:50:2f:57:d9:85:1b:33:43:9a:2f:46:
ec:b9:b5:a5:5c:02:81:e2:1a:a8:8a:db:fd:de:f6:
cc:e4:28:95:83:b3:e2:c0:62:58:48:df:0c:6a:67:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:95:2B:7C:A7:47:C8:8C:A3:03:2B:64:A7:70:2B:82:6C:42:5E:4C
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/6ZUrfKdHyIyjAytkp3ArgmxCXkw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.232.124.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:24:8b:64:06:2a:1f:85:ac:6a:68:63:6f:c3:e7:c4:46:a3:
8a:43:08:d9:b5:2c:08:a6:f4:03:c7:06:8a:cc:9a:de:37:73:
e3:60:f5:15:89:39:32:52:0a:ef:dc:89:a7:a8:08:2a:93:e3:
b1:d4:ec:1a:10:21:0a:68:d2:25:c8:66:2e:f3:a3:0a:2a:2e:
93:38:16:3d:48:8b:ec:80:e8:ea:de:61:f9:95:bd:96:3a:1e:
52:b1:d5:3f:4d:5d:f6:f0:9b:21:74:47:51:5f:8f:14:3f:bd:
b5:13:43:f4:3e:30:7f:dc:dd:bb:1a:a8:27:a6:c3:39:d1:60:
d3:4d:1c:43:ef:14:a3:0c:c1:b8:16:ad:1a:8d:43:ae:23:a4:
84:c8:cb:f8:2b:10:2a:1c:83:fe:85:29:09:42:80:38:7a:4c:
01:77:0e:3d:8f:bd:cf:24:1d:78:a4:08:f0:4e:f4:bd:fa:3a:
ba:44:d1:b5:d8:5d:ef:a0:53:14:28:00:57:f4:1c:7b:43:bb:
4d:cb:77:13:1c:e3:80:46:dd:6a:84:b1:74:8e:f0:c8:e5:c0:
85:ca:84:11:de:55:a4:0a:bb:d6:34:ba:b7:67:d6:53:41:30:
e9:63:ed:85:2a:7d:db:39:6d:92:fd:8d:5c:e0:cc:0b:6f:97:
c2:c1:b7:aa
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICEhswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTA1MDUx
MjEzMTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU5OTUyQjdDQTc0N0M4
OENBMzAzMkI2NEE3NzAyQjgyNkM0MjVFNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC727M4qm1b4wcQeDY09TcqGX1C1pPhaelbEW8amA1TPcoHEa3K
ZzgxYbocf0ipBKjbVes8PAZBvjPGTX293O6/tLUy9VV0Y0y6ulba1Zmawhuza3Q4
Ch/yEgi6eJDGS8LHTkVggAFLO12y4ogUC+S2W1+U5gLRZ4g1Wb/zUainztGYqDk9
Ql25GA8rFFZvwUKOzVtTOHz6fNlidE+JDHOP0V8AKD9LQHXuqwePJcmQqTqQSR0S
Uofm35Cyu2mzYc5f5tiI/2ESB7aD9EuWrFvLlCAILytQL1fZhRszQ5ovRuy5taVc
AoHiGqiK2/3e9szkKJWDs+LAYlhI3wxqZ87XAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU6ZUrfKdHyIyjAytkp3ArgmxCXkwwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzLzZaVXJmS2RIeUl5akF5
dGtwM0FyZ214Q1hrdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJl6HwwDQYJKoZIhvcNAQELBQADggEBAB4ki2QGKh+FrGpoY2/D58RGo4pDCNm1
LAim9APHBorMmt43c+Ng9RWJOTJSCu/ciaeoCCqT47HU7BoQIQpo0iXIZi7zowoq
LpM4Fj1Ii+yA6OreYfmVvZY6HlKx1T9NXfbwmyF0R1FfjxQ/vbUTQ/Q+MH/c3bsa
qCemwznRYNNNHEPvFKMMwbgWrRqNQ64jpITIy/grECocg/6FKQlCgDh6TAF3Dj2P
vc8kHXikCPBO9L36OrpE0bXYXe+gUxQoAFf0HHtDu03LdxMc44BG3WqEsXSO8Mjl
wIXKhBHeVaQKu9Y0urdn1lNBMOlj7YUqfds5bZL9jVzgzAtvl8LBt6o=
-----END CERTIFICATE-----
Generated at Sat May 17 13:27:12 2025 by rpki-client