Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/QGqz0_dPIxnBveVebuXzE4Qfsls.roa
File: QGqz0_dPIxnBveVebuXzE4Qfsls.roa (raw, json)
Hash identifier: 3zREh3uY4VmqUqn2DihHz856w/5A+2yJem8u+EGs4TI=
Subject key identifier: 40:6A:B3:D3:F7:4F:23:19:C1:BD:E5:5E:6E:E5:F3:13:84:1F:B2:5B
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 14EC
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/QGqz0_dPIxnBveVebuXzE4Qfsls.roa
Signing time: Sat 13 Sep 2025 03:03:28 +0000
ROA not before: Sat 13 Sep 2025 03:03:28 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 62387
IP address blocks: 123.98.36.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5356 (0x14ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 13 03:03:28 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=406AB3D3F74F2319C1BDE55E6EE5F313841FB25B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:6c:9a:de:79:f3:98:e9:58:8f:cf:02:d8:
55:de:ff:c9:87:22:fb:ad:d9:a9:ac:70:19:93:db:
d1:4d:ea:16:f2:99:7d:ac:4e:ba:b5:bf:56:bc:96:
7b:35:12:44:a3:f5:48:00:14:db:5a:a5:00:dd:82:
8e:39:45:30:4e:fe:7c:3c:85:b2:e8:90:90:cf:ab:
1a:6b:9c:23:64:62:bd:3d:0e:26:90:9c:bf:52:87:
9c:f5:0b:d1:df:1e:20:89:31:b0:5f:13:20:6d:90:
81:87:c2:ad:bc:58:33:4e:8b:89:9b:78:78:44:7a:
90:6e:32:44:80:85:c6:32:d8:d5:80:6c:a5:b9:02:
36:04:b9:b8:3b:bb:fc:76:d7:c2:02:fb:53:48:f4:
bd:c5:59:89:10:55:e7:24:d8:50:41:99:fc:06:e5:
b1:08:4f:7a:6b:48:3a:28:47:fb:32:a6:fa:af:ba:
cd:fb:43:17:4a:2b:f6:b8:93:28:05:c1:82:c8:61:
54:8a:73:15:68:f9:df:95:9e:77:c8:52:65:81:01:
51:ea:f9:25:d1:6e:85:a5:30:05:71:39:70:80:f3:
0d:08:30:e6:9c:57:b8:a9:d8:75:a3:86:b0:44:73:
72:c3:79:22:a0:ac:21:4b:f4:41:3a:e3:fc:2d:b9:
f7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6A:B3:D3:F7:4F:23:19:C1:BD:E5:5E:6E:E5:F3:13:84:1F:B2:5B
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/QGqz0_dPIxnBveVebuXzE4Qfsls.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.36.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:6d:51:b5:13:60:d2:8a:1f:ac:5c:49:f9:fe:fd:61:7b:10:
80:94:f4:88:88:75:57:8a:c8:eb:e9:88:39:2a:d7:9b:d7:26:
69:f9:59:1c:27:ce:74:a3:c7:8f:0e:08:08:73:7f:72:0a:5c:
33:d0:fa:ed:e2:2b:1d:ba:a7:1a:72:7a:51:70:ff:84:47:f6:
6d:de:cd:ff:bf:90:70:e6:5d:72:f5:79:0e:7c:bd:c2:eb:eb:
db:d6:57:04:da:23:77:ba:28:18:00:c9:9f:9c:d5:b7:98:71:
50:8f:bd:72:d0:86:be:ea:16:d5:ff:f8:90:be:a3:ef:0c:4d:
96:c0:d1:8f:1c:c9:70:54:b4:88:34:56:c9:83:a9:1b:2b:45:
5f:1d:07:38:b2:53:76:f8:19:ca:bc:84:b2:e2:f8:79:e8:f0:
66:5b:c8:f8:88:28:d2:8c:fa:6e:ee:d3:6b:8f:d4:31:13:79:
c5:72:82:c3:41:7d:da:53:e3:7d:e7:79:38:98:51:c2:c7:7a:
31:23:42:57:50:51:93:fd:8e:63:17:09:d6:4a:99:88:c5:11:
b6:52:c0:a2:36:63:25:06:d1:6c:4d:e6:44:da:ed:bc:61:4a:
cd:57:50:90:66:58:4e:a4:6a:86:0a:38:14:e8:fe:42:25:d8:
d0:2a:be:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:27 2025 by rpki-client