Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/WneONO0O7GGwhq9Afh3SBg8IUYg.roa
File: WneONO0O7GGwhq9Afh3SBg8IUYg.roa (raw, json)
Hash identifier: +wxDNGRfjn3afC6oMUXkzF9ilA2XuzdqvNX6BUCOYWs=
Subject key identifier: 5A:77:8E:34:ED:0E:EC:61:B0:86:AF:40:7E:1D:D2:06:0F:08:51:88
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 125F
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/WneONO0O7GGwhq9Afh3SBg8IUYg.roa
Signing time: Fri 16 May 2025 10:59:45 +0000
ROA not before: Fri 16 May 2025 10:59:45 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 62387
IP address blocks: 101.232.76.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4703 (0x125f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: May 16 10:59:45 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5A778E34ED0EEC61B086AF407E1DD2060F085188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:e5:e1:ad:65:22:d2:f5:f8:d8:c2:cb:24:
54:86:a2:e1:33:f1:b5:db:18:82:ae:66:a5:19:2c:
77:48:c9:99:57:7b:d0:ca:f4:32:4c:38:e6:69:28:
7f:77:dd:bf:20:40:34:62:cf:cd:8f:46:f9:61:60:
12:10:89:c5:f8:48:c6:9f:64:aa:eb:5a:7e:97:1b:
e2:50:95:e8:df:0e:59:51:93:b0:62:80:b5:be:0a:
15:11:ba:50:f3:21:0b:a5:9a:c7:72:dc:62:43:67:
97:29:55:f0:51:f7:8e:ba:78:f7:9c:28:bb:57:81:
9b:b9:af:f9:00:e2:3a:1e:b6:2b:ca:df:b8:94:67:
86:a7:6e:90:08:58:33:81:91:ed:cc:1d:b2:c9:8e:
4e:8c:05:38:bc:84:40:67:e2:8c:fb:be:eb:83:3d:
7e:1e:f0:1e:d5:7d:15:48:8a:c4:c8:d2:c2:00:28:
67:9d:6a:a9:c5:cc:3f:8e:3e:b1:12:46:3a:62:21:
96:8e:1c:ce:16:f7:a2:bd:8d:2f:c2:a4:21:95:ac:
a5:cc:eb:c0:4f:48:f8:2a:14:0c:08:df:82:51:90:
d4:13:9b:31:05:19:71:5c:06:9f:eb:3d:de:70:2e:
2c:a3:5e:be:92:fc:b2:f2:65:47:62:ca:73:f6:08:
88:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:77:8E:34:ED:0E:EC:61:B0:86:AF:40:7E:1D:D2:06:0F:08:51:88
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/WneONO0O7GGwhq9Afh3SBg8IUYg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.232.76.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:73:79:cf:bb:da:66:9a:26:0e:ae:09:28:e5:d5:74:eb:fd:
a8:cf:ee:61:9b:fe:2c:16:3e:ee:54:22:8b:0d:9c:e8:79:b4:
8a:bb:f4:a9:62:c9:ab:f0:7f:c6:6b:36:c4:4d:1f:80:a4:81:
5b:96:dc:e2:2c:cd:fa:4e:ac:73:3f:8b:04:d3:a4:e2:43:57:
91:ad:6f:b2:69:a7:77:41:df:71:bf:ac:77:a2:2c:b0:ca:66:
8f:75:8a:1d:b9:68:1f:28:5b:a6:3f:82:30:58:71:02:ac:a7:
36:f3:5f:24:08:16:f5:64:13:6b:44:89:a3:ea:a4:15:a0:67:
cd:fc:51:9f:5e:a2:3a:30:31:71:2a:c2:63:ff:8e:8a:7d:8e:
5c:e0:21:9c:15:45:33:8d:e4:bc:d8:0d:42:77:35:d8:ee:2a:
9d:db:91:da:fd:56:21:60:aa:3a:8d:c4:89:7a:c3:89:82:97:
60:83:ac:5c:b7:cb:c6:6f:7c:3c:85:3f:00:4b:40:92:47:13:
01:65:1b:b5:03:58:63:fe:03:bb:8c:82:4b:08:78:72:14:de:
7d:6f:4b:ce:8d:aa:13:29:de:9b:b1:d4:b3:25:6a:61:dd:02:
60:4b:79:40:6a:0a:b7:4f:b6:5b:4e:7d:b0:4b:3b:e8:1d:f2:
eb:1a:76:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 17:14:57 2025 by rpki-client