Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/VaVtpXrPORh6EYTmvvimoLcYn0s.roa
File: VaVtpXrPORh6EYTmvvimoLcYn0s.roa (raw, json)
Hash identifier: 8Y0tHS8lkAvodC8wiVIpn0bC+qB5rtRS8Sm/sta9Q4Y=
Subject key identifier: 55:A5:6D:A5:7A:CF:39:18:7A:11:84:E6:BE:F8:A6:A0:B7:18:9F:4B
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1DF0
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/VaVtpXrPORh6EYTmvvimoLcYn0s.roa
Signing time: Sat 13 Sep 2025 03:04:42 +0000
ROA not before: Sat 13 Sep 2025 03:04:42 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 24373
IP address blocks: 45.252.48.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7664 (0x1df0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 13 03:04:42 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=55A56DA57ACF39187A1184E6BEF8A6A0B7189F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:bb:f8:05:20:52:f4:89:87:a8:f4:29:73:
2b:76:4a:ac:16:fc:5a:22:d3:1c:85:59:24:a2:d2:
72:25:a2:8a:c0:91:65:99:04:ec:c3:9d:6c:cd:ec:
f6:d1:28:cc:dd:57:7d:b8:7b:b1:57:1b:76:b9:39:
5b:cb:65:9d:23:98:9e:16:38:1e:d1:73:a4:fe:fb:
5e:14:5a:3f:95:61:32:9f:4a:6f:83:17:63:b8:9c:
2b:6b:6b:e6:06:63:ea:f7:e7:d1:cd:7a:36:3c:49:
a8:4f:90:d3:a6:b3:f3:b0:03:74:c1:ca:e5:1d:93:
db:89:86:16:9d:ef:bc:d5:2e:4a:49:54:b3:dd:15:
ec:aa:b1:02:82:43:f5:35:94:0c:b6:b3:d4:a5:aa:
57:29:d9:55:0a:b6:bb:55:6f:1d:df:57:d7:74:c1:
e2:7b:1d:ae:7d:42:e3:62:45:6f:19:b5:88:bd:a2:
55:c6:40:43:20:84:ff:c5:68:a9:cd:b7:d6:e2:43:
f2:06:aa:38:04:b7:84:23:2e:2f:29:68:ce:62:5c:
38:95:56:2a:d3:ef:17:78:ff:8e:60:50:2c:60:dc:
65:84:94:bd:52:da:3c:49:61:93:3e:cd:be:b8:74:
b0:fe:d8:5a:3a:67:5a:49:9a:ab:70:e4:98:1b:08:
59:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A5:6D:A5:7A:CF:39:18:7A:11:84:E6:BE:F8:A6:A0:B7:18:9F:4B
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/VaVtpXrPORh6EYTmvvimoLcYn0s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.48.0/22
Signature Algorithm: sha256WithRSAEncryption
de:cc:0f:13:77:01:ee:a6:2f:3e:8d:26:79:10:94:fe:db:f5:
14:2c:55:35:ac:9a:e1:da:1a:35:3a:97:0e:d6:82:ea:03:ba:
0f:a0:c0:ef:09:e2:08:6e:4a:df:87:90:3e:fc:1b:15:34:ba:
da:a4:c7:21:d1:5f:e4:40:4c:e9:94:93:30:07:df:e4:be:7e:
4f:40:77:6f:4e:4f:99:4f:57:b2:00:4e:cd:54:2c:6e:46:6c:
98:ac:38:cc:f2:ef:5e:d8:a9:9c:5d:bf:98:05:0e:67:bc:99:
5f:96:1e:f7:18:36:45:40:70:c8:f1:7a:0f:5e:01:d6:52:11:
af:89:6e:47:ab:e0:e2:3b:e8:a0:19:bf:b2:60:e4:5d:dd:3c:
5a:18:75:dc:af:a7:74:aa:2b:7a:32:e7:b2:07:ab:da:36:5a:
43:58:98:c9:2a:44:0a:fa:b3:21:49:88:04:79:3c:07:61:44:
c5:b9:17:1a:5a:80:e1:49:3a:d2:e4:fb:c4:e5:fd:c6:de:c2:
07:b2:9b:9e:1b:e4:b9:c5:7c:87:32:e7:80:a1:76:c4:88:e3:
98:e2:a0:69:90:55:45:78:7b:f1:bb:17:2f:88:9d:2a:61:1c:
61:df:d2:fc:31:9f:71:38:28:a2:d0:58:14:a8:2c:d4:07:5a:
66:e5:97:28
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICHfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw
MzA0NDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDU1QTU2REE1N0FDRjM5
MTg3QTExODRFNkJFRjhBNkEwQjcxODlGNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPArv4BSBS9ImHqPQpcyt2SqwW/Foi0xyFWSSi0nIloorAkWWZ
BOzDnWzN7PbRKMzdV324e7FXG3a5OVvLZZ0jmJ4WOB7Rc6T++14UWj+VYTKfSm+D
F2O4nCtra+YGY+r359HNejY8SahPkNOms/OwA3TByuUdk9uJhhad77zVLkpJVLPd
FeyqsQKCQ/U1lAy2s9Slqlcp2VUKtrtVbx3fV9d0weJ7Ha59QuNiRW8ZtYi9olXG
QEMghP/FaKnNt9biQ/IGqjgEt4QjLi8paM5iXDiVVirT7xd4/45gUCxg3GWElL1S
2jxJYZM+zb64dLD+2Fo6Z1pJmqtw5JgbCFlrAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUVaVtpXrPORh6EYTmvvimoLcYn0swHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1ZhVnRwWHJQT1JoNkVZ
VG12dmltb0xjWW4wcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAIt/DAwDQYJKoZIhvcNAQELBQADggEBAN7MDxN3Ae6mLz6NJnkQlP7b9RQsVTWs
muHaGjU6lw7WguoDug+gwO8J4ghuSt+HkD78GxU0utqkxyHRX+RATOmUkzAH3+S+
fk9Ad29OT5lPV7IATs1ULG5GbJisOMzy717YqZxdv5gFDme8mV+WHvcYNkVAcMjx
eg9eAdZSEa+Jbker4OI76KAZv7Jg5F3dPFoYddyvp3SqK3oy57IHq9o2WkNYmMkq
RAr6syFJiAR5PAdhRMW5FxpagOFJOtLk+8Tl/cbewgeym54b5LnFfIcy54ChdsSI
45jioGmQVUV4e/G7Fy+InSphHGHf0vwxn3E4KKLQWBSoLNQHWmbllyg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:16 2025 by rpki-client