Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/WqlHSpsXdiw0xAF4uRHpTlmEAEc.roa
File: WqlHSpsXdiw0xAF4uRHpTlmEAEc.roa (raw, json)
Hash identifier: vBFjRVi2fTaZ2RejuUqdIrxrMeKixFfCUzUAXarepfk=
Subject key identifier: 5A:A9:47:4A:9B:17:76:2C:34:C4:01:78:B9:11:E9:4E:59:84:00:47
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1E00
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/WqlHSpsXdiw0xAF4uRHpTlmEAEc.roa
Signing time: Sat 13 Sep 2025 03:04:46 +0000
ROA not before: Sat 13 Sep 2025 03:04:46 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 24373
IP address blocks: 2406:1e80::/48 maxlen: 64
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7680 (0x1e00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 13 03:04:46 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=5AA9474A9B17762C34C40178B911E94E59840047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:da:f3:f5:30:16:37:08:59:56:14:6c:20:
6b:36:37:3a:84:cb:3b:d8:6c:2c:17:af:8a:be:ec:
e7:c6:07:0a:6b:77:ca:3b:3a:16:92:8a:e3:aa:ac:
70:c2:30:13:19:c7:fd:3e:4c:f1:ac:36:b6:56:df:
b0:4a:74:1d:2a:22:7d:d4:e8:3b:77:ed:e1:36:81:
79:0e:aa:37:08:12:08:fc:78:11:bc:31:f4:54:0a:
1b:e0:1a:86:16:6b:30:a3:9b:24:b2:ef:8c:7a:47:
38:cb:36:d4:e0:98:65:0c:0b:72:a6:d5:47:40:51:
9f:f7:08:d6:d9:33:58:af:7e:d5:65:44:9d:2e:0c:
7d:4f:85:4b:b6:d6:42:05:3a:d6:60:f7:d5:6c:91:
c3:eb:53:22:ec:b3:4d:eb:a6:eb:ab:99:bc:a4:b3:
c3:db:0c:2b:18:c9:58:aa:be:d6:78:d9:2c:8b:19:
a8:8d:df:96:24:70:8c:97:6f:5d:58:c3:83:71:af:
2c:f0:6b:66:98:cb:5a:5b:34:7e:79:38:ad:a3:4c:
cc:e9:40:2f:f7:9d:45:11:ff:4d:30:6c:c5:1d:f5:
b4:5d:ee:60:ec:86:fd:04:03:f5:b0:24:43:f1:53:
a7:eb:34:48:e6:10:3a:eb:57:4f:50:e6:0b:77:95:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A9:47:4A:9B:17:76:2C:34:C4:01:78:B9:11:E9:4E:59:84:00:47
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/WqlHSpsXdiw0xAF4uRHpTlmEAEc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:1e80::/48
Signature Algorithm: sha256WithRSAEncryption
12:85:2d:86:ae:3e:b1:a6:18:a3:4c:b3:12:72:3f:25:21:ed:
5c:f6:5d:ff:63:90:4d:39:64:92:c1:d5:bd:a0:bc:9a:55:94:
ff:38:9c:52:fc:a3:d6:cc:67:2e:ea:1b:93:1c:17:12:43:79:
81:aa:c7:6a:1a:5d:08:45:7f:19:0f:91:a9:92:06:c2:9b:bf:
21:35:c8:c8:33:1f:e9:12:6b:1d:ac:99:1d:ed:59:41:b9:8f:
5a:6c:e5:f2:3b:1a:40:21:cd:b4:1b:aa:05:0f:9b:93:90:f1:
c2:85:09:70:1e:7c:a3:ea:7d:6a:23:8c:51:c6:61:b2:61:4e:
f3:b6:66:a2:08:cd:75:a4:cb:46:fa:f9:a2:b4:ec:39:16:c9:
60:07:68:6c:7a:1c:47:d5:2a:ed:ff:3d:65:ea:98:44:10:79:
b2:59:57:e3:d9:ea:ae:aa:c1:ac:69:69:a8:9b:b7:c8:75:9b:
eb:4b:73:ee:64:3d:ef:4a:fb:72:7c:0f:e5:7b:85:c3:a9:6f:
c3:30:25:38:66:88:26:e1:9b:c5:c3:e3:6d:44:97:1a:83:cb:
f1:a2:5c:c0:02:ca:15:af:03:4c:f7:25:67:b7:c5:56:68:c9:
90:87:63:ef:6a:ce:aa:6b:89:f6:11:05:91:d6:89:e0:6e:b2:
d1:81:44:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:25 2025 by rpki-client