Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/lnovP1K8W8jMY9GmWjUe9pYNMGY.roa
File: lnovP1K8W8jMY9GmWjUe9pYNMGY.roa (raw, json)
Hash identifier: n1J2Lo/uXR9n9CUuJBvYOstq4js4qrspe8HELZlbakA=
Subject key identifier: 96:7A:2F:3F:52:BC:5B:C8:CC:63:D1:A6:5A:35:1E:F6:96:0D:30:66
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1E31
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/lnovP1K8W8jMY9GmWjUe9pYNMGY.roa
Signing time: Sat 13 Sep 2025 03:04:55 +0000
ROA not before: Sat 13 Sep 2025 03:04:55 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 17621
IP address blocks: 103.5.192.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7729 (0x1e31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 13 03:04:55 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=967A2F3F52BC5BC8CC63D1A65A351EF6960D3066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:33:44:55:16:90:3c:98:37:94:87:d2:51:
71:41:bc:3c:d1:fb:e0:c3:73:d7:c3:87:6f:b8:04:
95:22:dd:4b:56:9d:b4:49:1b:a3:e6:2b:6a:ef:af:
90:a7:b8:84:c9:78:b7:96:41:c5:3d:ea:f3:d2:28:
d1:48:10:c7:37:ad:8b:f2:33:cf:88:e0:fd:71:3c:
51:74:a3:91:2d:a3:43:3c:4f:17:28:e3:78:28:c5:
61:dc:f1:99:1c:9a:db:1f:1f:b4:59:30:93:f7:6f:
1d:aa:b4:cf:f8:5b:b4:04:0e:60:67:98:a6:57:d3:
d6:01:b3:d4:11:bb:70:3d:19:a1:ca:7f:29:38:0d:
74:e9:1c:a7:53:b3:5c:bc:35:23:21:98:16:09:ae:
92:a9:47:f1:d9:ce:61:63:8a:26:2f:1a:d2:1a:4b:
64:ff:0d:68:ee:b7:a3:dc:d9:a8:e1:2d:b4:45:88:
96:4a:18:a5:e5:da:89:21:87:83:34:b8:a8:dd:c6:
36:bf:7d:3d:94:d6:b7:b5:5e:2c:af:56:f7:3d:13:
ca:1a:b4:ce:49:9e:e5:25:d9:4b:3b:f2:b9:fd:6c:
14:e9:4c:4d:e0:65:02:9f:9a:3e:55:87:5a:ca:dc:
48:aa:69:91:1b:c2:55:11:a3:86:b6:4d:a3:fe:69:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7A:2F:3F:52:BC:5B:C8:CC:63:D1:A6:5A:35:1E:F6:96:0D:30:66
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/lnovP1K8W8jMY9GmWjUe9pYNMGY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.192.0/22
Signature Algorithm: sha256WithRSAEncryption
da:6b:b1:6b:07:3c:24:dc:32:87:64:11:4a:05:4f:ce:67:e3:
ac:5b:5e:1a:2e:25:62:42:67:b0:53:3e:32:f9:11:98:94:ce:
f6:e1:93:f2:a0:8c:f0:d9:13:b9:48:4b:3e:c7:01:2f:b2:b8:
da:4f:a7:9e:85:19:ac:48:22:90:2a:6f:2a:fa:fb:79:03:2a:
ea:0b:5a:b0:28:e0:73:26:2a:54:a7:cc:fc:26:3d:ae:a1:c2:
22:f1:e2:92:0c:c4:4f:79:e4:b2:71:e3:c9:26:1a:0a:f7:0c:
8a:7f:84:f0:62:3d:c4:d6:7f:3b:32:ea:33:f8:4c:8e:e1:d0:
c8:b7:16:f9:08:39:11:20:00:81:a4:74:40:f1:24:84:96:61:
66:6c:33:d9:81:6c:67:37:18:36:2f:6e:45:1b:88:4b:ed:b5:
96:24:a3:18:43:d8:c5:20:35:cf:56:fc:67:f0:28:55:50:83:
73:b7:1c:82:91:a6:9a:2c:e0:86:2c:9a:25:60:83:20:8a:8c:
eb:8d:5f:55:47:7a:04:ad:9c:1d:d4:f4:23:e8:05:e2:1f:b9:
c4:06:d1:6e:77:d7:fe:78:ca:cc:93:cb:ba:18:78:66:37:4a:
9e:c4:72:42:aa:21:60:fe:cc:1f:cf:d0:90:a5:e4:70:82:3a:
34:ff:4e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:45:56 2025 by rpki-client