Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/whnvvTnopRzBG_DUEqFKOWEqoFc.roa
File: whnvvTnopRzBG_DUEqFKOWEqoFc.roa (raw, json)
Hash identifier: FpvQK8SD/S1WUDbO2bhIpl3aw7rbx0n0aR8sLVE6xjo=
Subject key identifier: C2:19:EF:BD:39:E8:A5:1C:C1:1B:F0:D4:12:A1:4A:39:61:2A:A0:57
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1E3B
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/whnvvTnopRzBG_DUEqFKOWEqoFc.roa
Signing time: Sat 13 Sep 2025 03:04:57 +0000
ROA not before: Sat 13 Sep 2025 03:04:57 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 24373
IP address blocks: 103.221.92.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7739 (0x1e3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 13 03:04:57 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=C219EFBD39E8A51CC11BF0D412A14A39612AA057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:a1:02:8a:10:79:18:50:ea:e2:f2:20:b0:
e8:32:de:58:5e:17:24:d9:a7:d5:96:27:9f:0d:f5:
31:08:41:5d:ce:85:c0:4e:7b:d6:ca:6f:9e:dd:7c:
76:6c:f3:f8:1a:e4:15:e2:49:79:9c:1b:37:ff:51:
a6:d7:f4:f9:9e:06:f2:f0:1b:4e:26:4b:e3:55:f9:
0d:f2:f9:85:64:4f:eb:85:64:23:0b:0f:6b:1a:77:
20:69:95:86:25:24:e1:a0:8a:5a:f5:2d:b3:3d:09:
fe:9f:35:fb:3e:b9:d6:db:c2:5d:b4:57:c1:4d:33:
f3:47:6e:f2:6d:ca:2d:e6:6a:f0:6c:41:52:83:f2:
0a:06:84:00:dc:18:93:a6:98:0b:af:e1:05:a7:ba:
0e:0a:c8:a8:02:0a:86:95:1c:4e:7f:f9:ba:57:19:
c6:79:9e:16:61:6d:94:35:d1:74:74:1d:6a:8e:a5:
e8:d3:5f:39:84:a1:b1:72:b7:e7:2a:73:1e:d7:4d:
fe:4a:66:66:1c:8a:8e:07:4c:78:98:0a:18:5b:0e:
c4:03:2f:bb:7a:60:ec:1a:f9:9b:19:79:83:0b:50:
d8:81:de:f8:2d:85:fd:45:0f:1f:59:24:eb:34:17:
24:96:47:f9:e9:f1:0c:c5:23:6c:f8:41:3b:06:91:
06:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:19:EF:BD:39:E8:A5:1C:C1:1B:F0:D4:12:A1:4A:39:61:2A:A0:57
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/whnvvTnopRzBG_DUEqFKOWEqoFc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:88:ee:0c:bb:35:70:ff:96:62:64:0c:94:bf:c3:5a:3f:6d:
79:a9:22:2c:46:1f:f3:48:64:4b:9f:d4:3d:15:4a:40:a4:10:
33:a9:d7:40:30:45:bd:21:df:6b:f0:e9:44:82:3b:68:56:53:
0e:98:67:c7:1b:ac:f8:81:09:0b:02:9f:86:40:65:dd:9a:e9:
77:48:2a:25:97:9f:ba:81:eb:81:4f:aa:a0:35:33:93:1c:25:
43:98:52:56:4d:e1:10:a1:db:c4:07:95:05:3a:10:f3:75:6b:
ff:b3:51:d5:53:5e:34:44:ff:f2:f8:1b:c1:d5:c6:20:79:59:
b3:41:4f:24:34:d9:83:d1:43:a2:5f:e1:f8:93:bd:1a:68:ac:
2c:4f:5d:57:f3:3d:ca:71:b6:9e:2a:10:7a:d2:fc:cf:43:4c:
c7:fb:00:f4:02:e9:3d:6e:85:71:c5:5c:f1:e4:2d:ab:ce:42:
aa:da:fa:a5:09:7d:0f:4c:f8:b5:82:7c:69:d7:c8:7f:0f:7b:
bd:7d:c7:85:9a:3e:34:f1:81:56:0f:8d:b8:20:59:a9:8c:d0:
fd:46:dd:c3:9e:9b:48:86:06:ba:c0:98:1d:bd:d6:c6:cc:b5:
65:1b:09:02:46:18:36:8c:23:6f:d6:6a:9e:24:a6:83:56:82:
99:5c:e2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:09 2025 by rpki-client