Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/EdVWfIr_HvlX10jImKCTXamvA6I.roa
File: EdVWfIr_HvlX10jImKCTXamvA6I.roa (raw, json)
Hash identifier: 5F6TMazIa1u5aWY870nmiX9IAeeNjXT4nRfxIqZbqk0=
Subject key identifier: 11:D5:56:7C:8A:FF:1E:F9:57:D7:48:C8:98:A0:93:5D:A9:AF:03:A2
Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Certificate serial: 14C2
Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/EdVWfIr_HvlX10jImKCTXamvA6I.roa
Signing time: Thu 11 Sep 2025 06:12:56 +0000
ROA not before: Thu 11 Sep 2025 06:12:56 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 23853
IP address blocks: 2404:7600:104::/46 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5314 (0x14c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Validity
Not Before: Sep 11 06:12:56 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=11D5567C8AFF1EF957D748C898A0935DA9AF03A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4e:f9:cc:d7:74:7d:e7:71:bb:c9:7d:74:3b:
6d:d9:d5:01:3f:e3:30:a2:a3:f7:3c:54:fb:96:61:
cf:17:26:5a:9b:8a:70:d2:f0:ff:70:ba:e4:d6:e7:
6b:af:a0:48:b8:44:8b:dd:c4:0d:15:21:d4:a1:11:
25:ac:7a:3a:44:99:a9:27:b1:ab:6d:7a:51:d7:6a:
55:3f:08:89:82:b3:da:6d:fd:52:b2:d1:3f:bc:ca:
b0:13:ac:5f:0f:08:2e:9f:df:95:b7:6a:65:ec:b7:
a9:a4:53:6e:4f:57:a2:0b:55:f0:7e:ec:cc:e4:22:
c3:78:a3:0a:3a:fa:92:e4:be:56:d9:4c:e7:22:78:
a9:79:d9:22:93:36:67:2a:07:88:98:54:2b:6a:57:
f8:f7:28:95:e0:bd:07:70:e8:e3:ca:45:59:d9:9d:
f4:fb:7a:2b:09:d4:9d:25:89:16:29:09:45:0d:21:
4d:a2:0a:c2:15:31:7d:1e:4e:1f:dc:3f:ca:fd:60:
88:43:c1:47:4e:86:d2:ef:7f:49:80:c7:a0:71:d1:
63:14:18:33:08:2a:4f:eb:0c:8b:d2:87:56:51:3a:
36:43:34:19:35:da:2c:89:a7:49:7b:c4:51:8b:32:
91:19:75:38:06:cb:03:db:35:d9:ed:0f:a1:89:16:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D5:56:7C:8A:FF:1E:F9:57:D7:48:C8:98:A0:93:5D:A9:AF:03:A2
X509v3 Authority Key Identifier:
keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/EdVWfIr_HvlX10jImKCTXamvA6I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:7600:104::/46
Signature Algorithm: sha256WithRSAEncryption
c4:2e:6c:e0:e3:2b:c1:df:6d:6f:65:08:50:71:a4:48:23:59:
ef:37:38:15:00:89:08:44:71:57:ac:68:5e:68:da:d6:f6:90:
c3:0a:a0:a9:d3:b3:ae:54:aa:e6:18:11:32:bd:62:41:94:8e:
a8:9b:85:a3:dd:f7:14:82:26:75:86:85:18:84:8f:94:7a:78:
e0:cb:ad:d6:f3:a8:ba:38:3e:b5:24:17:1e:8c:aa:9a:6f:43:
80:77:1f:31:e4:0d:46:2b:2b:6d:94:92:ae:51:80:51:83:a5:
5b:9a:7d:07:10:70:84:c1:2e:62:67:92:ec:14:3a:e4:fa:70:
33:91:d8:de:44:19:af:83:4c:cd:95:bb:17:b2:38:78:fc:8f:
6f:cb:db:52:e1:80:b3:ce:ad:fc:19:61:c7:60:40:c3:84:3e:
a5:ef:b0:e9:a1:aa:5f:09:0f:7b:7a:6c:f5:ae:9b:23:65:a8:
f0:88:48:ee:39:b9:c1:ef:24:47:f1:51:08:42:d0:6f:91:13:
95:10:33:87:d8:e4:76:ad:c6:8c:3d:70:03:77:da:78:7f:33:
12:cd:31:a0:64:5a:aa:2b:19:b6:ce:32:e9:c0:3c:db:09:d9:
16:7b:b6:9c:32:97:cf:c7:a2:b0:12:39:92:3a:7d:52:5c:a0:
32:15:de:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:27:27 2025 by rpki-client