Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/sAuy9X3hLvOKgN2tci0AuNUTFEU.roa
File: sAuy9X3hLvOKgN2tci0AuNUTFEU.roa (raw, json)
Hash identifier: etHz1Py0o7VNvXDJ6kPr2PILpq1U+FGqiX8pYAh0dbc=
Subject key identifier: B0:0B:B2:F5:7D:E1:2E:F3:8A:80:DD:AD:72:2D:00:B8:D5:13:14:45
Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Certificate serial: 14C6
Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/sAuy9X3hLvOKgN2tci0AuNUTFEU.roa
Signing time: Thu 11 Sep 2025 06:13:34 +0000
ROA not before: Thu 11 Sep 2025 06:13:34 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 23853
IP address blocks: 2404:7600:110::/44 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5318 (0x14c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Validity
Not Before: Sep 11 06:13:34 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=B00BB2F57DE12EF38A80DDAD722D00B8D5131445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:28:b5:bc:7f:95:b1:2b:ee:43:7c:ca:44:
ed:31:9f:08:23:2d:36:91:0d:a1:3f:e1:84:8f:10:
23:f1:40:1b:30:cd:8c:eb:16:3b:9a:83:b5:2f:1e:
4a:cb:5d:f0:5c:70:9f:b3:64:85:0b:0c:bf:6c:5d:
ad:66:16:c3:f0:c1:21:55:ec:e5:78:70:8c:24:ad:
63:c5:a5:ba:d8:9a:4d:28:a5:ec:2a:c6:57:5f:52:
2c:ba:32:24:10:a7:ba:85:4f:23:7e:e6:94:ba:11:
19:50:7b:d6:13:b8:4a:31:da:b3:ee:5f:97:ad:d1:
60:48:dd:4e:f7:5d:6e:8a:7b:3f:72:d8:70:08:44:
fe:ad:f3:ef:2a:9c:df:05:b5:bc:0a:df:55:e8:70:
cf:c9:e9:40:a7:77:ac:65:04:ab:8b:34:bb:1e:00:
86:e1:f4:04:e4:c7:2b:24:da:bc:f5:e8:ee:2a:d3:
61:ff:c3:83:92:fd:31:b1:87:24:dd:2d:15:50:bd:
85:9a:38:ee:62:25:ce:8d:7e:fd:ce:2d:45:00:02:
e8:55:16:3c:5e:ef:d2:3e:1c:dc:9a:cd:98:76:6e:
5c:92:93:64:f7:7f:ad:10:c3:24:66:16:12:59:28:
da:2a:ab:2f:28:1c:26:cf:c1:12:bc:74:84:8b:90:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0B:B2:F5:7D:E1:2E:F3:8A:80:DD:AD:72:2D:00:B8:D5:13:14:45
X509v3 Authority Key Identifier:
keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/sAuy9X3hLvOKgN2tci0AuNUTFEU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:7600:110::/44
Signature Algorithm: sha256WithRSAEncryption
5b:93:3e:7b:b5:f9:1c:0a:18:91:37:71:98:59:42:0d:74:8d:
10:b4:31:96:c5:58:00:78:c6:dc:01:a4:16:40:e6:66:e5:8e:
7d:f1:fe:1a:01:66:b1:03:a8:d4:87:e9:c8:52:f7:a6:da:7f:
67:22:df:91:75:c4:e1:ce:66:ab:59:0b:40:f8:ac:df:dc:4e:
6c:34:3c:0e:68:f6:f7:82:aa:c3:ad:30:61:f8:d0:52:d2:36:
fb:5c:ef:57:f2:45:f5:73:a9:3e:33:19:dc:56:df:d0:58:b0:
48:ed:70:5a:0c:c2:d3:fa:c2:ec:58:0e:7a:a7:d6:16:22:3b:
df:30:04:23:15:00:12:11:ef:f6:49:a7:93:ff:b0:3b:29:4d:
5e:21:fb:48:bf:88:c4:b8:fb:22:3c:15:8f:f8:64:42:b9:92:
47:dd:01:6f:1c:f3:cf:67:fa:25:11:bf:9e:aa:af:1b:0c:44:
0e:a1:89:e4:92:96:61:81:0d:35:73:ee:c5:ad:d9:b4:02:26:
fc:0c:da:49:25:c1:f7:e1:83:80:02:ae:9a:2f:5b:71:2d:d5:
8d:37:a3:17:51:09:69:e6:66:ba:43:7f:db:43:bb:7e:8a:01:
e8:78:6c:38:17:e4:c5:21:e3:e2:21:f1:f7:c1:f1:b8:ed:e1:
b2:3f:ea:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:27:18 2025 by rpki-client