Route Origin Authorization
$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/2/3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa
File: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (raw, json)
Hash identifier: 7QVIR6vAgNWaqIthEAaUoCA29ZTDW7owTbnZXq9tGH4=
Subject key identifier: 88:8E:06:B7:BE:4E:35:09:6C:43:F8:83:10:A9:01:18:16:5D:A9:8E
Certificate issuer: /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Certificate serial: 2B3BD702BD4E393D5DE72CDA969C12FA8C60C616
Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa
Signing time: Tue 24 Feb 2026 06:29:52 +0000
ROA not before: Tue 24 Feb 2026 06:24:52 +0000
ROA not after: Tue 23 Feb 2027 06:29:52 +0000
asID: 4538
IP address blocks: 103.165.111.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:3b:d7:02:bd:4e:39:3d:5d:e7:2c:da:96:9c:12:fa:8c:60:c6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Validity
Not Before: Feb 24 06:24:52 2026 GMT
Not After : Feb 23 06:29:52 2027 GMT
Subject: CN=888E06B7BE4E35096C43F88310A90118165DA98E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:4b:5e:42:1b:a3:5f:36:96:99:cb:a4:99:
48:52:a3:b8:33:48:d5:3a:23:e7:f1:34:44:8d:08:
ad:06:6e:83:c0:8b:9e:3c:35:d2:98:93:c4:2d:72:
1b:84:fb:ea:af:b7:7d:e7:04:05:1b:64:b7:bc:fc:
65:05:34:12:e8:e5:80:67:c9:e9:54:b4:bc:f6:5a:
e1:f5:4b:50:9f:4d:ad:ff:34:6f:b2:56:bd:b7:02:
27:a5:97:2f:c1:4c:b2:77:1b:92:57:9e:39:88:43:
c9:39:83:80:81:85:06:fb:91:dc:4b:2b:c7:61:ba:
f9:e2:48:94:c3:04:94:87:d4:56:19:71:73:13:57:
9b:a5:3e:a9:41:1a:a9:b5:80:b0:5a:d9:af:0a:42:
51:1f:66:0c:f6:78:a2:2a:e1:c4:a3:80:1c:d0:c4:
1a:f8:e5:0d:fa:40:a0:a8:11:4b:73:28:3f:00:4b:
86:84:6b:b6:00:80:a5:d9:a6:fe:3e:c4:08:c0:a8:
65:14:b8:39:cf:7b:e9:f0:15:68:dd:47:7b:52:ac:
2c:ec:c1:17:ef:90:93:0a:4c:0a:28:f5:1b:c8:c4:
c9:b0:38:fc:67:ef:b7:1d:42:42:4e:c7:e4:56:21:
f3:2c:65:51:d9:e6:f9:53:91:f4:8e:15:22:18:5e:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8E:06:B7:BE:4E:35:09:6C:43:F8:83:10:A9:01:18:16:5D:A9:8E
X509v3 Authority Key Identifier:
keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.111.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e7:00:a4:2e:47:15:2a:a3:d8:75:fe:69:9f:54:94:62:96:
84:f3:1b:b0:82:0b:76:25:ef:ee:22:5d:5f:73:f6:5b:31:e5:
22:08:99:f0:f4:81:bf:1a:ef:73:61:79:d9:28:a1:e0:d4:31:
4a:d5:79:e5:42:84:16:75:03:c2:b9:f2:f6:0b:ab:ab:9e:43:
8f:86:c7:4e:6f:b9:4f:58:24:9d:ef:3a:97:11:6c:6e:a3:0b:
d9:1b:f9:98:47:a6:78:ca:0d:33:e2:15:cf:35:e2:66:3f:f9:
88:b0:f1:0b:b2:60:4a:9e:46:01:d5:07:e5:ed:04:12:44:89:
d5:05:34:22:ae:ce:cb:75:dd:bb:9a:c0:c0:14:e0:e4:a0:24:
86:c5:6b:5f:84:88:f7:33:50:02:ff:d4:96:07:a5:e2:d3:95:
2e:e6:a9:ce:0e:f6:fa:de:4c:71:a4:1f:44:c3:fd:74:7f:56:
a0:89:48:71:ae:e2:82:8b:4c:06:3a:58:88:58:8d:70:13:c0:
d4:c8:fa:ac:ec:5b:c9:04:ce:04:a7:74:56:14:b4:92:d0:d0:
56:1a:13:ec:43:dc:13:c4:50:7b:0a:8b:be:fc:a8:d4:49:7f:
ec:fe:e0:14:92:8a:4c:9a:70:e6:1a:7e:17:0f:6d:cd:60:d7:
69:5b:74:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:35:07 2026 by rpki-client