Route Origin Authorization

$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/2/323430613a613830313a3a2f33322d3332203d3e20313434363939.roa
File:                     323430613a613830313a3a2f33322d3332203d3e20313434363939.roa (raw, json)
Hash identifier:          Zy+i2yKBKEgXzLeLcIBnL6a8ha4nD6uqEJejzfnWXuI=
Subject key identifier:   89:A9:B7:19:71:CC:FB:44:86:E4:67:37:47:46:BA:AB:FA:58:F3:68
Certificate issuer:       /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Certificate serial:       3C587EE037108B2EDDA6DA1AABFC3F3B7BF82956
Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject info access:      rsync://rpki.cernet.edu.cn/repo/cernet/2/323430613a613830313a3a2f33322d3332203d3e20313434363939.roa
Signing time:             Tue 24 Feb 2026 06:50:02 +0000
ROA not before:           Tue 24 Feb 2026 06:45:02 +0000
ROA not after:            Tue 23 Feb 2027 06:50:02 +0000
asID:                     144699
IP address blocks:        240a:a801::/32 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:58:7e:e0:37:10:8b:2e:dd:a6:da:1a:ab:fc:3f:3b:7b:f8:29:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
        Validity
            Not Before: Feb 24 06:45:02 2026 GMT
            Not After : Feb 23 06:50:02 2027 GMT
        Subject: CN=89A9B71971CCFB4486E467374746BAABFA58F368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:23:8b:79:85:61:69:62:1b:c5:18:3a:ab:5e:
                    36:ef:12:c0:34:80:19:6a:f5:bb:f9:0f:00:df:ce:
                    61:b2:13:d3:0b:bb:6a:ee:8a:9c:51:8f:e9:1f:58:
                    db:f3:b7:1c:a6:33:27:27:40:1e:d7:d0:45:0e:89:
                    ae:65:7c:ab:ba:31:c0:bd:7f:0c:73:a7:a9:61:db:
                    69:1a:f8:1a:36:c1:90:2a:4c:d7:56:02:3f:f3:7c:
                    85:a8:e5:12:7d:a8:d0:d8:37:c4:11:40:24:09:74:
                    aa:ce:f8:f1:0b:cd:f3:c4:f7:72:e5:ff:bb:de:72:
                    b1:90:2c:c3:0f:f6:f2:a7:dd:bb:d3:c6:b4:8e:ce:
                    d9:d7:e5:55:c5:73:bf:49:9a:07:8e:cb:7c:fd:39:
                    bd:51:d9:f0:a3:85:d3:39:2d:d5:9a:19:d5:19:ff:
                    e2:e8:72:8e:8e:36:2f:2e:2d:3a:7f:e0:35:2a:49:
                    29:ae:49:ba:3f:b9:9d:a9:24:92:5f:89:3a:39:4c:
                    aa:ed:27:25:ec:5c:b2:75:bd:ab:c1:a8:c7:3d:2c:
                    d4:9f:4d:eb:96:a9:89:f9:22:51:3c:18:6d:61:63:
                    82:67:4e:ac:33:7c:3f:e2:d6:85:25:19:80:da:92:
                    c0:e2:f4:4b:d7:e0:c1:aa:80:61:7f:b0:83:f1:3e:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A9:B7:19:71:CC:FB:44:86:E4:67:37:47:46:BA:AB:FA:58:F3:68
            X509v3 Authority Key Identifier:
                keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/323430613a613830313a3a2f33322d3332203d3e20313434363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a801::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:f5:13:c4:47:2a:5d:ce:5c:0c:aa:65:9b:5c:5c:c7:b5:8b:
         66:8f:c7:96:e5:77:8e:3b:ea:78:85:fe:d7:4a:99:6f:fe:49:
         42:b2:ac:96:77:94:15:1c:ab:9a:7c:81:0f:f0:52:3e:61:ba:
         1c:e8:db:7a:4d:52:78:8f:7a:12:0d:ec:df:27:c0:6d:96:10:
         a5:57:39:13:5e:c9:6b:ac:39:07:d7:b8:70:75:e5:0d:e5:af:
         8b:8e:2e:ee:7d:7c:18:70:cc:14:75:57:d1:95:5d:ed:ab:17:
         43:63:56:3a:fd:d1:52:35:0a:7b:7c:17:37:42:23:65:9f:bd:
         2d:42:23:c1:eb:b2:80:e6:6f:50:9f:4c:1b:43:6a:09:3d:36:
         91:09:0f:9f:9e:cc:dc:7b:7d:e5:3a:18:45:f1:93:b1:63:c0:
         0b:f6:a7:ff:48:99:cd:99:39:ac:a0:c2:ed:3d:9f:9d:d6:ed:
         97:e5:c8:73:3e:b0:63:70:65:89:48:58:d4:04:67:7d:0a:43:
         7c:36:87:14:e8:f0:25:7f:d8:77:7e:37:d0:3b:b7:32:45:35:
         37:af:f5:7c:0d:9a:86:47:8d:c4:46:18:b9:d2:c6:3d:e3:82:
         20:c6:ce:56:b3:7b:de:a3:32:b3:f6:e6:72:37:0a:4b:d5:9b:
         5f:ff:d5:e9
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUPFh+4DcQiy7dptoaq/w/O3v4KVYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEygxODE2MzkwMTU1
QkUwODM5Njk0QjZBN0U3MkNBOERCRkE0RUJEOTE1MB4XDTI2MDIyNDA2NDUwMloX
DTI3MDIyMzA2NTAwMlowMzExMC8GA1UEAxMoODlBOUI3MTk3MUNDRkI0NDg2RTQ2
NzM3NDc0NkJBQUJGQTU4RjM2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMwji3mFYWliG8UYOqteNu8SwDSAGWr1u/kPAN/OYbIT0wu7au6KnFGP6R9Y
2/O3HKYzJydAHtfQRQ6JrmV8q7oxwL1/DHOnqWHbaRr4GjbBkCpM11YCP/N8hajl
En2o0Ng3xBFAJAl0qs748QvN88T3cuX/u95ysZAsww/28qfdu9PGtI7O2dflVcVz
v0maB47LfP05vVHZ8KOF0zkt1ZoZ1Rn/4uhyjo42Ly4tOn/gNSpJKa5Juj+5nakk
kl+JOjlMqu0nJexcsnW9q8Goxz0s1J9N65apifkiUTwYbWFjgmdOrDN8P+LWhSUZ
gNqSwOL0S9fgwaqAYX+wg/E+sCsCAwEAAaOCAfkwggH1MB0GA1UdDgQWBBSJqbcZ
ccz7RIbkZzdHRrqr+ljzaDAfBgNVHSMEGDAWgBQYFjkBVb4IOWlLan5yyo2/pOvZ
FTAOBgNVHQ8BAf8EBAMCB4AwZgYDVR0fBF8wXTBboFmgV4ZVcnN5bmM6Ly9ycGtp
LmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMi8xODE2MzkwMTU1QkUwODM5Njk0
QjZBN0U3MkNBOERCRkE0RUJEOTE1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB
BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9HQlk1QVZXLUNEbHBTMnAtY3NxTnY2
VHIyUlUuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEFBQcwC4ZjcnN5bmM6Ly9y
cGtpLmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMi8zMjM0MzA2MTNhNjEzODMw
MzEzYTNhMmYzMzMyMmQzMzMyMjAzZDNlMjAzMTM0MzQzNjM5Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD
BQAkCqgBMA0GCSqGSIb3DQEBCwUAA4IBAQB39RPERypdzlwMqmWbXFzHtYtmj8eW
5XeOO+p4hf7XSplv/klCsqyWd5QVHKuafIEP8FI+Yboc6Nt6TVJ4j3oSDezfJ8Bt
lhClVzkTXslrrDkH17hwdeUN5a+Lji7ufXwYcMwUdVfRlV3tqxdDY1Y6/dFSNQp7
fBc3QiNln70tQiPB67KA5m9Qn0wbQ2oJPTaRCQ+fnszce33lOhhF8ZOxY8AL9qf/
SJnNmTmsoMLtPZ+d1u2X5chzPrBjcGWJSFjUBGd9CkN8NocU6PAlf9h3fjfQO7cy
RTU3r/V8DZqGR43ERhi50sY944Igxs5Ws3veozKz9uZyNwpL1Ztf/9Xp
-----END CERTIFICATE-----