Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/142/6zD--t2pc7l7GPjxScKDCxlVr3s.roa
File: 6zD--t2pc7l7GPjxScKDCxlVr3s.roa (raw, json)
Hash identifier: m0naNPMiKurU2FNnUk8CLRM97Qp5zFGpnNQrLci7QXI=
Subject key identifier: EB:30:FE:FA:DD:A9:73:B9:7B:18:F8:F1:49:C2:83:0B:19:55:AF:7B
Certificate issuer: /CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Certificate serial: 10
Authority key identifier: D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/6zD--t2pc7l7GPjxScKDCxlVr3s.roa
Signing time: Fri 24 Oct 2025 01:07:02 +0000
ROA not before: Fri 24 Oct 2025 01:07:02 +0000
ROA not after: Fri 23 Oct 2026 09:04:31 +0000
asID: 17962
IP address blocks: 180.200.252.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Validity
Not Before: Oct 24 01:07:02 2025 GMT
Not After : Oct 23 09:04:31 2026 GMT
Subject: CN=EB30FEFADDA973B97B18F8F149C2830B1955AF7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:83:dc:d2:37:86:d8:a8:39:b5:36:b2:ba:c0:
30:ef:bf:e7:e2:22:15:4b:43:25:cb:8d:9f:67:05:
9c:61:aa:9f:db:4b:ee:bc:2e:8e:f6:f4:4d:96:8b:
70:0e:3e:e7:1d:b4:be:ce:b8:14:84:e2:40:51:a4:
3a:6e:0a:b4:14:b8:cb:54:67:3b:56:bb:70:53:ef:
67:3d:e6:13:e6:7c:b0:1b:38:eb:b4:c0:1d:fb:65:
4e:0b:84:4d:46:57:66:3d:46:0d:3f:93:2d:d7:32:
fe:5f:41:ad:63:bb:3c:56:6e:69:d6:c0:56:59:9a:
e7:1c:d8:6a:50:48:d2:c0:12:58:7a:c6:a6:36:a1:
24:21:b5:7f:45:72:74:24:48:c6:d2:12:ae:63:38:
c1:60:09:39:d2:d9:5d:72:45:70:c6:af:e0:29:07:
e3:d9:e0:d1:db:b3:1c:86:b1:d6:52:e0:38:c5:97:
40:34:12:65:e7:bd:08:20:95:a8:c0:4c:7d:8a:3b:
6c:0f:48:fb:81:d5:70:a8:91:f1:b8:f1:93:35:00:
5f:4a:cc:af:ba:05:c7:1b:50:a6:88:09:a9:65:ce:
45:cd:94:66:27:19:2e:d5:85:63:dd:c6:e6:9b:eb:
7d:99:bb:58:0f:f7:80:a5:2c:10:27:4d:27:99:92:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:30:FE:FA:DD:A9:73:B9:7B:18:F8:F1:49:C2:83:0B:19:55:AF:7B
X509v3 Authority Key Identifier:
keyid:D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/6zD--t2pc7l7GPjxScKDCxlVr3s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.200.252.0/22
Signature Algorithm: sha256WithRSAEncryption
35:8d:83:19:d0:24:35:9b:3a:67:27:85:b5:ba:99:81:4b:59:
a9:86:63:83:1e:6a:ba:49:d8:80:a2:5c:b9:08:b7:8e:71:33:
c4:59:c6:cb:83:4f:da:8b:03:57:11:59:9d:c9:0c:f4:df:2a:
7c:aa:a9:42:2e:bc:09:22:9f:37:e7:41:79:79:19:11:a1:81:
78:f4:c7:38:64:96:52:17:f4:aa:02:21:b5:c9:12:3d:4d:ed:
a6:16:e4:5e:bb:b7:ed:af:79:3f:b0:70:17:0a:47:8c:e5:fa:
df:0e:dd:24:8b:10:91:1a:b1:03:cf:3e:f5:5f:fd:a8:12:68:
53:22:8f:97:1e:a6:5d:93:51:ef:f9:b0:95:4a:31:08:02:7c:
70:26:93:b5:77:66:0f:db:7d:79:31:b1:03:56:89:cf:eb:25:
30:47:47:55:c3:89:7a:7b:0f:6c:ba:45:12:7a:32:80:e3:eb:
c1:44:5d:cc:eb:7f:df:1f:a8:4a:af:68:07:79:a3:ca:56:ef:
61:5d:c6:a5:af:87:bb:df:7a:f8:46:30:e2:18:28:49:61:ca:
11:2d:74:7e:43:53:6f:af:e7:56:e7:9c:ae:59:71:45:50:4e:
dc:4f:48:eb:e9:72:92:e0:ce:ce:4c:f2:25:ff:25:3f:ba:2c:
b6:59:e5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:25:44 2025 by rpki-client