Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/142/HCnI_MDcOdwJ6NkBNiMfWTcD02c.roa
File: HCnI_MDcOdwJ6NkBNiMfWTcD02c.roa (raw, json)
Hash identifier: RjV0BFV6JsUdoSv51ZVSon4sJ7NucwkbG/z3BKJ9Nuk=
Subject key identifier: 1C:29:C8:FC:C0:DC:39:DC:09:E8:D9:01:36:23:1F:59:37:03:D3:67
Certificate issuer: /CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Certificate serial: 13
Authority key identifier: D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/HCnI_MDcOdwJ6NkBNiMfWTcD02c.roa
Signing time: Fri 24 Oct 2025 01:07:03 +0000
ROA not before: Fri 24 Oct 2025 01:07:03 +0000
ROA not after: Fri 23 Oct 2026 09:04:31 +0000
asID: 17962
IP address blocks: 219.234.96.0/19 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Validity
Not Before: Oct 24 01:07:03 2025 GMT
Not After : Oct 23 09:04:31 2026 GMT
Subject: CN=1C29C8FCC0DC39DC09E8D90136231F593703D367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:88:7d:59:83:14:cf:8a:f0:4c:0c:51:b5:
72:01:7c:2d:4c:63:82:68:61:d8:f5:af:93:af:a0:
25:69:a9:ad:b6:de:bc:52:64:51:b8:6d:5b:2e:22:
97:05:d3:b5:b5:85:4a:f4:0a:e0:c9:22:9f:ae:0a:
1c:02:56:71:2c:2f:22:a4:57:aa:ff:a6:3b:db:d0:
bc:f1:94:d5:2c:8e:6c:e0:1b:e0:48:f3:d0:45:b4:
ce:22:9d:55:96:1e:48:91:52:ba:2a:93:0d:b0:5d:
e9:ce:49:42:15:0c:7b:c7:3b:25:36:d5:86:d9:9f:
e2:98:0f:65:11:73:38:19:17:21:90:fc:74:55:eb:
53:72:0f:05:c9:c0:25:cb:60:d8:4e:b3:c7:06:13:
f5:0f:be:68:f4:de:82:3a:d9:13:1e:40:c0:51:ba:
98:17:66:85:c8:75:04:70:2c:4e:fb:e1:6d:b9:e6:
13:7b:50:15:17:e8:48:f2:33:89:f9:27:7c:78:3b:
e9:9f:76:82:50:33:48:fa:0c:81:54:e1:24:6a:b7:
ce:2c:be:fd:ce:2b:18:77:06:10:7b:86:2e:ff:27:
fb:2d:91:b6:04:f6:df:5f:e0:e9:3e:f1:de:fa:57:
9b:6f:94:b3:d9:76:b7:a3:3f:dd:39:28:46:64:cb:
42:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:29:C8:FC:C0:DC:39:DC:09:E8:D9:01:36:23:1F:59:37:03:D3:67
X509v3 Authority Key Identifier:
keyid:D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/HCnI_MDcOdwJ6NkBNiMfWTcD02c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.96.0/19
Signature Algorithm: sha256WithRSAEncryption
7f:08:bb:85:d3:11:12:22:ae:2c:12:66:77:85:70:f8:71:12:
44:18:36:04:f9:9c:18:98:d8:07:ed:47:1c:5c:35:5b:26:31:
65:a0:35:20:70:1f:92:c0:74:e0:76:e7:ee:5e:e4:b0:84:2f:
bc:2b:ac:13:42:14:23:34:cf:d6:5a:98:b0:6d:97:91:c5:73:
19:81:12:93:83:4f:eb:57:22:68:17:ea:2e:93:fa:2a:e6:04:
14:be:25:d7:62:3b:2d:50:18:53:02:35:8f:67:96:cd:96:96:
06:7e:76:45:3e:b8:12:77:98:e7:da:74:8c:dc:25:ba:f4:4f:
34:42:a4:3f:16:b5:a3:46:fe:de:80:0e:2a:b7:d4:65:b6:3e:
53:e1:07:54:63:7b:05:ea:4a:5b:9c:d9:d9:36:76:79:d3:cd:
0e:00:0a:40:2d:8d:e7:42:8f:d9:dc:fa:1a:be:25:98:80:3e:
1d:34:c5:43:46:02:31:57:6f:3c:5d:0a:53:de:5e:2a:41:1a:
5c:68:5b:c1:dd:d3:d3:a4:61:ae:ed:76:80:dc:62:ac:b4:f2:
31:cf:6b:34:95:0c:a8:b2:1e:f4:8c:07:f2:65:b4:d6:b7:fc:
b3:a9:b7:7e:59:d8:ca:36:47:4b:3a:3b:79:bb:f3:59:b2:ff:
34:d1:85:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:25:23 2025 by rpki-client