Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/142/OSvsC8DKJ4BF7jiPROIlypfoyp4.roa
File: OSvsC8DKJ4BF7jiPROIlypfoyp4.roa (raw, json)
Hash identifier: yKs/rd2Zc1ifVNIHyEEw/3uBSCkzenRTqZbxOBkoduQ=
Subject key identifier: 39:2B:EC:0B:C0:CA:27:80:45:EE:38:8F:44:E2:25:CA:97:E8:CA:9E
Certificate issuer: /CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Certificate serial: 0C
Authority key identifier: D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/OSvsC8DKJ4BF7jiPROIlypfoyp4.roa
Signing time: Fri 24 Oct 2025 01:07:01 +0000
ROA not before: Fri 24 Oct 2025 01:07:01 +0000
ROA not after: Fri 23 Oct 2026 09:04:31 +0000
asID: 17962
IP address blocks: 111.222.0.0/16 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Validity
Not Before: Oct 24 01:07:01 2025 GMT
Not After : Oct 23 09:04:31 2026 GMT
Subject: CN=392BEC0BC0CA278045EE388F44E225CA97E8CA9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:04:2f:72:51:b7:a9:f5:cc:35:07:ff:2e:c0:
15:83:66:f4:89:98:88:86:77:8c:21:9e:13:b2:3d:
a8:f6:06:6e:fc:c8:1c:e6:f5:f6:7f:e8:76:ad:e7:
a7:91:fb:44:23:ed:7c:a7:3c:75:79:a4:38:4b:d6:
31:c9:83:a3:66:a1:7b:da:55:b3:b3:53:42:c2:53:
9a:1a:a1:28:f5:5b:81:69:3a:b4:a0:20:ed:aa:59:
6b:a3:eb:ff:1b:ac:0d:4c:f4:80:3d:0f:14:89:84:
01:c4:93:bc:a1:04:28:e1:db:81:d4:ae:65:30:0c:
fb:6e:b7:8c:f4:80:b9:f2:75:d7:7e:87:a3:dc:97:
bf:e4:36:ad:06:48:5b:c9:64:a8:dc:44:a4:4f:f8:
d5:2b:e2:91:b3:c7:d5:60:ab:a9:34:0e:28:a9:ea:
ad:89:e6:47:4d:4a:28:e3:7f:8e:76:19:c5:88:4e:
1e:3a:80:7b:43:64:3a:2e:21:cf:19:bf:a9:e9:06:
14:b6:3b:21:a8:88:0b:7e:8f:12:df:5c:64:1b:5d:
a1:65:27:81:02:64:34:93:e4:1b:07:dc:59:9e:c0:
19:62:a9:8f:1e:52:25:d9:13:0c:63:7f:58:d9:3c:
60:3e:2b:ad:6e:70:90:c3:80:18:fa:6f:e0:1c:86:
35:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2B:EC:0B:C0:CA:27:80:45:EE:38:8F:44:E2:25:CA:97:E8:CA:9E
X509v3 Authority Key Identifier:
keyid:D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/OSvsC8DKJ4BF7jiPROIlypfoyp4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.222.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:66:13:f0:50:2b:25:30:c7:b5:29:26:b5:e3:52:e6:5b:4f:
dd:12:f2:96:57:08:3a:07:34:8c:13:05:2e:af:05:54:55:b2:
a1:e9:bb:ae:6d:68:2f:07:2d:d2:1f:c9:4a:5a:1c:1b:e2:78:
db:53:a2:6d:d4:ca:2e:29:bd:90:6f:1a:78:2b:83:38:ed:61:
05:4e:75:8c:00:25:85:c8:e6:fa:7e:27:57:5a:93:ca:93:73:
62:e3:18:34:df:e9:d0:6c:45:65:65:3b:9c:f6:b9:be:16:ef:
7e:32:2d:2d:83:f8:2d:43:b5:5d:1c:66:43:6a:5b:5d:e7:c6:
8c:a7:65:8b:50:7c:7d:3b:c5:eb:e1:93:a0:0c:a0:1e:1f:85:
e6:9e:f4:eb:66:ee:c6:b9:b8:8c:b9:d9:82:0f:6c:39:99:3a:
7b:9b:e5:c4:5c:1c:7a:57:b1:51:3f:68:3c:2a:2e:e2:7e:db:
9f:5d:eb:a7:af:d3:d5:a7:04:d1:7b:29:0d:3b:38:77:cc:7c:
bb:5e:44:d5:01:b6:d9:90:09:fb:97:ba:3b:5a:97:cc:34:b5:
47:8a:24:b2:19:d1:44:26:c1:c1:1d:16:93:15:28:df:00:41:
af:c7:a1:0d:93:40:d9:7e:24:af:e3:f2:97:2b:f7:d7:f4:e8:
07:bc:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:26:15 2025 by rpki-client