Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/142/PFlXsnDEmWxVt2hOAy-V4YbAXpk.roa
File: PFlXsnDEmWxVt2hOAy-V4YbAXpk.roa (raw, json)
Hash identifier: g+yunAA0C1cJzXNLoZTNOW2DMxzoA1+L7p45hUac4+U=
Subject key identifier: 3C:59:57:B2:70:C4:99:6C:55:B7:68:4E:03:2F:95:E1:86:C0:5E:99
Certificate issuer: /CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Certificate serial: 15
Authority key identifier: D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/PFlXsnDEmWxVt2hOAy-V4YbAXpk.roa
Signing time: Fri 24 Oct 2025 01:07:03 +0000
ROA not before: Fri 24 Oct 2025 01:07:03 +0000
ROA not after: Fri 23 Oct 2026 09:04:31 +0000
asID: 17962
IP address blocks: 115.44.0.0/15 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Validity
Not Before: Oct 24 01:07:03 2025 GMT
Not After : Oct 23 09:04:31 2026 GMT
Subject: CN=3C5957B270C4996C55B7684E032F95E186C05E99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:b7:5e:68:a7:ed:2b:50:80:ba:bd:56:1a:
a0:52:93:1a:32:e2:a1:37:dc:53:e0:a6:55:38:67:
fb:d0:4c:23:49:30:28:68:c6:47:f6:e1:b2:93:f2:
ec:c5:91:75:27:c5:4f:69:09:a7:35:65:d7:c2:9e:
f7:d6:f1:b1:7a:db:b4:9a:72:51:88:05:40:27:24:
9b:0c:f9:7d:f0:36:0c:f1:b9:fb:f9:2a:9f:b2:00:
95:4b:25:18:1e:b2:3e:97:6a:39:0b:bb:a1:7d:eb:
c4:f2:0a:78:ec:de:aa:53:ea:1e:41:85:b3:cc:97:
a4:4c:50:ef:35:23:ab:fa:c4:ec:90:f9:38:64:9f:
7d:76:a1:dc:de:1e:36:48:b7:86:81:c2:b5:c9:bc:
d8:13:39:07:81:3a:d5:63:19:e9:ee:32:33:7c:6a:
46:27:9f:67:5a:1c:96:03:24:a2:d4:84:50:5e:e3:
e3:7f:7d:3d:e2:b6:1d:ff:98:a1:c4:60:56:8b:77:
46:29:9b:09:d2:79:b2:ef:5e:67:23:df:0f:0e:b4:
7e:e7:be:98:6d:4e:51:99:22:ca:bd:ff:fe:5b:a0:
ff:92:44:bd:b7:87:3d:5d:b7:07:d9:4c:57:3f:8f:
54:5d:a5:04:d8:21:8c:90:52:1a:bc:1f:ce:bd:62:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:59:57:B2:70:C4:99:6C:55:B7:68:4E:03:2F:95:E1:86:C0:5E:99
X509v3 Authority Key Identifier:
keyid:D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/PFlXsnDEmWxVt2hOAy-V4YbAXpk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.44.0.0/15
Signature Algorithm: sha256WithRSAEncryption
80:4a:35:93:f2:5e:d1:b5:54:9d:98:80:ca:23:c2:fe:e6:82:
2b:c7:3e:7e:96:8d:d7:ee:a0:60:1a:56:9f:89:b7:7c:24:cc:
d7:24:66:3c:18:ff:de:ef:e1:45:00:aa:f6:2b:5a:c0:ff:6d:
18:7f:1c:aa:b1:62:a8:05:44:ef:83:80:85:35:fa:f3:44:db:
38:96:14:ce:4a:a5:35:ee:59:a8:f5:e1:dd:0c:ba:ec:12:31:
f7:3a:f8:43:6a:94:24:14:e7:b7:45:6b:17:74:ed:fc:81:b2:
bb:1c:43:77:a3:72:7f:be:2c:6d:88:1c:13:09:26:be:75:ce:
5b:01:a0:b1:b3:bf:ef:2a:78:9b:c4:a3:de:54:57:bf:63:9c:
b1:44:73:62:b3:47:b8:57:4f:41:b2:ca:89:30:9d:ee:8f:4f:
bd:6e:63:8b:13:34:c7:3e:32:60:27:b9:43:97:83:da:a2:b4:
1e:37:5b:4a:5d:d7:b5:d5:90:6d:16:ac:7a:8b:9d:22:ea:d5:
07:88:21:8c:e1:19:ff:41:fc:f8:6b:f0:c4:f1:90:24:d4:5a:
ba:01:b3:39:5c:d9:8e:30:a1:34:17:4a:06:9d:cd:61:70:55:
a4:46:63:2c:23:a5:a8:54:46:f6:49:c9:e1:b5:8b:05:7d:61:
6f:ef:74:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:24:57 2025 by rpki-client