Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/142/ZZ5xYS0V-9dE0xmIWxEnrddcWZQ.roa
File: ZZ5xYS0V-9dE0xmIWxEnrddcWZQ.roa (raw, json)
Hash identifier: lxUd2qKVOMUCvBCdiQCe/RJ6ywSGyLzv9SzPQwWhScg=
Subject key identifier: 65:9E:71:61:2D:15:FB:D7:44:D3:19:88:5B:11:27:AD:D7:5C:59:94
Certificate issuer: /CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Certificate serial: 14
Authority key identifier: D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/ZZ5xYS0V-9dE0xmIWxEnrddcWZQ.roa
Signing time: Fri 24 Oct 2025 01:07:03 +0000
ROA not before: Fri 24 Oct 2025 01:07:03 +0000
ROA not after: Fri 23 Oct 2026 09:04:31 +0000
asID: 17962
IP address blocks: 211.148.192.0/19 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Validity
Not Before: Oct 24 01:07:03 2025 GMT
Not After : Oct 23 09:04:31 2026 GMT
Subject: CN=659E71612D15FBD744D319885B1127ADD75C5994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:e5:33:cf:8a:e9:76:71:b1:0f:6a:b4:a4:
8f:cb:d1:f2:2f:74:30:d7:fc:73:88:94:37:d3:34:
a4:04:31:ee:88:52:02:47:47:f5:7f:92:aa:57:7f:
87:b0:8a:09:04:10:69:eb:42:01:b4:25:0b:09:7d:
59:b8:de:43:32:87:82:bb:09:76:7b:11:53:b6:f2:
b2:70:d8:9f:68:4c:bb:00:ac:b4:05:1f:bd:90:5f:
5a:f2:03:a1:ec:4d:89:f2:f1:8a:3b:bd:a2:c6:4a:
6a:35:59:12:f5:4e:cc:e6:55:54:46:1f:f8:7b:6c:
56:19:78:e1:ee:0f:3b:dd:fe:01:7c:04:2a:8c:86:
40:98:e1:5b:51:0e:ed:eb:79:3f:1c:58:6e:da:b0:
dd:ee:19:0a:de:2e:05:3c:82:3d:d6:55:a3:f7:af:
e4:10:08:aa:e0:05:60:6c:a8:91:7d:09:9e:df:c6:
77:0c:37:e5:2e:ce:b5:2d:36:c1:24:67:f9:0b:d1:
e0:d6:5a:53:23:e8:e9:b4:17:ee:e4:46:9c:82:6d:
f8:ce:59:67:eb:2a:bf:9c:df:2d:55:57:ff:ae:1d:
13:0f:b5:3e:b9:4f:96:56:7b:b0:ca:c7:f8:50:52:
76:c4:cb:d1:5a:02:e7:e4:fe:37:78:4e:75:d6:b8:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9E:71:61:2D:15:FB:D7:44:D3:19:88:5B:11:27:AD:D7:5C:59:94
X509v3 Authority Key Identifier:
keyid:D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/ZZ5xYS0V-9dE0xmIWxEnrddcWZQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.148.192.0/19
Signature Algorithm: sha256WithRSAEncryption
78:dc:7e:10:f5:d1:f9:2d:36:7e:ee:d0:67:e0:36:10:b8:a6:
54:2c:7c:44:79:20:70:76:a2:5d:b9:1a:19:03:1e:c6:86:b4:
fc:51:e1:a9:3c:5f:02:3d:0f:58:68:2e:a7:9b:6a:66:53:df:
b4:1d:07:92:f9:79:16:57:05:9f:9e:5b:fe:4a:78:dd:50:76:
d8:4f:ad:08:17:e4:43:3b:27:f5:d6:fb:08:1f:45:67:d1:6c:
3b:4d:02:fd:01:b9:1b:da:9d:86:f6:dc:42:d7:01:35:2e:86:
38:cf:08:40:f5:31:70:6c:43:d4:93:e5:5a:98:74:8e:ac:c4:
34:66:29:3c:ec:ec:31:cc:a4:d0:7b:31:50:f3:67:20:a5:98:
67:7e:c8:cc:f8:de:4c:25:a2:56:53:15:98:f2:79:b1:b9:fe:
64:30:30:b0:dd:39:93:3a:e6:39:8d:fa:1d:30:41:71:b1:1e:
5c:1b:d7:28:5e:94:9e:25:6a:69:58:8d:c4:b8:0e:bc:04:7a:
33:d8:f9:3d:e2:1d:bf:66:22:58:bf:18:87:05:c9:11:ea:c9:
2d:81:91:46:1c:f2:2e:b0:11:e2:f9:0f:ec:f2:ed:be:0d:1b:
ef:16:12:be:92:85:64:34:2d:f4:9e:93:74:0b:75:f2:52:c9:
fd:77:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:23:53 2025 by rpki-client