Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/142/_yRz6l3WduIFaOmsie7ODfJVEro.roa
File: _yRz6l3WduIFaOmsie7ODfJVEro.roa (raw, json)
Hash identifier: RGaH24pWcUHVCmeOA6FwkAYGetUFEfrqhYE7KPCBzMA=
Subject key identifier: FF:24:73:EA:5D:D6:76:E2:05:68:E9:AC:89:EE:CE:0D:F2:55:12:BA
Certificate issuer: /CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Certificate serial: 11
Authority key identifier: D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/_yRz6l3WduIFaOmsie7ODfJVEro.roa
Signing time: Fri 24 Oct 2025 01:07:02 +0000
ROA not before: Fri 24 Oct 2025 01:07:02 +0000
ROA not after: Fri 23 Oct 2026 09:04:31 +0000
asID: 17962
IP address blocks: 222.248.0.0/16 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Validity
Not Before: Oct 24 01:07:02 2025 GMT
Not After : Oct 23 09:04:31 2026 GMT
Subject: CN=FF2473EA5DD676E20568E9AC89EECE0DF25512BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cc:bb:d0:30:33:c1:54:5c:18:34:e3:01:0d:
0c:95:b2:e3:e2:81:47:34:67:8e:05:25:aa:10:02:
50:38:ae:17:25:d1:06:57:08:e0:f4:e0:32:4c:f5:
1b:e2:fa:77:e4:2b:3a:9a:c0:81:ab:16:b6:27:78:
81:df:d1:7a:52:53:a6:45:32:83:d7:59:6a:73:d4:
61:2d:3b:2b:75:30:59:df:b6:4a:84:08:42:b1:c0:
d0:10:e4:5c:20:60:74:4f:88:35:49:e8:ce:1a:95:
10:4e:fd:f8:43:7c:fe:ef:a2:4b:4e:ec:1e:14:f6:
65:7b:a3:a2:3c:10:32:73:1d:4d:22:b6:04:21:33:
d4:f3:43:05:50:a9:07:42:f2:f9:b8:60:58:13:2a:
a4:3d:5e:a5:16:e9:19:ba:2a:a3:f1:be:45:2f:dc:
64:b4:b8:67:36:3e:48:99:d6:5d:67:64:4e:23:09:
58:a4:06:7b:1d:45:31:2c:f3:f0:a8:48:a7:d4:71:
0f:ef:ff:2e:ba:c2:6a:39:f6:ce:d5:10:0a:b9:28:
e3:86:1d:0f:62:58:c9:1b:9b:a6:7b:bc:fe:b0:9b:
25:f0:eb:d6:84:43:29:7c:40:fa:c4:cf:53:e0:c9:
6f:83:b0:a1:35:6c:41:fe:75:e7:28:f3:38:e7:27:
cc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:24:73:EA:5D:D6:76:E2:05:68:E9:AC:89:EE:CE:0D:F2:55:12:BA
X509v3 Authority Key Identifier:
keyid:D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/_yRz6l3WduIFaOmsie7ODfJVEro.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.248.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:8e:63:66:e0:9b:6d:7b:a1:2c:7b:fb:1a:28:49:e3:8d:68:
5b:6e:bf:f8:f2:26:51:91:b2:54:af:7c:53:ad:35:a8:5c:a9:
d5:00:7e:55:f1:4e:d9:da:92:6a:b1:db:37:81:5a:fd:0a:96:
41:c4:2f:10:00:64:01:7f:f3:72:2f:a9:af:d1:7b:31:5e:8e:
7b:c7:53:56:ea:d5:8f:48:e1:13:a8:6e:06:49:c6:b5:f7:c9:
84:40:fb:81:f5:18:6c:e1:e0:20:f7:df:f2:4a:ed:b0:d1:84:
3f:6b:3e:a8:1a:e4:e4:bf:90:57:86:8b:c9:79:06:20:e0:21:
ad:1b:8b:ff:8e:d5:d4:3c:1d:6b:c6:39:03:91:ab:3c:6b:e9:
36:a7:24:2a:8d:7c:40:91:fd:c1:fe:aa:58:03:c7:4f:79:97:
a7:86:2c:6e:85:1c:43:dc:51:aa:3a:6d:26:dd:10:72:45:c7:
32:e1:49:e2:dc:b6:8a:64:46:1c:2c:e3:46:3d:59:76:fa:82:
df:14:f7:4a:63:0b:da:45:d9:ca:2f:9c:1b:a8:46:78:92:6d:
a3:92:3f:68:0a:1f:f7:17:e0:0f:26:0b:6a:fb:ae:8a:0c:d3:
2c:70:1c:26:9f:b8:0e:77:80:fd:2d:dd:05:bb:a1:e6:82:a0:
9b:0f:a2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:24:09 2025 by rpki-client