Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/142/eJx-7UMhBnbXL8BJZkjaPByl35g.roa
File: eJx-7UMhBnbXL8BJZkjaPByl35g.roa (raw, json)
Hash identifier: 4XWKdSMro8hsNKlTqZqZjGFnDzfPUOxJFK5+yRVSmsQ=
Subject key identifier: 78:9C:7E:ED:43:21:06:76:D7:2F:C0:49:66:48:DA:3C:1C:A5:DF:98
Certificate issuer: /CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Certificate serial: 0A
Authority key identifier: D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/eJx-7UMhBnbXL8BJZkjaPByl35g.roa
Signing time: Fri 24 Oct 2025 01:07:01 +0000
ROA not before: Fri 24 Oct 2025 01:07:01 +0000
ROA not after: Fri 23 Oct 2026 09:04:31 +0000
asID: 17962
IP address blocks: 36.36.0.0/16 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Validity
Not Before: Oct 24 01:07:01 2025 GMT
Not After : Oct 23 09:04:31 2026 GMT
Subject: CN=789C7EED43210676D72FC0496648DA3C1CA5DF98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:fc:1b:d4:06:f9:9f:99:fd:cb:f4:7e:dc:
94:43:46:b9:c0:04:4a:64:47:42:09:ad:6a:59:46:
a6:7a:a2:7c:f6:38:50:5e:b3:f0:40:54:7b:08:39:
7d:31:9f:3c:e4:ec:27:f0:2e:f4:50:a9:65:27:e5:
6c:47:c7:2a:46:35:99:67:df:c0:33:3b:b2:d1:df:
a3:d7:57:65:e3:58:0b:96:cd:82:ae:45:d6:e2:83:
d6:32:b1:2f:2b:18:5e:eb:cc:14:ed:26:91:9f:1c:
62:df:40:6f:91:c3:c7:3e:a5:b0:5a:3c:8b:ff:2a:
19:19:39:df:f4:29:a6:7d:40:16:bb:07:3e:2c:0e:
ae:06:86:14:9b:87:52:57:99:93:7e:13:f0:32:93:
80:60:f7:8e:ce:71:8f:8a:a7:44:bf:82:77:e0:5e:
d2:57:b3:a9:dc:66:c6:34:23:b4:7f:bb:8e:8d:4d:
b4:38:b1:5c:c7:73:ef:61:02:27:8c:1f:3e:bf:ea:
57:79:16:c9:8d:94:26:82:93:a4:f7:0a:6a:19:1f:
1f:e5:cf:99:62:f4:f9:85:a1:ad:a3:45:6c:a5:e4:
6f:97:27:eb:f3:c0:7b:3f:d5:e0:56:13:fc:a4:94:
f2:b3:18:f4:52:5a:9f:62:a3:f5:e9:5c:df:1b:4d:
43:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9C:7E:ED:43:21:06:76:D7:2F:C0:49:66:48:DA:3C:1C:A5:DF:98
X509v3 Authority Key Identifier:
keyid:D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/eJx-7UMhBnbXL8BJZkjaPByl35g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.36.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:95:b3:73:04:54:10:9b:63:dc:00:3b:77:06:7a:d6:15:96:
26:7e:ff:c4:c0:4a:d5:96:a7:14:56:1f:e8:b8:c9:9a:ac:8b:
4c:a3:5c:ee:df:0f:3e:3b:bc:c7:c8:39:5e:62:67:f1:06:a9:
25:50:ce:ec:d9:b1:6b:58:aa:04:4c:dd:41:21:31:19:e7:6c:
de:1c:cb:b1:ce:1c:f1:b9:5a:e3:9b:6e:90:95:86:2d:cc:f5:
f2:d6:31:13:8a:1c:57:bf:bb:d4:27:f8:0c:f8:c5:1e:6a:2a:
7d:9e:9a:cf:c4:e1:23:ca:09:52:e4:c2:34:c3:10:f1:b0:e7:
67:ba:b9:3f:f9:2f:64:cf:1c:c3:21:d5:aa:36:6d:c8:bf:b7:
b0:d6:ec:b6:b2:c8:56:8a:f6:86:97:a6:7f:93:7e:ab:64:e4:
27:c4:6d:c8:f8:df:d5:f5:e3:03:51:51:9e:e4:c3:7c:f0:dc:
cf:c0:d2:38:49:91:b0:a0:de:40:69:97:63:8a:1c:bf:58:c3:
58:e3:b2:54:a0:4f:62:b6:a9:92:12:2d:17:18:85:81:de:9c:
fd:cc:02:2d:8c:85:a5:32:e6:6b:ad:fb:5b:d3:66:39:32:7b:
38:6a:0d:7b:a4:e6:8a:12:dc:61:dd:f8:3f:c7:8f:b3:06:2d:
c7:00:0e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:24:05 2025 by rpki-client