Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/142/yDWN_10vUNUCYrKgTNvE2Dvv94E.roa
File: yDWN_10vUNUCYrKgTNvE2Dvv94E.roa (raw, json)
Hash identifier: ozO9iwHBgZDKkM39pCPzXmy9kzk96CxGmfGj+VGuofs=
Subject key identifier: C8:35:8D:FF:5D:2F:50:D5:02:62:B2:A0:4C:DB:C4:D8:3B:EF:F7:81
Certificate issuer: /CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Certificate serial: 0F
Authority key identifier: D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/yDWN_10vUNUCYrKgTNvE2Dvv94E.roa
Signing time: Fri 24 Oct 2025 01:07:02 +0000
ROA not before: Fri 24 Oct 2025 01:07:02 +0000
ROA not after: Fri 23 Oct 2026 09:04:31 +0000
asID: 17962
IP address blocks: 103.12.184.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Validity
Not Before: Oct 24 01:07:02 2025 GMT
Not After : Oct 23 09:04:31 2026 GMT
Subject: CN=C8358DFF5D2F50D50262B2A04CDBC4D83BEFF781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:eb:4d:df:5a:b2:24:ab:c8:75:50:f7:40:46:
9d:16:2d:bc:6f:8d:21:68:ba:ec:7d:49:7c:b2:a0:
8f:5e:4b:ac:94:c0:b1:23:d2:7b:01:d1:26:e6:39:
50:c5:1a:7e:d4:bd:6a:b4:d4:34:14:65:93:63:2e:
e9:a2:fe:de:57:13:f8:29:a0:7b:f0:e2:63:39:55:
cb:69:1b:3a:86:52:04:d1:3e:b5:a6:6f:a7:c9:f5:
44:e6:6b:d8:06:63:a5:db:5f:76:33:eb:23:29:b1:
ef:1c:80:51:59:6c:28:1c:65:7a:3e:30:56:9b:35:
ba:a3:be:37:29:82:4a:32:88:c2:83:18:09:13:40:
9a:89:5b:d0:d3:0f:a8:70:f7:09:56:9f:b7:74:54:
a5:2f:cb:2f:a6:65:09:c5:12:ee:2c:9b:70:a4:0e:
c8:2e:c9:45:f5:64:e7:a7:8d:9e:b0:64:91:27:fb:
d7:14:7c:48:64:54:ef:c7:e9:38:94:47:92:a5:91:
48:ce:bd:c6:87:6b:0d:af:1f:04:88:f7:d1:7b:e3:
3e:b8:3e:79:a7:0c:7e:36:34:88:91:c9:28:57:3e:
ce:96:b6:37:17:d8:0b:88:6d:27:3b:a0:bb:9f:5e:
99:cf:2c:d6:9f:d9:fd:23:f4:fc:12:e4:bf:5a:82:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:35:8D:FF:5D:2F:50:D5:02:62:B2:A0:4C:DB:C4:D8:3B:EF:F7:81
X509v3 Authority Key Identifier:
keyid:D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/yDWN_10vUNUCYrKgTNvE2Dvv94E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.184.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:0b:ce:73:9c:90:b8:e1:98:20:6c:de:04:ee:f2:db:f4:f1:
37:9e:8c:6e:6d:95:77:61:4f:c7:7e:15:56:c4:ca:61:81:b1:
0f:f9:d7:99:46:4f:71:f8:5e:27:20:19:d2:7e:76:c2:e9:50:
53:22:d2:49:f7:f9:17:06:65:93:80:da:a7:ee:1c:34:56:85:
02:24:10:dc:b1:ae:a7:78:fa:88:21:13:0c:a8:5d:05:81:d7:
f3:e5:69:72:6a:93:f6:ff:32:25:61:a9:2a:55:ca:2f:7f:23:
61:07:9c:aa:d8:20:9e:be:b9:c6:bf:be:e6:ad:15:dd:19:e8:
f9:bb:36:95:d3:42:f3:6c:65:d5:b8:2e:21:bd:0d:a2:64:1f:
31:3f:fc:35:6e:71:94:fa:80:d1:52:f4:33:b4:67:bc:61:c5:
23:24:78:48:69:55:4a:38:be:55:e3:2f:b7:ca:02:cf:26:cc:
e9:46:03:94:20:fe:46:38:31:0e:c5:0f:b2:60:19:39:d5:ba:
a7:aa:a3:d0:8d:d7:17:c1:cb:9f:ad:65:a5:6e:1a:8e:71:67:
0b:7e:05:73:bb:74:8a:9d:47:b3:c1:f7:5c:84:4f:43:fe:6c:
4a:f2:c5:68:0b:3f:be:e4:c2:f1:cb:f4:92:ae:2b:2d:76:b3:
b4:24:1c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:25:06 2025 by rpki-client