Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/142/ys_fmp2jauv7bHyCpiPpeZrSJeg.roa
File: ys_fmp2jauv7bHyCpiPpeZrSJeg.roa (raw, json)
Hash identifier: bwq81+MlnkcVda6Zxgss0RPD4eSWjyvQseydElMt2Oc=
Subject key identifier: CA:CF:DF:9A:9D:A3:6A:EB:FB:6C:7C:82:A6:23:E9:79:9A:D2:25:E8
Certificate issuer: /CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Certificate serial: 08
Authority key identifier: D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/ys_fmp2jauv7bHyCpiPpeZrSJeg.roa
Signing time: Fri 24 Oct 2025 01:07:00 +0000
ROA not before: Fri 24 Oct 2025 01:07:00 +0000
ROA not after: Fri 23 Oct 2026 09:04:31 +0000
asID: 17962
IP address blocks: 223.212.0.0/15 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Validity
Not Before: Oct 24 01:07:00 2025 GMT
Not After : Oct 23 09:04:31 2026 GMT
Subject: CN=CACFDF9A9DA36AEBFB6C7C82A623E9799AD225E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:ad:5d:86:b6:25:16:59:3e:0c:fa:ab:7a:
a8:6c:a8:2c:ed:93:e3:f5:16:70:09:ed:90:3c:74:
4a:5b:94:89:9b:a5:76:75:38:c4:5c:72:65:bb:0a:
ed:75:95:b3:a1:8b:84:38:4e:27:58:f5:6d:36:77:
ec:ac:b5:ce:d5:5f:09:fa:12:8d:c9:8a:36:cf:da:
27:85:c3:4f:cd:fc:25:4d:27:84:79:54:30:07:61:
cf:c4:05:80:e0:00:1e:7c:96:60:fa:4d:b0:03:9e:
cd:9a:48:d5:1c:46:ba:84:9c:76:79:28:22:1a:f2:
c7:0f:f7:d4:f3:40:d5:df:11:a1:9b:92:3c:67:69:
3f:39:61:e1:fb:f7:dc:23:01:6e:d6:a2:1e:5b:76:
61:bf:e1:23:d1:7a:19:fd:b3:2f:f4:33:d6:5f:68:
67:80:9f:51:fd:0e:58:4f:19:de:31:f2:6f:a2:17:
4b:7e:a6:1c:c7:81:63:16:3b:16:3e:34:0d:1e:57:
65:7a:91:49:2c:ea:54:cb:d1:9f:6f:fa:2a:07:96:
e9:73:b0:c0:5d:89:71:f6:83:12:14:f0:1d:23:af:
75:ba:a6:3f:45:5e:55:96:8d:c4:87:dc:ab:cb:37:
3b:c4:2b:e6:e0:da:70:a6:0a:87:90:44:95:f2:22:
a5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CF:DF:9A:9D:A3:6A:EB:FB:6C:7C:82:A6:23:E9:79:9A:D2:25:E8
X509v3 Authority Key Identifier:
keyid:D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/ys_fmp2jauv7bHyCpiPpeZrSJeg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.212.0.0/15
Signature Algorithm: sha256WithRSAEncryption
52:dd:04:d9:82:15:99:88:b8:e0:d6:33:75:54:e8:5b:a6:6c:
d9:40:6f:4f:0f:6d:98:32:31:d5:0a:5a:bd:72:6c:1c:b5:9d:
28:8e:29:06:01:27:4f:35:de:2a:8a:f0:43:b2:76:f8:d1:60:
2e:b7:33:16:3e:3c:60:ff:a1:08:04:80:9d:4d:32:f8:eb:d4:
33:aa:68:bb:a0:38:e5:c6:fe:ec:c1:f9:7b:94:98:2c:b5:b1:
78:2a:fd:72:00:c1:fc:21:58:b0:2e:2e:49:7d:c1:a5:52:0a:
f7:8f:03:a4:32:a4:d7:10:02:b1:e5:23:48:95:1c:9d:0c:8f:
c0:51:29:55:2d:70:09:87:6a:7a:22:2d:c6:53:cf:cd:aa:20:
9c:14:c7:48:28:7f:cc:b7:ae:42:17:62:d8:3b:bb:60:cb:d6:
28:dd:46:96:38:b8:5e:b0:a1:1f:27:c3:6f:a7:3d:88:66:a0:
87:a6:35:52:01:78:be:9f:28:58:b9:17:ae:25:77:6c:4f:49:
e7:30:10:8c:86:d6:63:b1:2e:61:4f:09:39:87:59:c4:8f:3d:
9d:3c:6c:0a:af:f7:9c:f4:95:c2:6b:8d:ca:3f:85:4f:f8:6a:
9c:d6:54:53:b2:94:3a:d0:f7:8b:83:89:c8:ec:6d:87:c4:02:
ef:02:f7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:24:08 2025 by rpki-client