Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/1d2pREnK7BBWYZwSFO0abGp7GXo.roa
File: 1d2pREnK7BBWYZwSFO0abGp7GXo.roa (raw, json)
Hash identifier: wkR1lGXucq9LhXuTAFoMUqhb5R3K40IzZo2zGa1pin8=
Subject key identifier: D5:DD:A9:44:49:CA:EC:10:56:61:9C:12:14:ED:1A:6C:6A:7B:19:7A
Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Certificate serial: 2344
Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/1d2pREnK7BBWYZwSFO0abGp7GXo.roa
Signing time: Tue 08 Apr 2025 03:06:31 +0000
ROA not before: Tue 08 Apr 2025 03:06:31 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 59067
IP address blocks: 103.36.96.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9028 (0x2344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Validity
Not Before: Apr 8 03:06:31 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D5DDA94449CAEC1056619C1214ED1A6C6A7B197A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8b:34:46:3e:f4:d3:d1:fb:b4:1c:d1:bc:65:
fb:a9:f7:f2:03:b5:0b:ef:15:9f:23:03:60:48:2d:
da:56:60:41:6a:15:7e:d7:0b:7e:51:4b:d0:37:de:
a8:49:cd:94:f1:7d:84:02:e2:54:f5:76:86:e1:64:
6a:15:19:68:fc:8f:ea:b5:6c:a4:86:1c:3d:51:4b:
42:db:50:33:66:68:95:25:4a:a4:e2:17:df:41:88:
93:1b:fc:ff:7d:ea:d1:cd:dc:fa:c7:c0:a2:05:a1:
75:15:43:a2:f8:de:ae:26:36:ab:d9:59:81:a1:8d:
15:33:6a:11:f1:ce:5f:99:c8:5b:dc:f4:df:95:b6:
2a:cc:78:dd:65:cb:85:5c:13:8e:6d:86:1b:78:f4:
f1:7b:c2:82:d7:18:f7:8f:15:9f:a0:d8:6a:ec:04:
83:59:25:cb:89:35:36:a6:55:71:03:e3:a9:01:fd:
03:bc:98:7d:de:a6:15:be:c4:ea:5c:5c:fd:e0:d2:
82:6d:7b:9c:42:e5:72:5e:6e:19:d2:75:3c:5d:8c:
1f:61:a5:00:dd:6e:ed:e6:b9:26:01:65:39:d1:de:
16:b8:6d:25:f4:fd:f2:f1:0d:1b:a6:2d:55:e9:e9:
de:0b:bd:f3:7d:e4:f8:cb:f8:f2:86:50:62:dc:57:
6c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DD:A9:44:49:CA:EC:10:56:61:9C:12:14:ED:1A:6C:6A:7B:19:7A
X509v3 Authority Key Identifier:
keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/1d2pREnK7BBWYZwSFO0abGp7GXo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.36.96.0/22
Signature Algorithm: sha256WithRSAEncryption
32:e7:22:db:cb:17:d2:bf:66:49:eb:95:2f:f6:20:46:b1:12:
2f:86:10:d1:68:8a:81:04:9a:2f:70:a4:bb:85:56:a7:b5:bb:
cf:fa:2b:5e:2d:8b:72:8d:fd:a9:d4:85:96:97:07:a9:ef:d6:
fd:a8:15:86:f2:8e:6e:70:97:b6:e5:03:66:ef:77:ca:7c:89:
6a:e8:24:f0:b5:f7:8d:e7:20:29:2b:2f:05:16:1c:0d:62:78:
e3:ff:9f:19:9f:8d:97:cb:b8:c1:10:17:db:ca:d1:85:b4:14:
fb:2b:1a:60:ce:36:9d:c1:83:55:a8:58:6e:50:5d:4e:79:c8:
0c:d3:cd:e1:a8:87:1d:41:00:a9:30:25:58:e9:61:f9:94:a3:
49:09:7b:40:5b:93:d0:72:3e:70:47:96:52:dd:4b:3d:81:60:
52:3f:7d:1f:ee:30:46:9a:7d:1c:fc:89:b6:ba:5e:d2:ad:e8:
3a:0a:e9:78:ec:88:3d:42:f4:5f:6d:ff:94:d4:99:d4:83:db:
5d:59:b4:09:a3:b3:a8:67:0f:77:f5:ef:54:93:6f:65:d2:92:
e7:0f:4e:72:0f:d3:b7:ed:9f:e2:b4:42:a2:59:50:b1:d3:89:
fb:d8:b1:9d:e8:df:74:cc:2c:6b:67:23:a2:8b:e3:34:81:7f:
b3:b2:fb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:39:45 2025 by rpki-client