Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/81nbRPrs8Z69253R39KHZSn4NQY.roa
File: 81nbRPrs8Z69253R39KHZSn4NQY.roa (raw, json)
Hash identifier: Z+tgYoSQR9qo2W+f69UPacbJz+FtU4nZTEp9q1jIQyw=
Subject key identifier: F3:59:DB:44:FA:EC:F1:9E:BD:DB:9D:D1:DF:D2:87:65:29:F8:35:06
Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Certificate serial: 234B
Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/81nbRPrs8Z69253R39KHZSn4NQY.roa
Signing time: Tue 08 Apr 2025 03:09:16 +0000
ROA not before: Tue 08 Apr 2025 03:09:16 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 59067
IP address blocks: 103.202.119.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9035 (0x234b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Validity
Not Before: Apr 8 03:09:16 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F359DB44FAECF19EBDDB9DD1DFD2876529F83506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:2f:d5:39:53:f4:67:ec:db:c1:f6:79:f1:
36:74:99:af:e4:6b:d0:c9:fa:8f:c7:43:42:e5:36:
6e:4b:88:8b:7a:4a:9a:00:30:96:ef:9f:4d:e8:94:
0f:08:12:0d:b9:d0:0e:74:73:e9:b2:e8:75:4b:ff:
1a:ef:ef:cd:df:36:73:a8:82:45:de:5e:09:0e:9b:
cb:b3:b6:98:7a:88:0b:a0:1a:a6:5a:05:47:f9:76:
52:2c:46:7f:6e:a6:57:f6:97:18:e9:55:cf:28:93:
b3:26:dd:bd:ec:76:15:65:01:5b:c0:62:ea:e8:75:
40:00:ee:23:ef:da:19:5f:00:61:64:6a:cd:c4:f2:
fa:22:cf:ef:10:a2:c1:04:b0:7b:c1:3b:ea:6d:36:
d1:4e:06:28:56:93:5f:f8:92:79:93:de:ab:4e:db:
1d:84:c7:8b:fb:f7:35:c1:96:bb:d8:14:a2:a4:24:
cc:7a:bc:bb:10:37:e2:ca:ce:5a:19:18:79:d5:9d:
62:75:fa:12:0a:39:49:8c:97:8a:6c:bf:b2:d5:fe:
54:29:53:77:1b:66:e5:d8:a7:a9:08:ef:f7:3a:19:
92:b8:bd:49:33:c6:80:57:47:7a:cf:21:f3:6e:b6:
ad:78:6c:58:ae:1f:4d:60:5c:07:ba:08:e8:33:e0:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:59:DB:44:FA:EC:F1:9E:BD:DB:9D:D1:DF:D2:87:65:29:F8:35:06
X509v3 Authority Key Identifier:
keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/81nbRPrs8Z69253R39KHZSn4NQY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.202.119.0/24
Signature Algorithm: sha256WithRSAEncryption
79:2c:b0:20:f7:1d:e4:ff:cd:0c:87:94:a3:32:a8:7b:7c:02:
db:5f:02:8f:73:71:d8:79:04:56:e9:73:99:76:f0:f3:65:91:
ab:f4:30:da:95:c5:10:7e:a4:a1:fa:53:9d:39:da:c8:0a:b3:
39:6c:f5:43:38:84:1f:b7:03:8c:f6:c2:a3:2c:da:8e:5d:ef:
3f:89:3d:1e:1e:89:24:c8:74:d1:33:b7:fe:f8:2e:a5:7b:1f:
be:43:42:2d:cc:2a:84:7a:aa:04:6c:09:d2:80:54:4e:97:4c:
cb:be:17:45:9a:95:73:e6:98:d1:45:23:6d:26:11:e9:20:f0:
54:3f:52:3f:f6:77:8b:a5:9d:68:72:b4:07:ad:16:ae:b1:0d:
c0:88:bf:8c:84:73:75:e3:a1:20:2b:40:19:6d:d4:ce:78:c5:
2b:5e:48:2d:28:5d:f6:3e:d1:8e:20:5b:fd:38:3c:12:ae:b8:
fb:7d:9d:ea:49:46:dd:d5:89:db:c7:7c:55:86:66:bf:29:bc:
8e:59:c8:b7:65:4c:0e:b5:9e:42:b0:60:fd:15:2d:e5:4e:fd:
c2:01:60:f3:f7:b2:c4:6a:4a:f7:c5:96:e3:66:6c:cf:62:c5:
33:b4:4d:b5:ba:08:37:97:fc:ce:77:77:7a:45:94:e8:b6:fa:
62:50:39:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:39:40 2025 by rpki-client