Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/8ZO66rcR9nwvXQ_2R9_uqXDgkFQ.roa
File: 8ZO66rcR9nwvXQ_2R9_uqXDgkFQ.roa (raw, json)
Hash identifier: StSo0cVjWN1em0gavnIIDJ9P278UpnjzSIZioUED/ys=
Subject key identifier: F1:93:BA:EA:B7:11:F6:7C:2F:5D:0F:F6:47:DF:EE:A9:70:E0:90:54
Certificate issuer: /CN=715B46D9F995777FA3143263D54A6E676A906EAB
Certificate serial: 4EBC
Authority key identifier: 71:5B:46:D9:F9:95:77:7F:A3:14:32:63:D5:4A:6E:67:6A:90:6E:AB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/8ZO66rcR9nwvXQ_2R9_uqXDgkFQ.roa
Signing time: Wed 09 Apr 2025 06:48:30 +0000
ROA not before: Wed 09 Apr 2025 06:48:30 +0000
ROA not after: Thu 09 Apr 2026 06:41:15 +0000
asID: 398704
IP address blocks: 103.72.120.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20156 (0x4ebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715B46D9F995777FA3143263D54A6E676A906EAB
Validity
Not Before: Apr 9 06:48:30 2025 GMT
Not After : Apr 9 06:41:15 2026 GMT
Subject: CN=F193BAEAB711F67C2F5D0FF647DFEEA970E09054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:55:f9:3a:7d:4f:16:75:2d:95:cf:14:7d:
cb:c4:78:4a:24:0e:07:5d:2a:d9:f7:01:ac:98:ef:
e6:5b:48:a1:b1:b4:37:cd:6d:84:04:22:ec:39:a3:
d3:1e:eb:e3:6a:6c:a8:03:e3:98:41:ca:9b:c1:1d:
af:ac:f6:cb:c5:6e:18:d4:32:ba:bc:22:17:96:4e:
70:13:38:e2:c4:4b:91:6e:55:1a:7a:78:db:21:bf:
f2:5b:f7:9e:63:5c:61:96:bc:fe:c2:98:67:f9:f2:
57:55:8f:da:a6:68:38:b3:18:5f:ce:fb:59:64:c5:
e3:6e:a6:dc:29:67:47:68:d9:c6:7c:03:d6:c2:59:
d5:9d:70:dd:7d:5b:da:8d:13:65:8a:a1:54:f4:31:
5a:05:72:c3:14:f4:fd:ed:16:fb:45:1a:1c:12:15:
9e:69:2f:5c:3d:76:af:37:ce:65:56:e0:a7:25:cc:
36:88:58:d6:d2:27:63:f1:d1:30:e3:0f:e4:ee:7f:
cc:b3:97:88:ec:82:3e:b0:a1:43:68:34:0c:94:ff:
23:2d:48:80:56:f8:4d:82:1f:95:ac:d9:00:ef:22:
4e:e2:67:ab:eb:4d:46:f0:b3:40:fd:8f:59:f1:38:
5b:6b:6f:6a:dc:1d:96:b7:3a:18:d7:5e:01:44:f5:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:93:BA:EA:B7:11:F6:7C:2F:5D:0F:F6:47:DF:EE:A9:70:E0:90:54
X509v3 Authority Key Identifier:
keyid:71:5B:46:D9:F9:95:77:7F:A3:14:32:63:D5:4A:6E:67:6A:90:6E:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/8ZO66rcR9nwvXQ_2R9_uqXDgkFQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.120.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:14:66:93:0c:9d:78:d5:0e:f9:a2:e2:55:c0:f6:45:24:b2:
c2:2c:2a:b0:d4:30:b3:f3:4f:67:1a:20:52:b8:f8:10:46:2a:
6e:98:49:76:fe:81:6a:cd:e0:c6:a3:46:4b:6b:ef:b3:b8:c8:
8b:66:0d:98:88:41:54:74:da:df:24:dd:b9:83:97:ce:e8:50:
0b:ca:3a:83:41:93:2a:95:a4:9f:68:e2:97:ac:94:84:f9:50:
59:d9:0c:8a:cb:13:c2:1b:64:d4:7d:15:e0:bb:cc:94:2c:43:
d2:a2:8e:f4:81:86:3d:6e:68:8f:a7:a2:db:07:4f:b1:72:7e:
26:e3:4e:dd:18:9f:39:5e:49:8a:53:bd:e7:31:cd:82:64:8b:
15:16:f4:59:24:8a:2c:a0:ba:c5:c5:ec:99:03:d5:37:34:03:
5d:3b:c0:06:d9:e4:ad:8e:71:aa:bf:43:81:c7:66:31:e3:71:
7b:73:fa:e0:41:ba:3e:47:51:62:e8:68:bc:0f:70:d2:70:7a:
f3:37:53:2a:68:3f:b9:53:36:69:fd:1a:26:2a:03:41:aa:f0:
ac:70:15:b7:d8:8d:7c:e6:fa:70:59:d0:3b:79:97:d3:90:4a:
84:99:e8:ba:cb:b5:84:cd:a2:fc:af:e1:56:4f:54:86:40:e5:
22:b7:a6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:39:44 2025 by rpki-client