Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/p9ubpZanmXqYe6tJnYbUOcce8jU.roa
File: p9ubpZanmXqYe6tJnYbUOcce8jU.roa (raw, json)
Hash identifier: YzWZ0hIAwu1HwpGzrzp5i4hFaiBA8jl+CmUB/QWgAeg=
Subject key identifier: A7:DB:9B:A5:96:A7:99:7A:98:7B:AB:49:9D:86:D4:39:C7:1E:F2:35
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 1BF7
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/p9ubpZanmXqYe6tJnYbUOcce8jU.roa
Signing time: Fri 17 Jan 2025 01:26:38 +0000
ROA not before: Fri 17 Jan 2025 01:26:38 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4515
IP address blocks: 123.49.237.0/24 maxlen: 24
123.49.242.0/24 maxlen: 24
123.49.246.0/24 maxlen: 24
123.49.247.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7159 (0x1bf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: Jan 17 01:26:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A7DB9BA596A7997A987BAB499D86D439C71EF235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:a4:40:cd:56:5e:bb:1c:62:e0:02:16:12:
b3:11:f4:76:f0:2c:09:67:2e:1e:fd:6e:06:79:81:
12:e1:24:3e:8a:c9:28:07:da:14:c6:2a:37:ee:09:
74:1d:71:ca:62:3a:a2:15:33:72:a1:ba:67:88:3b:
83:99:8f:7d:53:c1:b5:17:2c:2b:f1:8a:1e:1b:fc:
4d:99:e0:35:cc:3c:d6:07:57:58:4e:0d:0d:93:51:
08:34:20:8c:de:df:76:56:7c:c8:19:2f:96:02:06:
bd:de:bb:a9:04:86:09:f7:2e:c8:5f:af:e1:2a:f6:
47:03:21:15:ad:30:5e:c8:98:ce:34:9e:a8:71:8c:
4d:e9:e8:a3:06:a1:fa:8c:bb:52:9f:8c:60:56:b4:
be:43:1f:80:bc:ff:9d:41:78:e3:18:7b:5c:f6:a2:
e2:16:7d:8a:fb:3e:14:44:bb:25:1f:bf:b6:e4:f0:
3f:49:ca:d4:7a:9b:58:81:bb:ee:5d:e5:52:4a:b6:
6b:34:fa:3d:be:3e:4b:d9:d3:20:92:fd:91:e7:3f:
56:87:ba:35:30:41:ad:25:1d:92:ed:90:cc:82:a8:
b0:89:aa:4d:4b:52:90:24:75:31:f8:f4:79:69:d7:
ee:50:94:75:0e:28:4c:54:8f:b2:af:1c:1e:bd:95:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DB:9B:A5:96:A7:99:7A:98:7B:AB:49:9D:86:D4:39:C7:1E:F2:35
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/p9ubpZanmXqYe6tJnYbUOcce8jU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.237.0/24
123.49.242.0/24
123.49.246.0/23
Signature Algorithm: sha256WithRSAEncryption
69:96:ef:4c:a8:2e:ad:ae:ee:25:25:b9:d5:a5:ff:5e:e6:c1:
62:88:a7:88:c3:54:6b:b8:9e:47:aa:a3:28:d1:0f:94:2d:c2:
54:01:20:25:17:c7:37:68:dd:1e:88:ca:43:85:de:34:26:d2:
bf:f1:59:12:a3:fa:a3:45:17:94:78:6f:39:29:f4:ae:2a:ea:
d8:43:b0:fc:1e:1c:47:b1:3c:36:da:03:9d:31:66:67:40:79:
31:1c:f1:80:db:23:11:ee:7e:1c:09:2d:9b:48:1e:ae:e0:f0:
30:f7:ce:6c:99:90:20:75:2b:80:f6:15:4e:ac:97:30:1c:b2:
3f:dc:c3:66:1f:d7:57:81:57:c7:43:00:50:bb:cd:52:c0:31:
ad:1e:83:6d:e1:52:b2:e6:ef:85:5c:36:09:8d:ea:ae:98:7f:
ab:94:74:ff:4e:2a:ef:79:2b:9e:04:19:52:77:9f:2c:40:53:
5b:a8:85:c8:ce:8e:21:41:85:3c:ec:e2:50:a7:40:a7:03:bc:
7f:a9:52:b4:af:bb:1b:6c:c4:00:ac:96:4d:cc:c3:6a:64:6f:
9e:91:31:05:01:60:e2:ea:ad:3b:e0:59:db:43:3a:f8:7c:cd:
2c:16:df:07:d4:2a:64:5f:95:0a:6c:a0:45:20:79:c6:3f:96:
6b:dc:f6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:12:49 2025 by rpki-client