Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/242/OfG8EM7TlmfgDQK2fphCmwNipTg.roa
File: OfG8EM7TlmfgDQK2fphCmwNipTg.roa (raw, json)
Hash identifier: TyDBrbN3myN+sZ6CN/BLu7Dd/j06TToWBDA6q6Kqcjc=
Subject key identifier: 39:F1:BC:10:CE:D3:96:67:E0:0D:02:B6:7E:98:42:9B:03:62:A5:38
Certificate issuer: /CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA
Certificate serial: 1A71
Authority key identifier: 0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/OfG8EM7TlmfgDQK2fphCmwNipTg.roa
Signing time: Thu 26 Feb 2026 03:19:49 +0000
ROA not before: Thu 26 Feb 2026 03:19:49 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 37963
IP address blocks: 121.0.16.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6769 (0x1a71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA
Validity
Not Before: Feb 26 03:19:49 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=39F1BC10CED39667E00D02B67E98429B0362A538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:cf:27:2e:6f:a0:a8:5d:cf:9e:47:ba:98:
8c:78:d3:19:ab:f5:07:8f:2e:e5:7e:62:56:c6:d2:
14:ad:87:89:99:fa:ee:9c:e8:91:e2:b6:0d:67:5c:
ba:c2:af:23:a3:13:f1:61:e2:4a:8d:e5:e0:a9:9b:
d5:63:0f:c2:d6:7e:46:4a:97:8b:e3:97:27:91:75:
d6:35:a2:59:3f:de:5b:1a:bb:63:fe:7d:d3:9e:b1:
36:9c:40:d7:f4:fc:34:60:18:d9:f2:c3:de:27:06:
d5:fc:55:18:36:d3:cc:0f:54:eb:95:d8:1c:c7:43:
cc:a1:e6:9d:99:60:16:c9:e5:f9:1e:5f:a4:d1:d9:
9d:8a:87:a4:27:9f:67:c0:8a:a5:80:7b:80:64:d1:
45:87:0a:42:7f:ab:a4:c5:ae:c3:0d:8f:9a:8f:10:
04:56:38:73:aa:29:86:de:ba:91:2a:57:35:e7:aa:
89:f0:e4:55:a5:73:26:e7:d8:b4:ad:e2:41:02:6c:
75:60:89:10:09:5c:24:b8:67:29:4b:0a:9d:de:49:
f2:73:92:ea:84:ea:64:46:07:86:dc:e9:48:1a:ca:
7b:07:2c:f6:d0:67:83:b8:e0:77:34:50:44:20:16:
77:80:17:14:2f:2a:0b:78:2d:4e:71:a2:3e:f9:a2:
4c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F1:BC:10:CE:D3:96:67:E0:0D:02:B6:7E:98:42:9B:03:62:A5:38
X509v3 Authority Key Identifier:
keyid:0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/OfG8EM7TlmfgDQK2fphCmwNipTg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.0.16.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:f5:13:43:d1:96:33:15:9d:a7:78:b2:3d:1f:bd:56:c9:8c:
c6:68:e1:0d:f1:58:16:e5:33:ec:71:fa:21:95:b7:bc:60:ed:
9f:4d:97:3c:89:0a:9c:28:5c:65:d6:81:2b:23:4d:ee:4b:b4:
7a:b0:0f:18:69:1f:8c:59:68:41:5b:31:d2:f9:ca:b2:e3:04:
b9:4e:af:25:2e:8f:f9:ab:4c:61:39:85:0f:b6:7e:22:48:ab:
5a:23:c5:f5:2f:52:80:72:13:a7:12:67:b5:44:ca:b9:d1:ac:
c8:1d:c3:df:5e:84:5a:a6:03:ea:a3:d8:39:08:2b:9e:8b:ac:
24:ff:64:75:47:9c:70:54:81:41:fb:f0:e5:48:99:e6:c5:6f:
e7:1f:e5:f4:d5:04:84:6a:27:52:af:41:73:e0:8e:5d:54:8c:
1d:48:6a:25:46:c2:69:7f:64:12:b4:18:a3:45:9f:78:10:44:
4e:d6:e6:75:45:13:6a:ea:83:15:fe:8a:b9:0f:4f:06:fb:48:
32:6d:10:83:0a:82:c7:42:5c:04:08:d7:56:a7:0f:4c:ec:a4:
fe:95:3f:cf:d0:5d:ed:08:47:2c:f8:7d:46:40:94:24:48:42:
24:75:6b:86:c0:1e:55:b6:e5:48:d3:7e:30:0b:2b:c2:33:07:
77:48:b3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:18:55 2026 by rpki-client