Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/242/h_XlbGTtRdzPycnUPkMv_VsHxOk.roa
File: h_XlbGTtRdzPycnUPkMv_VsHxOk.roa (raw, json)
Hash identifier: wUQYuAK1iwgoTRU6i5LJSCAg+l17CLiMUySwmIS4GKA=
Subject key identifier: 87:F5:E5:6C:64:ED:45:DC:CF:C9:C9:D4:3E:43:2F:FD:5B:07:C4:E9
Certificate issuer: /CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA
Certificate serial: 1A73
Authority key identifier: 0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/h_XlbGTtRdzPycnUPkMv_VsHxOk.roa
Signing time: Thu 26 Feb 2026 03:19:49 +0000
ROA not before: Thu 26 Feb 2026 03:19:49 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 37963
IP address blocks: 110.75.192.0/19 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6771 (0x1a73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA
Validity
Not Before: Feb 26 03:19:49 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=87F5E56C64ED45DCCFC9C9D43E432FFD5B07C4E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:1c:9d:fc:b5:e3:da:3a:de:9e:21:c4:28:
bc:86:75:8b:8a:a5:a6:bc:8b:36:77:bd:7f:8c:f5:
6a:87:69:5e:1a:09:c4:d6:f5:a2:03:58:65:2b:a5:
64:7a:36:2e:44:d0:39:c7:ea:f9:e4:68:42:38:68:
45:e8:23:f1:12:87:a3:23:dc:da:1f:3d:cf:cb:5b:
c7:7b:f7:bf:9a:ce:af:ac:22:b1:d4:8d:aa:b2:d8:
1b:5e:78:cd:2f:26:e5:0f:d1:ee:b9:94:ed:22:95:
35:da:1f:7c:64:ec:e3:42:6d:ad:db:b1:42:99:35:
dc:0f:0b:e2:4c:7f:4f:99:4e:b3:ee:d7:cc:4a:4b:
c5:a1:a6:fc:a5:47:65:ea:ae:d1:dd:bf:9d:61:f3:
95:51:0c:ba:91:12:be:cf:97:37:a0:17:2d:4d:68:
2f:05:75:02:96:a0:07:60:e8:e9:f8:13:c0:6a:2d:
7a:82:a2:1e:28:54:5d:5b:49:f1:60:1c:96:04:47:
e1:7a:1e:f0:f9:d0:fb:17:1c:36:44:34:83:37:2f:
e4:13:cf:b4:81:99:bd:82:2b:5f:4c:d6:63:8a:7e:
90:46:3d:f0:e0:eb:08:70:0d:9e:13:5b:74:22:e0:
1f:5c:83:cb:a8:08:9a:2f:3a:d6:de:90:45:89:cd:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F5:E5:6C:64:ED:45:DC:CF:C9:C9:D4:3E:43:2F:FD:5B:07:C4:E9
X509v3 Authority Key Identifier:
keyid:0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/h_XlbGTtRdzPycnUPkMv_VsHxOk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.75.192.0/19
Signature Algorithm: sha256WithRSAEncryption
27:3d:bd:90:db:8c:5e:18:29:90:08:4a:b1:c5:7a:31:da:4d:
27:0a:8c:64:9b:a0:7c:57:cf:af:3d:82:b0:73:3b:d8:75:f4:
2a:2e:67:77:b2:e1:e9:57:62:ec:2a:e4:e4:58:8c:27:05:41:
36:30:0b:8e:71:2a:38:f1:12:3c:9e:9f:2d:18:cd:f5:27:15:
f1:fc:e2:90:38:ba:f3:91:74:cd:c7:76:26:fe:84:67:39:f3:
bc:00:6b:2b:5d:ff:b5:6a:e8:73:6f:6a:42:5e:6e:9d:b5:b4:
71:c7:95:c5:fa:2a:ad:49:d4:4c:2a:3e:e7:ed:07:06:89:b9:
f6:25:1d:4b:ff:86:66:97:77:ad:ce:ed:b5:ce:c4:ba:1e:88:
9c:bc:7c:de:6e:38:68:dc:ce:34:dc:e8:89:c7:69:3d:a7:80:
23:bf:a8:37:41:3b:d0:f5:49:fc:b0:90:ad:d9:f9:cf:dd:6e:
5a:2e:94:77:5b:b8:af:8e:02:74:be:49:49:75:28:2c:88:0f:
f4:c7:6e:e4:9b:ef:7f:b8:17:3c:f4:23:52:85:fc:32:ff:07:
eb:71:0a:c7:8d:49:f6:99:c2:2c:fe:ad:87:18:46:f5:13:93:
61:7d:44:d2:8c:73:a2:b0:08:5e:ab:6e:72:eb:e2:27:81:94:
9e:f0:fe:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:18:48 2026 by rpki-client