Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/0Nu-ogMGfw1_oT15S_chU1f3EeA.roa
File: 0Nu-ogMGfw1_oT15S_chU1f3EeA.roa (raw, json)
Hash identifier: AfC84XvODNHB4U5eO/Hypy3Dp8k/4VmY8iSjyNXpxDY=
Subject key identifier: D0:DB:BE:A2:03:06:7F:0D:7F:A1:3D:79:4B:F7:21:53:57:F7:11:E0
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: E2
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/0Nu-ogMGfw1_oT15S_chU1f3EeA.roa
Signing time: Fri 06 Jun 2025 02:36:24 +0000
ROA not before: Fri 06 Jun 2025 02:36:24 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 9808
IP address blocks: 240a:40c3:6010::/44 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jun 6 02:36:24 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=D0DBBEA203067F0D7FA13D794BF7215357F711E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:0c:7b:a9:51:98:14:6f:9e:8f:69:c1:18:
e4:76:c5:3b:89:c4:63:a0:77:45:48:5b:80:40:e7:
2b:b0:03:5c:94:95:5e:3b:ff:b5:6d:88:f8:9f:e1:
fb:5b:bf:e0:7a:18:59:68:8e:33:9e:82:08:82:bf:
45:f3:7c:07:63:d0:8a:18:84:e9:a2:70:bc:21:f7:
44:71:a0:08:ac:06:b0:8e:67:d2:a8:06:f6:fc:a9:
6c:f3:c0:d1:7c:73:88:e2:15:02:73:11:e1:57:fe:
d0:24:dc:2d:87:01:02:fd:67:0c:41:4c:c3:a7:de:
9f:e7:59:5d:e9:fc:29:1c:da:8a:1e:8f:2b:7f:1f:
d0:26:b5:04:d2:74:fe:2f:b6:3a:58:5f:5a:79:30:
f9:e8:d6:5c:ed:76:8e:e7:fd:15:4c:ab:4c:bc:0e:
07:c5:e0:42:1a:24:f9:ac:e2:cc:38:34:2f:9b:ef:
d4:81:3c:ef:8d:77:73:88:ef:b7:95:30:88:c5:c4:
ba:d9:41:4d:40:e5:48:be:c9:85:67:46:00:40:eb:
bc:e6:a1:51:63:73:02:d0:1f:60:8a:a4:5c:cb:ac:
82:be:71:0a:f4:3a:ee:f1:c1:53:a3:18:3e:cd:33:
ae:c5:68:f7:10:25:67:36:1e:ed:36:1c:32:79:7a:
fc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DB:BE:A2:03:06:7F:0D:7F:A1:3D:79:4B:F7:21:53:57:F7:11:E0
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/0Nu-ogMGfw1_oT15S_chU1f3EeA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:40c3:6010::/44
Signature Algorithm: sha256WithRSAEncryption
2f:53:59:e5:70:bb:2f:ef:1e:74:40:f8:f6:36:c2:51:60:37:
e9:98:54:8c:f3:29:eb:68:a2:bc:e1:01:79:e4:71:cd:81:44:
d9:4c:c3:a4:af:92:26:50:19:87:56:59:fd:f5:35:de:44:1d:
0f:00:a7:92:c7:1e:11:08:08:b0:b6:93:3c:b8:a3:ff:b9:40:
de:f1:cd:0e:98:de:1c:eb:05:fd:05:a4:22:03:b8:59:73:37:
82:4e:23:c1:1b:42:04:96:ba:62:a3:1b:7c:71:f0:41:1d:51:
cb:a2:19:f6:2d:79:7a:98:d1:2c:24:ee:d3:7a:7c:60:11:90:
cb:cf:ba:9b:da:85:cb:d2:87:b6:82:38:76:94:33:0b:41:35:
4f:0f:26:c1:1e:6f:7d:35:15:8e:73:5f:16:7f:2c:60:04:1e:
f5:96:40:db:a6:61:0e:9b:ed:12:9f:a2:aa:9f:8f:82:e7:34:
10:0e:e3:ff:ae:3d:98:82:18:2d:07:1e:10:76:22:7a:b6:d4:
5a:0a:bb:b0:dc:3d:81:84:7f:04:44:dc:60:03:a1:98:b2:d5:
ab:72:a6:6b:ad:fd:3d:be:ac:94:25:ce:8e:2c:c5:34:6f:f9:
93:95:cd:aa:f2:23:54:f3:85:e1:66:75:97:d8:30:38:b5:67:
06:99:0a:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 20 12:07:36 2025 by rpki-client