Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/abwEwMGC8Wbz69nh_sfvc9CyRiw.roa
File: abwEwMGC8Wbz69nh_sfvc9CyRiw.roa (raw, json)
Hash identifier: 0bYFUPmaMtvFDJes/9viHz8rKlHPteR5iGPYKcHT6Wk=
Subject key identifier: 69:BC:04:C0:C1:82:F1:66:F3:EB:D9:E1:FE:C7:EF:73:D0:B2:46:2C
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: EB
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/abwEwMGC8Wbz69nh_sfvc9CyRiw.roa
Signing time: Fri 06 Jun 2025 02:37:05 +0000
ROA not before: Fri 06 Jun 2025 02:37:05 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 9808
IP address blocks: 240a:40c4:2000::/44 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jun 6 02:37:05 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=69BC04C0C182F166F3EBD9E1FEC7EF73D0B2462C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:c2:fb:c3:78:c2:b7:b3:50:ab:eb:82:eb:
c7:5d:f6:aa:77:e7:7c:0c:03:56:b7:98:a3:d1:57:
52:ec:e4:ee:a6:e4:e4:7f:ec:71:e7:f3:9f:46:cf:
ec:98:56:40:73:89:2b:23:28:e5:a3:9c:9c:72:02:
18:15:c6:f5:0e:44:b3:67:e8:26:f9:31:ee:ce:ce:
e9:cb:35:09:22:f9:24:5d:d3:8b:9e:7e:4d:37:28:
25:af:99:cb:be:c0:ee:ca:cd:61:7b:8c:a7:0b:81:
a9:61:3b:c2:7d:00:33:b1:e1:05:86:de:1e:71:4f:
c6:64:0a:2f:cf:4e:98:3f:af:4a:a7:d2:80:62:02:
f4:42:82:3a:d2:85:c1:31:88:52:90:3a:cb:5d:28:
cd:68:05:52:d6:0f:b8:98:4f:f1:16:9f:40:f0:e8:
80:58:bf:4e:11:ed:6f:90:5a:35:3c:bc:92:00:19:
1b:54:53:61:f0:b3:b4:30:01:51:9e:a0:73:dd:ae:
96:c6:0b:66:b9:9f:f5:d6:92:65:70:86:72:32:ef:
73:24:0d:4c:97:97:bc:1f:2a:b2:ff:ef:cd:65:90:
c8:4a:36:e9:73:41:9a:37:7f:4e:2a:63:3c:3a:4a:
74:b2:ea:0b:8d:c1:b6:8d:e8:ce:ea:6c:45:49:74:
04:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BC:04:C0:C1:82:F1:66:F3:EB:D9:E1:FE:C7:EF:73:D0:B2:46:2C
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/abwEwMGC8Wbz69nh_sfvc9CyRiw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:40c4:2000::/44
Signature Algorithm: sha256WithRSAEncryption
bc:49:d2:6c:9a:29:f3:e2:cf:96:5f:13:3a:72:e6:be:48:ca:
ee:a6:d2:b5:55:4b:a1:0d:55:ee:1a:55:25:aa:42:e8:31:60:
d0:f2:2f:99:b3:dd:e8:d9:8d:f9:0c:d0:e0:ea:5b:b1:c5:31:
f7:47:9f:cf:46:a8:0d:27:26:f6:18:28:26:5c:72:4f:ea:dc:
fd:56:01:c4:70:1b:9f:ea:fa:0a:97:2d:19:61:28:83:4e:04:
79:59:08:21:00:e2:4b:45:fe:a8:06:52:4d:74:f0:d4:e3:2c:
5a:e3:6c:a6:75:91:60:e9:1a:22:8e:61:82:24:87:18:17:ff:
47:91:14:cb:5b:95:43:d5:38:44:af:e2:f7:98:81:1a:ef:14:
9d:9a:20:ff:39:ec:88:20:45:a8:da:d0:61:c7:e8:8c:ca:83:
46:8f:4d:ed:c9:fb:a9:69:5e:d6:27:17:9f:24:6d:2f:26:35:
9a:f9:66:01:58:6c:d2:8f:f0:79:72:65:42:f5:37:8c:02:c1:
3e:f4:99:11:a2:d0:9a:44:42:e1:f8:e0:06:1f:4d:67:79:9f:
f9:cd:82:75:ae:22:28:f0:27:11:4c:07:95:55:a9:dd:80:9e:
ba:df:9d:bb:2f:92:96:94:78:36:88:b4:28:71:6d:e5:ed:37:
50:72:e9:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 22 17:51:08 2025 by rpki-client