Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2823/B-7MQgFvtNKue0LrOgnxsuNsnV4.roa
File: B-7MQgFvtNKue0LrOgnxsuNsnV4.roa (raw, json)
Hash identifier: 1YT2q8HbBiZuuERBcDyTFDkqu6Y/nCv6HpfxuLVeEDM=
Subject key identifier: 07:EE:CC:42:01:6F:B4:D2:AE:7B:42:EB:3A:09:F1:B2:E3:6C:9D:5E
Certificate issuer: /CN=6647DAB6455116964FAC00012CCC83174D4E46E1
Certificate serial: 19DD
Authority key identifier: 66:47:DA:B6:45:51:16:96:4F:AC:00:01:2C:CC:83:17:4D:4E:46:E1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZkfatkVRFpZPrAABLMyDF01ORuE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/B-7MQgFvtNKue0LrOgnxsuNsnV4.roa
Signing time: Mon 26 Jan 2026 06:55:09 +0000
ROA not before: Mon 26 Jan 2026 06:55:09 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 137730
IP address blocks: 2403:d9c0::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6621 (0x19dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647DAB6455116964FAC00012CCC83174D4E46E1
Validity
Not Before: Jan 26 06:55:09 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=07EECC42016FB4D2AE7B42EB3A09F1B2E36C9D5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:cc:3e:99:48:c8:9b:35:14:71:04:70:5a:
3f:f9:db:5f:39:45:c5:0e:ea:60:02:de:ec:f7:27:
2b:4a:ad:20:51:ef:a7:24:59:4d:d2:63:77:b1:a6:
b7:ef:19:75:4c:a9:6d:3c:4c:5b:58:78:8d:a2:e4:
0b:8e:fc:a5:cb:f4:90:91:4a:50:c1:40:8d:df:0c:
6d:ed:67:c2:ea:ab:82:71:4e:98:2f:63:e8:8e:d5:
a4:69:ca:82:40:ba:23:ec:6d:cc:f7:d6:a2:96:b3:
25:87:41:bd:7e:56:9c:19:ce:b6:06:d9:10:c5:bf:
5a:8b:71:ed:2f:9e:fb:84:90:80:af:27:9b:22:52:
bb:86:81:a5:01:b0:25:00:4d:be:48:8d:b9:0d:6a:
32:bd:7a:70:02:41:9e:83:7c:6f:99:a4:4f:a7:e1:
89:a3:23:36:f8:d6:0e:60:b3:85:a4:2a:9a:82:aa:
b9:0a:56:be:5b:f0:bd:00:ee:c1:1c:e7:63:e9:5b:
59:2e:e4:63:52:6a:1f:61:14:dd:22:54:32:b5:6c:
0a:83:d7:af:4f:15:60:3a:4f:d1:b9:91:1c:e6:19:
23:b4:91:ac:4e:65:ca:2e:d7:bc:f7:68:63:99:f2:
8f:95:91:28:f4:64:c5:96:e0:4f:22:4a:4b:a4:30:
38:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EE:CC:42:01:6F:B4:D2:AE:7B:42:EB:3A:09:F1:B2:E3:6C:9D:5E
X509v3 Authority Key Identifier:
keyid:66:47:DA:B6:45:51:16:96:4F:AC:00:01:2C:CC:83:17:4D:4E:46:E1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/ZkfatkVRFpZPrAABLMyDF01ORuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZkfatkVRFpZPrAABLMyDF01ORuE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/B-7MQgFvtNKue0LrOgnxsuNsnV4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:d9c0::/48
Signature Algorithm: sha256WithRSAEncryption
c4:63:d4:f7:41:03:c8:1a:b6:5a:45:8a:03:89:91:b9:2d:21:
0f:34:13:9c:1a:a3:64:5a:95:0b:af:1c:0e:d1:5c:b5:ee:2d:
2f:8f:38:15:8d:6e:f8:04:0a:b7:12:1b:14:d9:1a:59:ee:ad:
29:30:1c:42:0a:ad:5d:cf:20:eb:0b:93:0f:95:67:93:77:fc:
bb:1d:b2:01:d7:1c:db:af:2d:64:50:56:ab:8f:c0:da:a9:b3:
d6:4b:7d:8a:7a:af:06:0c:66:04:0a:5c:cd:64:43:6a:ca:41:
e5:96:68:b6:53:de:c5:ce:df:30:29:d5:5e:dc:db:e9:c3:f2:
c8:37:1d:4d:01:e6:b0:7c:76:54:b0:7b:6f:f2:7d:8f:40:c2:
29:e3:ba:af:b7:b0:67:6a:7e:ff:db:aa:69:71:46:cf:07:eb:
24:4d:99:1b:e4:47:e6:28:46:74:d8:d1:30:2c:31:63:38:2c:
de:4e:7a:eb:3e:10:d2:c0:de:5f:3c:97:52:32:cc:74:68:a5:
4c:6e:52:54:ec:c8:e2:01:50:5e:6a:cb:8a:b7:14:84:76:9e:
e5:e6:cf:c9:6e:3b:19:b6:c3:49:6c:1c:91:2c:91:07:96:8b:
03:6a:c2:6c:b0:2e:27:5d:43:89:ba:dd:5f:9c:62:86:84:b3:
45:b5:87:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:22:49 2026 by rpki-client