Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/-3h7S0047rHxF4Vwq2p5erJsoAg.roa
File: -3h7S0047rHxF4Vwq2p5erJsoAg.roa (raw, json)
Hash identifier: YiFdLoxvISeRSd3nBXAmtvYhro8JYnSjetEDuAF7oi4=
Subject key identifier: FB:78:7B:4B:4D:38:EE:B1:F1:17:85:70:AB:6A:79:7A:B2:6C:A0:08
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 18DF
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/-3h7S0047rHxF4Vwq2p5erJsoAg.roa
Signing time: Tue 10 Feb 2026 05:00:46 +0000
ROA not before: Tue 10 Feb 2026 05:00:46 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 55990
IP address blocks: 115.32.112.0/21 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6367 (0x18df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Feb 10 05:00:46 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=FB787B4B4D38EEB1F1178570AB6A797AB26CA008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:37:b8:70:87:f0:bc:09:a2:60:f2:e6:02:
47:29:3c:6e:55:a3:46:d1:6a:51:e5:62:75:6f:31:
e5:54:1e:a1:9f:dc:8d:b3:27:a9:82:6a:4a:58:89:
9a:0b:77:01:75:10:27:6b:9b:2a:b0:fe:b5:b3:52:
23:ca:6e:0a:a7:c8:65:78:e2:e4:dc:0b:70:bc:e6:
00:70:1c:c5:06:06:d5:a4:1a:73:b6:30:d5:59:a0:
e6:da:7c:8e:a7:81:a5:8c:7d:10:f7:d5:50:98:8a:
79:ec:83:64:b9:db:ec:47:84:0d:67:b8:ce:4e:64:
8f:d1:76:0f:66:2b:68:c1:ac:48:67:3b:a2:46:08:
fb:63:e5:e7:1c:65:e7:a8:10:78:40:af:59:bf:37:
e8:88:1d:04:4e:b8:57:67:7c:e0:c4:cf:a2:6f:29:
d6:b8:04:4a:49:9e:71:38:22:92:69:d2:ab:77:3e:
62:18:5a:5a:85:b2:30:9b:2d:37:91:c1:34:43:f9:
06:11:98:fd:38:19:06:16:46:22:e3:a4:6f:26:7e:
26:e6:d2:22:d6:fd:01:64:f2:34:3a:d4:a6:7d:cd:
d1:d7:7a:7e:1c:aa:00:a6:96:2d:81:e2:63:66:7f:
64:dd:25:0e:7f:24:ba:c9:92:c8:e2:c2:42:d8:9b:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:78:7B:4B:4D:38:EE:B1:F1:17:85:70:AB:6A:79:7A:B2:6C:A0:08
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/-3h7S0047rHxF4Vwq2p5erJsoAg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.32.112.0/21
Signature Algorithm: sha256WithRSAEncryption
34:6a:73:a8:de:ac:1e:b9:cb:08:85:be:d8:20:93:ae:a6:9f:
e3:bf:b2:4f:6d:ac:d2:5d:b4:db:13:16:80:06:b5:7a:bb:8d:
83:84:1f:8d:ae:23:a2:af:8f:39:15:03:0b:60:12:a3:6a:16:
9b:c1:af:53:2c:e8:27:5e:f9:0c:46:07:d6:f6:09:cd:ed:c0:
15:91:7e:f0:63:49:c5:ef:7f:61:a0:6f:d0:61:6c:27:35:cc:
af:0f:95:51:fc:b9:cd:ea:bf:6e:b6:b4:c5:5d:d5:b5:58:fb:
d4:a3:5c:6b:f5:6c:1d:58:91:72:2f:02:0b:40:e4:a8:6c:cb:
57:b7:2e:c2:92:93:a0:e6:5b:81:6f:e9:f0:33:60:78:f8:53:
05:27:4b:c8:3f:88:e8:39:e8:36:b6:7f:de:ea:c3:66:5f:a4:
d3:a6:e9:6d:e8:ac:02:88:34:91:92:f2:cc:d2:23:1f:df:da:
1c:13:ec:8c:40:b0:58:97:41:0c:df:0e:bb:f7:99:ee:07:3d:
e5:5e:9d:9c:d7:f2:a6:2c:5a:91:1a:aa:c3:87:9b:60:5a:80:
6a:47:41:3a:e7:da:72:94:1a:37:a4:25:54:1d:06:a7:96:11:
96:a6:94:be:2b:32:be:7f:73:06:dd:fd:73:bf:bb:d1:66:5c:
41:32:1d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:56:18 2026 by rpki-client