Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/Ij9Vl-MgTsRIjJHR3urFXjQ7A-Y.roa
File: Ij9Vl-MgTsRIjJHR3urFXjQ7A-Y.roa (raw, json)
Hash identifier: nbmCEOf5pnw3c/OZHU3qvP/xpRmTffTsJixfJpiggSk=
Subject key identifier: 22:3F:55:97:E3:20:4E:C4:48:8C:91:D1:DE:EA:C5:5E:34:3B:03:E6
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 18D9
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Ij9Vl-MgTsRIjJHR3urFXjQ7A-Y.roa
Signing time: Tue 10 Feb 2026 05:00:44 +0000
ROA not before: Tue 10 Feb 2026 05:00:44 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 55990
IP address blocks: 115.32.192.0/19 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6361 (0x18d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Feb 10 05:00:44 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=223F5597E3204EC4488C91D1DEEAC55E343B03E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:d2:80:75:69:92:94:a7:5f:3b:2b:bb:80:
37:1b:18:f2:9d:3b:31:9a:11:56:91:ca:3f:bf:df:
cb:dc:a9:ec:1f:91:cc:bb:8e:43:bb:06:be:b2:b3:
b5:52:f4:3c:76:7d:1b:7e:b7:df:af:f0:59:e0:f9:
4e:8f:a1:9b:63:81:2c:69:d8:db:e6:9b:4f:cb:36:
dd:89:38:2f:31:22:6f:4f:f6:36:84:77:80:fb:99:
9b:3c:a0:e3:8f:7d:83:12:46:3f:e1:38:86:f2:61:
a0:64:e8:4d:f5:bb:3f:b7:33:9b:40:7f:53:bb:39:
e4:99:3d:4c:53:3b:0d:cb:11:dd:e8:94:75:98:67:
62:60:ef:83:cc:35:da:35:40:fd:71:54:5d:9a:96:
80:fb:a2:92:04:1c:51:d4:c4:26:cd:af:69:c0:38:
f1:e0:b9:6d:29:c1:5f:7a:74:27:ad:99:9b:0d:9d:
28:7f:2a:8b:6e:c8:e0:69:3e:89:21:17:2a:a3:86:
e9:9b:62:2b:0d:50:88:e9:34:9e:6a:ad:e1:af:b0:
68:e1:5f:d3:d6:54:a3:2a:fc:47:91:bd:73:12:f1:
18:0f:bb:3c:ea:8b:26:60:06:20:3e:4b:77:90:dd:
a8:88:08:fd:58:4e:02:be:7b:b7:1a:3f:c0:cb:99:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3F:55:97:E3:20:4E:C4:48:8C:91:D1:DE:EA:C5:5E:34:3B:03:E6
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Ij9Vl-MgTsRIjJHR3urFXjQ7A-Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.32.192.0/19
Signature Algorithm: sha256WithRSAEncryption
4b:0e:87:47:05:bc:75:85:2a:43:1e:4b:e0:83:97:5e:75:b5:
c6:14:0d:13:28:7f:59:60:b2:fe:b0:d5:eb:2f:02:c1:0b:cc:
65:4a:5c:11:d1:4e:84:2a:7e:dc:0c:77:a4:96:99:8b:bd:d5:
ff:b5:2b:18:d0:91:ec:b9:c1:3c:7a:2d:05:ac:88:d3:38:06:
54:ad:ba:bf:b5:52:c1:d1:03:19:12:4b:ae:0f:27:d1:3b:9a:
2f:a1:67:99:8b:ec:83:74:13:8f:c2:77:b7:0b:d6:f3:b5:23:
c3:fb:f3:a2:45:96:06:63:79:39:2e:29:22:6e:2b:c0:e7:1c:
50:f8:39:ed:44:a0:64:dc:6d:2f:ae:92:6b:f0:36:4a:e4:96:
6b:52:6d:18:16:7b:16:ca:10:42:cb:bd:2b:56:6a:8e:b9:a7:
79:18:3c:f3:51:fb:3d:75:71:de:2a:11:67:98:11:02:88:79:
bb:4b:0c:71:c7:31:01:cb:5b:1a:48:d6:14:73:8f:4c:fa:5a:
91:77:7f:d3:c7:4d:34:de:9a:52:2c:dc:31:ca:7b:85:de:c2:
15:d2:10:f2:e1:0d:42:c7:d0:b0:6f:17:b8:73:bb:83:ff:fb:
0b:bf:f4:d1:b0:a3:5e:10:1f:3f:10:22:44:67:13:2e:3b:bc:
17:11:ac:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:36 2026 by rpki-client