Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/JIRPW4krO6ocy2tmqqzJpowVBJk.roa
File: JIRPW4krO6ocy2tmqqzJpowVBJk.roa (raw, json)
Hash identifier: Am1jns4FgovkmCwekr7u56w0p10UDElxf1Ih3TcpZd4=
Subject key identifier: 24:84:4F:5B:89:2B:3B:AA:1C:CB:6B:66:AA:AC:C9:A6:8C:15:04:99
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 18DA
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/JIRPW4krO6ocy2tmqqzJpowVBJk.roa
Signing time: Tue 10 Feb 2026 05:00:44 +0000
ROA not before: Tue 10 Feb 2026 05:00:44 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 55990
IP address blocks: 115.33.0.0/19 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6362 (0x18da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Feb 10 05:00:44 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=24844F5B892B3BAA1CCB6B66AAACC9A68C150499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:ee:ba:af:6b:58:ae:b4:f0:ad:ad:d9:b3:
83:8d:88:1b:a0:58:8c:bc:eb:aa:76:e1:43:eb:32:
fc:2c:c8:18:c6:13:62:7d:14:a6:0f:89:b3:00:9b:
86:cc:93:c8:77:f1:ca:9b:c6:3d:55:d3:e0:e5:78:
49:c4:83:b2:ab:db:7d:ae:56:88:cc:92:e3:55:e8:
a2:3e:86:d1:7a:a2:68:a3:5c:5a:5c:df:9a:a1:1e:
d4:19:3e:6c:0a:56:68:c5:df:7a:62:38:29:09:08:
1e:5f:42:15:e7:00:3b:a4:3f:50:c1:ce:f3:88:bf:
85:13:78:a2:fe:77:75:1c:33:eb:ed:44:8a:f5:f6:
52:c6:c2:05:11:4d:aa:ca:23:7b:e7:be:44:2c:5c:
08:6f:79:3f:b6:3f:11:b9:75:5c:e0:94:0b:10:05:
20:88:40:60:84:41:80:51:6a:de:72:ea:83:76:5a:
78:8a:15:37:af:fa:69:ed:90:18:a3:47:6c:4c:ab:
35:bf:54:5e:38:ab:da:6d:64:b2:fe:0b:94:fc:70:
f1:6a:77:c4:53:de:af:e0:66:8a:93:bb:1f:b6:92:
71:e3:c5:69:06:03:c0:8c:9c:58:24:cf:f1:ce:c9:
6f:42:c0:93:3f:f4:d1:04:cb:7e:21:cb:01:1f:e9:
cd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:84:4F:5B:89:2B:3B:AA:1C:CB:6B:66:AA:AC:C9:A6:8C:15:04:99
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/JIRPW4krO6ocy2tmqqzJpowVBJk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.33.0.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:b0:84:0d:1c:9d:0c:1f:e6:80:e3:d8:56:5f:bf:04:32:1e:
1a:9a:ad:67:23:03:73:58:43:5e:07:d3:fc:c9:95:85:98:da:
27:36:6a:93:15:f6:f6:31:e8:0f:fc:ac:ec:4a:7e:17:73:2f:
a3:12:81:a4:ab:63:13:bf:3e:c7:be:27:e5:91:4c:87:3f:c4:
51:8c:ab:92:65:a5:96:c9:f6:7f:44:20:29:cc:76:4c:9c:21:
3e:5b:78:47:13:7c:88:cb:83:a9:43:d9:75:ca:9d:51:6b:d8:
70:0b:04:9e:bb:8c:0f:84:7c:e9:e3:b4:6f:d3:d6:12:f3:83:
87:02:6b:f8:66:34:c0:cc:65:61:f1:34:63:58:6c:58:0a:5b:
6a:6a:61:f5:57:f6:cb:f6:1b:0e:f1:ad:9d:8c:70:9c:da:79:
62:7b:da:af:6f:8f:e5:d1:ed:c7:f7:ed:2a:f6:a5:df:e2:b7:
7f:65:ff:ae:a5:79:b6:05:80:66:05:70:b1:16:45:88:8f:de:
02:49:14:d1:a9:e1:0c:6f:bb:59:48:84:ec:32:63:71:be:c9:
59:80:f4:63:82:99:a9:48:e6:df:dd:5e:f5:f1:70:02:16:a9:
87:92:50:66:81:ae:0f:a9:b3:75:7e:15:4c:03:7e:8c:b2:73:
b1:87:56:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:57 2026 by rpki-client