Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/X9K547_Dqhr3-WHwhMPBKF2Z_2Y.roa
File: X9K547_Dqhr3-WHwhMPBKF2Z_2Y.roa (raw, json)
Hash identifier: CLzwePYIF5Ia9pEggabefrS2UfcCluXJhiqTX2TQLLQ=
Subject key identifier: 5F:D2:B9:E3:BF:C3:AA:1A:F7:F9:61:F0:84:C3:C1:28:5D:99:FF:66
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 18DE
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/X9K547_Dqhr3-WHwhMPBKF2Z_2Y.roa
Signing time: Tue 10 Feb 2026 05:00:46 +0000
ROA not before: Tue 10 Feb 2026 05:00:46 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 55990
IP address blocks: 115.32.120.0/21 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6366 (0x18de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Feb 10 05:00:46 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=5FD2B9E3BFC3AA1AF7F961F084C3C1285D99FF66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:94:e2:d9:18:9a:95:45:54:50:fa:56:7b:fa:
cb:c1:2d:e9:29:83:c7:83:ba:3c:c8:1f:d4:08:fe:
ba:a2:a5:92:a9:b3:bb:b0:02:d6:b3:90:7c:dd:d6:
66:fb:ef:da:5f:61:da:c8:a7:4d:e3:02:64:84:b8:
2b:3f:76:6f:f5:fb:b9:f7:b6:1f:9b:87:de:d9:0c:
f7:01:90:2d:95:d9:07:b2:7e:2a:7b:d9:61:59:eb:
92:e7:2e:ab:40:1c:0d:a2:00:32:33:8c:51:78:7c:
50:d2:c9:4c:b4:14:56:02:2e:6b:01:da:08:bc:f3:
d6:54:94:19:1b:5e:aa:88:d3:ed:a4:1d:d8:c6:ee:
02:12:a3:e6:46:ba:75:a0:c7:13:7b:2f:7c:58:6a:
1e:71:f7:d8:16:d6:53:35:27:38:97:06:ae:37:91:
11:19:6c:51:dc:10:05:0e:1d:c3:d3:5b:bd:c7:ae:
c9:5c:7e:25:b1:cd:8a:7e:64:8e:af:df:f3:b3:49:
e1:8c:3e:b6:0f:05:3b:93:e2:58:4f:97:dc:96:54:
44:40:16:b2:40:48:30:26:ae:3f:14:0f:c8:91:4e:
97:ee:bd:4c:a3:7f:9d:7c:6d:64:ae:4b:8c:3a:67:
1d:52:6d:05:c8:e9:4e:63:38:a8:73:9c:04:fd:75:
85:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D2:B9:E3:BF:C3:AA:1A:F7:F9:61:F0:84:C3:C1:28:5D:99:FF:66
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/X9K547_Dqhr3-WHwhMPBKF2Z_2Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.32.120.0/21
Signature Algorithm: sha256WithRSAEncryption
16:ac:13:52:5e:42:a3:31:f5:bc:75:bf:e9:a4:63:e7:99:d9:
4c:13:3a:70:3a:14:f6:5b:d0:12:64:f3:49:ae:b5:09:61:9e:
f6:21:1c:33:f8:50:91:05:1d:f9:5c:4e:9e:f1:08:91:58:8f:
36:1a:a3:1f:ad:7a:a5:31:39:8c:f2:51:d9:7d:71:fc:7d:1b:
7a:ab:5c:68:2e:5d:34:5f:89:84:0f:56:ae:34:b3:87:44:87:
85:d7:94:00:da:2c:0f:d3:98:fd:12:20:33:01:1e:da:3a:6c:
f2:fa:80:1a:0a:5f:79:3e:3c:83:bf:a6:d9:5f:e8:4b:e4:e0:
3c:e7:b6:19:ff:d1:ad:81:f1:00:b9:8d:02:30:fb:66:99:4a:
9b:7b:ef:47:5d:5e:f5:4d:a5:b9:47:d8:64:e5:f9:b0:ff:aa:
6e:c9:60:de:67:14:e2:ce:81:69:f9:fd:19:af:68:38:f1:e6:
c0:14:35:b3:27:9d:be:10:c5:7c:25:c1:c9:8b:ae:36:88:64:
9a:8c:37:f5:82:05:9b:5c:b3:ff:4b:3e:3b:a5:3c:7d:7b:88:
34:a6:c7:d5:42:32:39:ae:60:de:c5:3d:68:11:6b:d0:60:4b:
24:21:41:4d:74:93:77:2f:48:f2:b4:ee:38:07:30:04:0e:0d:
e1:8d:23:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:59 2026 by rpki-client