Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/am0B3p0RK6eGrvFwM23K8q4haSc.roa
File: am0B3p0RK6eGrvFwM23K8q4haSc.roa (raw, json)
Hash identifier: /TW+XBl/htFCkg/oubvclGUNcktJLTE1zQZbgFaN+OI=
Subject key identifier: 6A:6D:01:DE:9D:11:2B:A7:86:AE:F1:70:33:6D:CA:F2:AE:21:69:27
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 18D3
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/am0B3p0RK6eGrvFwM23K8q4haSc.roa
Signing time: Tue 10 Feb 2026 05:00:43 +0000
ROA not before: Tue 10 Feb 2026 05:00:43 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 55990
IP address blocks: 101.245.4.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6355 (0x18d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Feb 10 05:00:43 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=6A6D01DE9D112BA786AEF170336DCAF2AE216927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:71:97:50:ed:24:02:22:99:99:0d:f2:ca:
e6:01:38:da:b2:32:96:15:8c:a8:7b:97:24:5c:0c:
26:86:82:46:9a:cd:be:a1:57:a9:00:a5:d3:4a:89:
73:8d:e3:a0:2b:7d:e5:10:5d:b9:4b:0b:7f:b5:8a:
05:6b:88:9f:e9:2a:d2:d9:e2:34:ea:fd:7c:95:d1:
bc:f0:7f:99:43:2d:e9:fa:b2:a8:a0:f4:a9:28:9e:
3a:78:99:e2:1b:01:75:96:76:fa:ea:e9:ab:19:31:
f3:54:c7:30:c2:94:bd:85:9e:6d:7b:ae:06:95:f5:
8d:93:08:6c:35:22:c1:ae:a1:70:f5:be:a9:04:4e:
11:18:99:ac:36:07:55:8b:4d:2a:cd:96:d9:67:61:
76:dd:ee:02:94:1f:15:55:c6:86:d1:48:f0:66:43:
f6:49:27:19:ae:10:e2:e4:ca:00:40:e1:47:1c:9c:
95:04:b0:8b:50:58:78:d4:8f:e2:2e:5c:8c:23:2d:
d3:e1:9d:2b:74:e4:60:32:10:04:36:e6:fe:d2:37:
33:53:3e:93:c8:cd:6d:69:4d:f3:54:66:ef:9e:51:
79:79:93:d1:dd:6d:eb:a2:b1:68:a9:a5:12:b1:8a:
58:cf:21:f6:31:45:42:02:4c:78:ef:22:5b:d1:44:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6D:01:DE:9D:11:2B:A7:86:AE:F1:70:33:6D:CA:F2:AE:21:69:27
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/am0B3p0RK6eGrvFwM23K8q4haSc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.245.4.0/23
Signature Algorithm: sha256WithRSAEncryption
94:30:ed:23:bf:a1:5f:53:02:ab:f1:da:79:0a:b6:b9:cc:23:
97:c7:de:f0:e0:6c:82:fb:15:8d:49:ca:c6:e0:bb:3d:21:b0:
0f:d3:00:18:ce:97:e3:dc:a9:9d:0d:a5:17:a8:da:32:73:2a:
b0:a1:b7:fe:e3:b6:d9:fb:77:7d:c1:7f:fc:34:f9:f0:7c:96:
9e:4c:9d:10:79:25:89:3d:8a:d5:c2:1e:f6:01:d9:f4:e5:2b:
90:af:16:0d:6b:c6:09:7a:3e:80:7e:d1:9b:18:5d:cc:37:30:
85:94:12:2b:5f:7f:d6:a4:e2:cd:3d:76:1f:20:ae:3b:34:f0:
bb:a8:b3:7c:5d:d4:be:74:ce:82:c4:34:86:33:40:6d:20:1f:
6f:fc:01:17:74:3b:92:fb:f7:c7:96:79:21:82:5b:e0:42:f5:
e6:6f:d8:0b:81:1e:78:5e:8a:92:56:fb:fe:a5:16:92:ab:69:
16:e4:8f:26:94:78:d0:2c:eb:0c:b9:62:df:b8:c9:b2:0a:aa:
6f:c3:8c:62:4b:30:ba:97:56:6f:45:41:75:a2:33:66:ca:b2:
fd:be:8b:c9:64:e3:af:42:24:fd:cd:51:c2:8b:9c:99:4b:38:
c3:4f:5a:ac:e8:e6:68:31:73:4f:0d:f6:49:44:54:95:e5:f9:
2f:95:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:31 2026 by rpki-client