Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/azPiBqJuSkmDYij1GfgXXDWum70.roa
File: azPiBqJuSkmDYij1GfgXXDWum70.roa (raw, json)
Hash identifier: Y//bU1WpJHvt0+L5gLvtB8HG4Y42rbrkFyyZGvcKrms=
Subject key identifier: 6B:33:E2:06:A2:6E:4A:49:83:62:28:F5:19:F8:17:5C:35:AE:9B:BD
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 18D5
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/azPiBqJuSkmDYij1GfgXXDWum70.roa
Signing time: Tue 10 Feb 2026 05:00:43 +0000
ROA not before: Tue 10 Feb 2026 05:00:43 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 55990
IP address blocks: 115.33.140.0/22 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6357 (0x18d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Feb 10 05:00:43 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=6B33E206A26E4A49836228F519F8175C35AE9BBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:97:61:32:7d:bd:41:9d:69:6f:32:13:d4:
33:39:d7:8c:2b:9b:59:c0:dc:8e:89:af:a9:56:c2:
1b:d8:af:e5:25:39:59:0f:24:14:1c:fe:24:4c:a1:
b8:8d:42:18:3f:36:73:f1:98:3c:68:67:2b:c2:8f:
46:c5:4a:07:fe:5c:b2:f4:88:26:42:2b:fa:e7:85:
93:c8:5e:3e:ea:33:b3:9f:f2:39:e7:6b:fd:9f:18:
36:18:18:77:a9:04:a6:f3:26:ad:9c:90:17:b5:89:
20:03:3a:6a:74:15:63:31:28:ef:e9:91:b4:63:54:
63:86:b7:06:af:0e:1d:20:8a:70:23:f8:7f:9c:2b:
8f:9a:e4:cc:58:90:27:6e:c7:cf:cd:c5:48:b8:95:
93:09:5a:bf:47:e1:34:d2:a6:cb:b2:5e:d9:df:52:
0c:86:ce:ec:00:7d:9a:8b:50:19:1a:f8:c7:c9:96:
6e:ca:fe:fa:bd:6f:19:0b:48:7c:40:ed:53:a7:af:
bf:da:a2:02:19:9f:9d:37:3b:47:07:e3:a8:ea:db:
b1:21:bf:75:47:8b:c1:8b:7b:0a:0e:8d:56:cf:34:
5f:95:ee:4f:0f:c9:98:7a:9f:89:9a:95:ed:26:05:
01:ed:91:30:c7:ac:fd:20:68:96:8d:87:e0:71:55:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:33:E2:06:A2:6E:4A:49:83:62:28:F5:19:F8:17:5C:35:AE:9B:BD
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/azPiBqJuSkmDYij1GfgXXDWum70.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.33.140.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:63:3d:7f:b4:13:98:f7:5d:b9:2b:ce:a1:26:e8:d7:0e:37:
e6:c4:ac:f0:33:8d:2a:aa:67:79:46:88:0c:a0:70:e8:cf:ea:
ba:f6:30:2c:c0:3b:ae:27:d5:ae:7d:60:c2:4c:cd:56:42:8b:
27:75:b0:40:1c:5e:0a:b6:89:ca:00:90:5d:19:69:78:82:ce:
8a:4a:48:36:e3:7f:73:7b:37:12:cd:7a:74:bb:49:c0:0c:18:
d8:92:34:c2:c3:a8:f4:ea:8f:ad:28:09:d1:78:82:07:ea:8d:
b2:2b:6d:a8:85:a8:92:d3:21:b5:97:b7:f3:7d:a3:15:9a:69:
ea:0a:45:e9:44:7d:c6:d4:0f:ae:7f:97:44:4e:d0:5b:de:4f:
ed:35:fc:68:ec:47:73:c6:2a:bd:93:90:11:07:45:6b:9f:02:
37:82:d2:97:a4:22:27:24:1e:55:59:11:f6:0b:d9:df:98:32:
fa:a6:32:fb:a5:c5:e8:1c:a6:27:cd:6e:08:b2:c9:75:74:85:
e2:0f:da:72:f4:7d:b1:8b:b7:8b:69:98:80:da:7f:18:88:84:
90:97:7f:cd:c1:c7:43:6c:18:94:c5:6d:b7:55:d6:2c:92:e4:
76:b3:b0:f4:fd:83:74:70:55:0f:36:8f:30:6d:60:33:a0:81:
79:e9:95:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:35 2026 by rpki-client