Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/oTpiwj8kYoi9CxdDfl-JzHGFejY.roa
File: oTpiwj8kYoi9CxdDfl-JzHGFejY.roa (raw, json)
Hash identifier: +TWZI4w850YrVgsGfZrBsK611wwEc6mv1BwaMkZ4B4U=
Subject key identifier: A1:3A:62:C2:3F:24:62:88:BD:0B:17:43:7E:5F:89:CC:71:85:7A:36
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 18CD
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/oTpiwj8kYoi9CxdDfl-JzHGFejY.roa
Signing time: Tue 10 Feb 2026 05:00:42 +0000
ROA not before: Tue 10 Feb 2026 05:00:42 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 55990
IP address blocks: 113.47.200.0/22 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6349 (0x18cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Feb 10 05:00:42 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=A13A62C23F246288BD0B17437E5F89CC71857A36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5e:1e:cc:48:2c:9f:11:ac:11:52:75:05:47:
5b:64:17:10:2b:f4:14:0f:76:22:00:aa:48:01:1d:
19:88:3e:48:02:67:18:00:ee:8a:b6:01:ab:11:4d:
00:42:35:be:95:dd:95:39:e0:a8:87:43:95:60:8c:
52:e7:23:80:28:83:b5:da:69:2b:8b:cd:25:84:11:
c8:e0:63:d9:e9:bb:49:3c:4e:a9:bb:80:ac:8f:78:
85:5e:2e:1f:a0:a6:45:0e:35:30:4d:e2:12:1c:30:
19:a3:13:85:89:0d:18:9c:77:4c:ed:37:00:6a:d0:
0c:45:60:b8:ea:f0:ab:5c:f1:f9:ed:07:a0:d8:f2:
e1:d6:c2:4a:66:94:e4:07:49:aa:96:80:66:56:8f:
bf:f4:cd:87:9a:34:e1:04:20:9d:27:bb:4d:d5:ca:
fe:3d:6f:e5:1c:07:1e:e0:d5:62:f1:6a:8d:5b:d3:
8e:ad:ee:87:3d:0e:63:c8:11:0b:02:20:9d:e0:eb:
aa:3b:f8:a2:75:12:af:ce:4d:74:dc:a4:8f:ff:6e:
da:3e:61:2b:7e:db:67:71:18:ef:5b:1a:60:b9:6b:
1c:59:96:48:03:fa:ba:7f:c2:6e:c9:98:b9:e2:27:
13:9d:9e:ac:b3:c6:55:ed:de:3c:fc:d8:f6:61:fb:
fc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3A:62:C2:3F:24:62:88:BD:0B:17:43:7E:5F:89:CC:71:85:7A:36
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/oTpiwj8kYoi9CxdDfl-JzHGFejY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.47.200.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:90:f4:7b:85:9a:fe:10:e9:6f:ab:7e:36:ec:3c:25:c3:a8:
e6:3b:a1:4f:bb:a9:c0:a8:3e:c9:71:b8:3f:05:be:f0:73:bf:
94:85:99:93:65:49:fd:1d:a9:d9:21:9e:10:3f:62:31:98:ca:
7d:9b:3e:33:b0:c6:ac:24:f6:34:24:05:0b:99:6c:7f:ff:14:
73:92:b3:05:36:bb:ff:5e:ec:52:d9:b9:54:c5:5b:92:a1:e1:
1f:5a:da:c2:2e:5e:18:1c:46:01:30:f1:d8:1a:58:08:e2:1e:
42:d8:66:00:ff:fd:73:c2:9c:69:25:59:e5:9f:92:cd:9d:7b:
a4:72:78:f7:b0:ca:ea:7c:e3:1c:c3:f7:7e:5a:cf:ae:b9:3b:
1b:d0:5c:7d:fd:2f:3f:94:b1:99:3e:7c:8e:32:3d:07:d9:8e:
0e:44:d5:c8:03:5c:25:0c:3c:97:9b:7d:ef:fe:ad:df:3f:23:
be:83:ac:4e:7d:39:b3:18:2b:4a:6b:7b:0f:1f:8c:ec:1a:80:
be:e2:c2:90:7f:f6:97:6e:4c:6e:79:76:41:f9:68:88:4b:ec:
8a:7a:25:b1:56:6e:68:ab:ff:46:b2:86:d4:8e:3a:7c:48:31:
24:b0:13:d8:28:fc:e5:3b:ab:ce:b1:a7:e6:81:52:e6:0a:4b:
5c:bd:ce:87
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICGM0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD
RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNjAyMTAw
NTAwNDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEExM0E2MkMyM0YyNDYy
ODhCRDBCMTc0MzdFNUY4OUNDNzE4NTdBMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaXh7MSCyfEawRUnUFR1tkFxAr9BQPdiIAqkgBHRmIPkgCZxgA
7oq2AasRTQBCNb6V3ZU54KiHQ5VgjFLnI4Aog7XaaSuLzSWEEcjgY9npu0k8Tqm7
gKyPeIVeLh+gpkUONTBN4hIcMBmjE4WJDRicd0ztNwBq0AxFYLjq8Ktc8fntB6DY
8uHWwkpmlOQHSaqWgGZWj7/0zYeaNOEEIJ0nu03Vyv49b+UcBx7g1WLxao1b046t
7oc9DmPIEQsCIJ3g66o7+KJ1Eq/OTXTcpI//bto+YSt+22dxGO9bGmC5axxZlkgD
+rp/wm7JmLniJxOdnqyzxlXt3jz82PZh+/wlAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUoTpiwj8kYoi9CxdDfl+JzHGFejYwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb
RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx
NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvb1RwaXdqOGtZb2k5
Q3hkRGZsLUp6SEdGZWpZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAnEvyDANBgkqhkiG9w0BAQsFAAOCAQEApZD0e4Wa/hDpb6t+Nuw8JcOo5juh
T7upwKg+yXG4PwW+8HO/lIWZk2VJ/R2p2SGeED9iMZjKfZs+M7DGrCT2NCQFC5ls
f/8Uc5KzBTa7/17sUtm5VMVbkqHhH1rawi5eGBxGATDx2BpYCOIeQthmAP/9c8Kc
aSVZ5Z+SzZ17pHJ497DK6nzjHMP3flrPrrk7G9Bcff0vP5SxmT58jjI9B9mODkTV
yANcJQw8l5t97/6t3z8jvoOsTn05sxgrSmt7Dx+M7BqAvuLCkH/2l25Mbnl2Qflo
iEvsinolsVZuaKv/RrKG1I46fEgxJLAT2Cj85TurzrGn5oFS5gpLXL3Ohw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:32 2026 by rpki-client