Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/pqBaFNb1N6Tnl64EQQfXBPXWn6Y.roa
File: pqBaFNb1N6Tnl64EQQfXBPXWn6Y.roa (raw, json)
Hash identifier: WOJnUMHG25323gO7L1WFRrfbWtGE2zebQBhg2k5QmS0=
Subject key identifier: A6:A0:5A:14:D6:F5:37:A4:E7:97:AE:04:41:07:D7:04:F5:D6:9F:A6
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 18CF
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/pqBaFNb1N6Tnl64EQQfXBPXWn6Y.roa
Signing time: Tue 10 Feb 2026 05:00:42 +0000
ROA not before: Tue 10 Feb 2026 05:00:42 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 55990
IP address blocks: 115.32.104.0/21 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6351 (0x18cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Feb 10 05:00:42 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=A6A05A14D6F537A4E797AE044107D704F5D69FA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3b:ed:8f:46:4c:48:73:33:23:e0:b1:08:46:
69:af:ea:7a:8b:f4:b7:bb:8a:83:29:37:ab:f6:07:
f7:3a:f1:cf:09:e9:6c:3f:6c:38:a7:b6:7d:d8:6a:
e4:c0:56:8e:9d:18:2d:30:4d:2b:e3:b2:67:13:3a:
06:f8:9e:29:79:b2:8c:24:a8:d5:99:5a:62:fb:7c:
40:1f:ce:be:39:9e:00:58:c0:95:78:1b:3c:bc:36:
d1:ec:46:f3:e9:c9:5b:76:5e:a8:d7:ce:12:72:2f:
96:3f:71:22:ce:79:e2:77:a9:00:ce:db:dd:d8:6f:
cf:d2:8c:66:b5:90:8d:71:63:5e:08:d8:42:db:75:
5f:1e:3f:a9:c1:d4:fb:f5:3a:f9:60:a1:89:4c:f5:
79:06:16:fb:a3:61:2e:2b:2d:32:44:1a:e8:d8:6c:
fa:07:bf:1c:b3:7a:69:0f:b2:0f:2b:66:2d:e3:57:
8c:95:fe:fa:46:f8:5a:06:58:8e:ee:19:d8:33:2a:
8a:9c:ee:84:c1:bb:e9:04:9c:33:62:ca:f6:e4:ae:
e6:d1:6e:ff:a1:93:e9:c8:d6:68:6c:c8:8f:f8:a1:
28:5e:bc:49:7c:ce:a9:22:2c:3a:28:7b:98:aa:db:
a0:29:a3:bb:f5:fe:04:6c:e3:87:b4:6f:01:f1:32:
1c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A0:5A:14:D6:F5:37:A4:E7:97:AE:04:41:07:D7:04:F5:D6:9F:A6
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/pqBaFNb1N6Tnl64EQQfXBPXWn6Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.32.104.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:f9:19:34:07:5b:d6:f3:70:3a:a9:5e:d3:0c:ab:c0:2c:02:
f1:36:c3:bb:9e:6e:a5:59:db:6e:1d:b3:02:74:12:04:38:a6:
eb:a5:21:ea:1c:38:7c:86:7f:c6:b0:6f:33:07:9d:52:38:24:
43:e2:db:f2:63:0d:d0:79:b6:60:e0:50:43:cb:8d:fc:62:fa:
6c:c9:73:bc:9f:88:a6:d7:3f:76:2c:c2:3a:51:4a:3a:37:69:
61:45:7e:37:08:91:ba:64:a2:92:aa:f7:ac:9c:ae:02:83:08:
13:99:b1:17:b8:58:1c:c3:46:51:6c:39:13:6d:8d:c1:c3:76:
93:0e:d7:7a:37:50:ce:f0:fa:3a:56:cb:e7:50:1b:4b:6f:98:
e3:2b:8e:7c:ae:16:50:73:32:c8:04:43:4d:6b:5e:9b:cc:4e:
35:d9:7b:91:f4:a2:12:b3:08:c9:9e:37:c0:ed:0f:9a:14:ca:
4e:41:b8:f2:5e:d0:d5:fe:6c:24:69:e7:d8:bc:74:cf:3f:3b:
38:63:70:dd:b8:98:44:89:f2:c3:fa:cc:d3:c0:2f:38:ca:f3:
59:49:db:b3:33:49:0d:68:7d:c5:ed:9b:e9:d2:f5:03:ae:1c:
1b:f9:95:cc:b6:25:92:e4:d0:ae:e0:f5:2f:ef:5d:31:1f:7a:
bc:a3:9d:12
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICGM8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD
RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNjAyMTAw
NTAwNDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEE2QTA1QTE0RDZGNTM3
QTRFNzk3QUUwNDQxMDdENzA0RjVENjlGQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNO+2PRkxIczMj4LEIRmmv6nqL9Le7ioMpN6v2B/c68c8J6Ww/
bDintn3YauTAVo6dGC0wTSvjsmcTOgb4nil5sowkqNWZWmL7fEAfzr45ngBYwJV4
Gzy8NtHsRvPpyVt2XqjXzhJyL5Y/cSLOeeJ3qQDO293Yb8/SjGa1kI1xY14I2ELb
dV8eP6nB1Pv1OvlgoYlM9XkGFvujYS4rLTJEGujYbPoHvxyzemkPsg8rZi3jV4yV
/vpG+FoGWI7uGdgzKoqc7oTBu+kEnDNiyvbkrubRbv+hk+nI1mhsyI/4oShevEl8
zqkiLDooe5iq26Apo7v1/gRs44e0bwHxMhwZAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUpqBaFNb1N6Tnl64EQQfXBPXWn6YwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb
RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx
NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvcHFCYUZOYjFONlRu
bDY0RVFRZlhCUFhXbjZZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3MgaDANBgkqhkiG9w0BAQsFAAOCAQEAX/kZNAdb1vNwOqle0wyrwCwC8TbD
u55upVnbbh2zAnQSBDim66Uh6hw4fIZ/xrBvMwedUjgkQ+Lb8mMN0Hm2YOBQQ8uN
/GL6bMlzvJ+Iptc/dizCOlFKOjdpYUV+NwiRumSikqr3rJyuAoMIE5mxF7hYHMNG
UWw5E22NwcN2kw7XejdQzvD6OlbL51AbS2+Y4yuOfK4WUHMyyARDTWtem8xONdl7
kfSiErMIyZ43wO0PmhTKTkG48l7Q1f5sJGnn2Lx0zz87OGNw3biYRInyw/rM08Av
OMrzWUnbszNJDWh9xe2b6dL1A64cG/mVzLYlkuTQruD1L+9dMR96vKOdEg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:05:58 2026 by rpki-client