Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/u4gt7ZfAhOy-qxXlQLXaN92Xfw0.roa
File: u4gt7ZfAhOy-qxXlQLXaN92Xfw0.roa (raw, json)
Hash identifier: 31Rh+Nr3y93dh6ByBnoxZ+7tzAolvYdfk/7ePVHFAQw=
Subject key identifier: BB:88:2D:ED:97:C0:84:EC:BE:AB:15:E5:40:B5:DA:37:DD:97:7F:0D
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 18CB
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/u4gt7ZfAhOy-qxXlQLXaN92Xfw0.roa
Signing time: Tue 10 Feb 2026 05:00:41 +0000
ROA not before: Tue 10 Feb 2026 05:00:41 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 55990
IP address blocks: 115.32.52.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6347 (0x18cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Feb 10 05:00:41 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=BB882DED97C084ECBEAB15E540B5DA37DD977F0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:5a:02:d0:62:31:a3:5f:78:37:c1:de:5b:
45:07:aa:7e:69:e5:ac:fc:75:d8:fd:f9:d3:97:ee:
cf:36:d9:89:e2:b2:e3:d4:ea:6e:d5:0b:08:41:23:
b3:50:7f:8b:20:42:1a:3e:8b:f7:b8:a4:42:d6:61:
50:54:d9:0d:5e:48:9c:ee:2d:11:7f:d5:d5:da:ca:
d7:22:28:63:86:98:19:a9:0f:5a:47:24:9a:cf:2c:
dc:2a:79:e9:a6:e4:b2:28:82:0e:94:ca:26:7c:5b:
57:04:b8:6e:96:09:62:ee:b3:1a:20:28:26:b0:7f:
f1:90:f3:d0:2f:fd:50:40:f8:a7:3c:76:68:ab:fe:
54:fa:11:20:8a:b7:d4:fc:d2:0e:73:a5:f5:cf:ee:
e3:a4:b1:f4:e3:62:09:d8:9b:d8:e7:7e:15:20:03:
c8:15:d0:85:aa:b9:a8:07:f5:f0:d1:26:86:a8:a9:
ac:9e:60:75:d5:77:c5:5c:1e:fd:10:4b:54:17:66:
1f:89:d4:fd:c0:98:1a:3c:49:a9:1f:fe:e0:82:01:
46:a3:3b:55:e1:c2:eb:21:2b:4a:28:57:9f:86:0b:
81:93:4c:1a:b6:a2:07:1a:a0:fa:3f:87:d7:71:29:
f9:ef:fc:10:3d:4f:24:10:c6:f5:79:74:76:c6:eb:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:88:2D:ED:97:C0:84:EC:BE:AB:15:E5:40:B5:DA:37:DD:97:7F:0D
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/u4gt7ZfAhOy-qxXlQLXaN92Xfw0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.32.52.0/23
Signature Algorithm: sha256WithRSAEncryption
23:4b:66:76:51:58:27:97:f4:e8:27:2b:c8:ea:7f:49:1c:94:
0e:40:01:f5:75:9c:07:0e:87:60:2b:a0:cb:9a:49:2c:5a:eb:
d3:59:85:92:72:3e:70:d1:c1:88:10:15:58:99:61:84:f0:4a:
f1:9e:aa:25:60:a0:69:4a:7b:28:e4:41:68:fa:2b:81:3a:61:
0a:b0:5d:d4:43:27:b5:79:8e:5b:d3:ae:d9:12:3a:f6:b5:5b:
35:53:65:f1:e7:04:69:4d:17:7a:25:07:35:99:33:9c:fe:f8:
ca:50:e9:c5:ef:5b:0c:f0:31:8b:b0:fc:d9:03:d6:14:5f:dc:
9e:c2:8b:c3:45:ac:31:cc:28:8e:41:08:6b:d9:99:49:5e:d0:
c7:a8:16:97:c0:cb:77:e0:4f:49:da:0b:f7:3d:56:b5:46:1d:
e6:36:65:29:f9:77:88:85:6f:fa:22:52:86:f8:c3:96:c4:92:
4d:45:65:e7:53:e9:c0:f2:7a:7e:78:9b:e1:ee:15:7b:68:83:
8c:29:d9:e9:b2:6f:1c:e1:7b:96:69:93:ea:2d:67:20:47:fa:
01:c4:51:e6:55:da:8b:20:48:52:30:35:a0:f5:f1:02:66:dc:
a3:b3:c6:84:05:e8:1f:61:2a:30:cd:82:2c:34:bb:11:15:f6:
2b:34:8d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:36 2026 by rpki-client