Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/yTlEfARuzvyRFAoNGZg9Ocs4PSg.roa
File: yTlEfARuzvyRFAoNGZg9Ocs4PSg.roa (raw, json)
Hash identifier: duo1Al7ZQge8LWUFH5iKjJ2ir7bv3/JIy9JQ00hGanU=
Subject key identifier: C9:39:44:7C:04:6E:CE:FC:91:14:0A:0D:19:98:3D:39:CB:38:3D:28
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 18D7
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/yTlEfARuzvyRFAoNGZg9Ocs4PSg.roa
Signing time: Tue 10 Feb 2026 05:00:44 +0000
ROA not before: Tue 10 Feb 2026 05:00:44 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 55990
IP address blocks: 115.32.160.0/19 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6359 (0x18d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Feb 10 05:00:44 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=C939447C046ECEFC91140A0D19983D39CB383D28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:f2:91:f4:47:e8:46:fe:b1:8f:7d:10:ff:
0c:38:4b:cf:a7:a1:ef:99:c4:7d:c6:f8:ee:bd:8e:
25:7e:51:6f:72:f0:b5:98:bf:53:00:01:77:47:b7:
c7:7d:0a:8e:53:91:58:b2:2b:92:92:04:a1:48:f3:
00:c4:0f:0e:77:25:ac:6a:13:b1:b3:82:fd:1a:41:
75:54:4d:52:4f:8d:9d:20:e6:f5:84:52:f6:39:43:
04:73:f6:c4:bd:71:d5:f1:e6:23:64:86:88:18:de:
c7:ba:f8:e6:31:b2:ca:95:8d:32:67:93:03:1c:80:
8e:0a:71:1a:b5:03:e6:0b:75:ad:32:1d:2e:55:25:
f5:98:64:2a:67:8a:ac:6f:43:a1:e0:f3:35:be:5d:
0c:3d:88:93:a1:cd:24:ac:f8:2d:5c:a3:7b:59:38:
e7:80:c2:65:26:b5:6d:15:ad:1d:ac:a8:2f:f4:65:
48:55:7e:21:46:c1:0a:3d:1d:f8:b3:19:20:b9:ee:
96:f0:ee:e4:71:fa:9a:f3:35:a9:69:22:b4:64:f2:
9c:66:b4:37:2d:4e:36:5c:44:a6:1b:77:85:e7:62:
df:99:04:cf:1b:62:b3:27:f8:02:5d:8d:84:9b:0e:
3a:6a:23:ba:b0:88:0b:2a:c4:10:3b:72:7d:51:d1:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:39:44:7C:04:6E:CE:FC:91:14:0A:0D:19:98:3D:39:CB:38:3D:28
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/yTlEfARuzvyRFAoNGZg9Ocs4PSg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.32.160.0/19
Signature Algorithm: sha256WithRSAEncryption
b6:6b:a2:37:ab:7f:9a:50:bb:35:d1:b1:be:4a:53:9e:56:72:
19:5d:85:a1:91:a7:21:a4:ea:77:11:0a:1b:35:c1:f9:b1:a3:
1d:30:fa:4e:2c:65:99:6f:97:43:5b:9c:12:58:7d:ad:79:54:
df:54:c2:80:72:91:b1:7f:db:29:06:5b:16:b0:f0:83:86:a2:
f1:2f:fb:15:8a:d8:9d:ab:83:c9:88:21:b8:a2:ef:b9:e1:01:
bc:96:ac:6c:3e:33:01:4c:19:7c:a3:a3:f8:ef:f0:0b:cd:52:
f3:ad:23:93:bb:6a:34:bb:86:42:e3:89:71:27:c8:1b:12:c9:
a3:e1:57:75:6e:6d:78:95:4a:2a:96:d7:21:d2:af:62:11:ad:
39:f0:63:1c:b0:50:59:e4:de:67:25:85:96:09:e5:9d:12:3e:
64:f0:9d:c2:e8:0d:0c:7d:28:0c:c7:80:92:d6:be:13:ee:a3:
3c:aa:85:c5:ee:fe:47:88:33:21:01:9e:bc:b0:94:87:98:2f:
6f:86:9e:7f:3d:f5:a3:bb:29:cd:61:6f:07:7d:89:5b:cf:d2:
be:89:34:cb:55:3f:d4:38:e8:45:57:75:76:de:a0:f1:ca:28:
1d:17:22:80:db:a2:e2:de:40:54:11:55:fe:9e:4d:52:4f:af:
6e:ee:ad:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:25 2026 by rpki-client