Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/zLg-O0ujFD_PuzeU-UrO7FMEbjg.roa
File: zLg-O0ujFD_PuzeU-UrO7FMEbjg.roa (raw, json)
Hash identifier: H5LuXFYu+4MNttk/lM7zOoyePasms5ZCoFOiwG/fmBs=
Subject key identifier: CC:B8:3E:3B:4B:A3:14:3F:CF:BB:37:94:F9:4A:CE:EC:53:04:6E:38
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 18CC
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/zLg-O0ujFD_PuzeU-UrO7FMEbjg.roa
Signing time: Tue 10 Feb 2026 05:00:42 +0000
ROA not before: Tue 10 Feb 2026 05:00:42 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 55990
IP address blocks: 115.32.96.0/21 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6348 (0x18cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Feb 10 05:00:42 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=CCB83E3B4BA3143FCFBB3794F94ACEEC53046E38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b7:8f:13:2f:6b:32:15:90:a1:2b:47:88:fc:
4e:0d:56:a2:2f:53:36:ae:e8:ed:57:eb:1f:64:2b:
dc:9d:a4:6c:1f:8c:b1:89:5b:e4:44:c8:5d:a8:70:
7a:86:66:44:62:63:c1:2f:e7:bb:a3:24:0f:6c:5c:
f9:12:1c:13:08:5f:f1:a5:20:01:ba:cf:f1:b9:dc:
8c:a2:38:d7:78:4f:aa:75:00:fc:72:39:0f:1a:71:
f1:23:c8:af:d1:5a:2c:1b:4e:c1:4d:6d:fb:87:8f:
25:ec:aa:e4:27:79:e9:d0:74:89:5e:2a:7d:1a:ea:
a5:48:9a:3f:1b:5a:f9:a8:bb:ed:7b:4e:ef:b9:34:
bd:67:79:f4:f5:f0:de:68:ba:0d:2b:72:d1:e1:9c:
b2:36:73:f7:31:09:bb:c4:7f:a1:e0:8e:ce:c3:73:
2b:a1:ec:06:9d:a0:67:38:48:7a:fa:3a:2a:69:b4:
8e:39:90:df:cb:8d:2f:46:16:55:0a:75:bb:0e:57:
81:e9:7a:c6:40:25:b4:b9:fd:ab:dd:9b:ec:56:23:
2d:11:d5:bf:e7:4c:87:93:e7:50:6d:25:36:09:47:
c9:29:80:91:49:7f:9c:43:ec:26:33:79:2c:07:7a:
cb:f9:ee:8b:0e:1e:ee:33:ef:c7:1f:73:41:9d:33:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B8:3E:3B:4B:A3:14:3F:CF:BB:37:94:F9:4A:CE:EC:53:04:6E:38
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/zLg-O0ujFD_PuzeU-UrO7FMEbjg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.32.96.0/21
Signature Algorithm: sha256WithRSAEncryption
09:aa:df:1c:91:b0:40:92:18:bb:36:50:ae:c6:18:27:72:89:
c8:63:2a:3e:b4:ee:e6:46:7b:13:3e:0f:e7:a1:c6:dc:b1:0a:
e9:b3:43:f6:ff:28:ab:7c:96:dd:75:5a:72:bc:60:c4:fa:10:
41:32:ec:50:4e:08:ba:fe:c0:30:e9:81:eb:50:d6:61:6f:f3:
3e:9b:b2:5a:53:30:99:8a:99:6c:36:a6:6d:16:93:b1:c1:cf:
4b:da:df:db:ab:39:be:48:ec:43:2f:ec:62:fd:5b:b7:99:38:
52:70:6d:5f:57:de:d5:4f:d5:e7:75:44:8b:2f:6b:8b:f2:18:
a7:d7:34:2d:74:9b:95:e5:01:32:1a:43:1e:a4:51:a3:2e:28:
69:dc:3a:e6:2f:a5:e5:87:d5:cb:93:f8:ca:9d:e0:bb:8a:4f:
2b:37:4a:13:00:7a:7d:2f:7b:46:e0:05:65:64:81:42:76:a9:
52:db:4a:ca:95:53:90:11:92:a8:3b:81:ee:d9:d2:e8:bf:ab:
e9:ea:b7:dd:9c:7c:1a:ca:6a:7e:c1:c4:5e:86:62:05:6f:99:
dd:dc:16:c2:ba:ab:a3:22:40:ae:28:db:6e:ae:2c:67:b9:92:
7f:bc:5f:96:97:47:65:5a:ca:65:0a:84:24:c8:da:75:af:67:
09:92:a0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:35 2026 by rpki-client