Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/1IIgpi_sz5RY5VQ_bt580-fWcAc.roa
File: 1IIgpi_sz5RY5VQ_bt580-fWcAc.roa (raw, json)
Hash identifier: ezpPqow3iSYQrdptIMzWjF5mocNjgDTWlLrWeT4Elq4=
Subject key identifier: D4:82:20:A6:2F:EC:CF:94:58:E5:54:3F:6E:DE:7C:D3:E7:D6:70:07
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 21CE
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/1IIgpi_sz5RY5VQ_bt580-fWcAc.roa
Signing time: Sat 13 Sep 2025 03:09:01 +0000
ROA not before: Sat 13 Sep 2025 03:09:01 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4811
IP address blocks: 14.103.72.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8654 (0x21ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Sep 13 03:09:01 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=D48220A62FECCF9458E5543F6EDE7CD3E7D67007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:b9:30:bf:17:8d:d2:76:da:05:61:fd:03:
1b:31:93:64:97:ac:ac:bd:65:17:06:8e:5f:37:2a:
6e:02:a6:91:95:6b:c6:0d:4c:35:ab:7e:5b:ab:69:
83:17:6a:b1:9e:45:cb:5c:66:fc:09:5c:11:39:2a:
22:9a:ee:8c:e9:12:17:79:65:2e:aa:73:2e:6d:f3:
ff:1c:36:57:0f:5e:17:fa:e7:8b:64:e5:47:98:3f:
fc:30:06:8f:b6:e4:b2:5d:1e:9e:c7:5f:29:22:41:
37:de:70:e7:f5:4a:22:b5:4f:e8:52:28:29:91:34:
0c:80:b4:20:b5:98:f5:d8:e3:3c:b4:58:ab:07:b5:
0a:71:47:9d:3c:f5:3b:69:91:32:7d:bf:40:da:69:
8a:7e:48:b1:f2:3e:85:2a:ea:d8:40:a8:fe:df:e4:
6d:d6:31:29:57:7b:8b:12:82:df:ff:db:da:fb:99:
52:4f:90:0b:3c:2f:ba:35:9f:32:5e:92:29:09:59:
0b:70:d1:d6:ba:d9:67:2e:99:cb:3a:01:ac:af:4e:
9e:70:e5:27:c3:3e:e4:54:78:3e:a7:6d:7a:8c:36:
b1:a2:9f:ab:34:65:e3:f9:3b:b7:a3:4e:4b:6e:ba:
0f:58:ad:4d:ad:e2:bb:ce:2f:27:61:1d:c1:f9:53:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:82:20:A6:2F:EC:CF:94:58:E5:54:3F:6E:DE:7C:D3:E7:D6:70:07
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/1IIgpi_sz5RY5VQ_bt580-fWcAc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
14.103.72.0/23
Signature Algorithm: sha256WithRSAEncryption
45:46:35:7e:b6:94:b4:c9:f4:6e:13:8c:e9:c0:f8:d3:f1:a3:
b0:b5:61:3e:04:46:40:64:1f:18:b3:46:7a:d0:f5:81:53:7c:
a4:5f:c5:8d:4a:e6:15:8f:5b:92:45:78:21:fb:50:72:e4:a9:
8f:2e:bf:dc:30:ca:0d:da:27:1b:ce:7f:f8:55:7f:09:13:34:
d2:e8:10:38:dd:a2:3d:82:ba:e2:8e:8a:4b:c6:b0:2d:8e:19:
75:02:21:d1:ae:49:b1:12:fd:af:ea:e0:93:a6:45:aa:42:1c:
46:43:13:59:b4:26:f3:d1:4c:ff:35:08:18:88:52:67:d4:90:
c4:c8:46:ec:3b:3b:6e:3f:91:01:1f:6e:6d:a7:83:3c:7e:d6:
ac:f2:fb:8b:cc:ce:20:87:f0:64:ff:79:5d:46:97:a8:d0:d7:
8b:e2:42:4a:45:fb:d8:56:c6:d1:86:87:cb:46:ab:4a:a2:a6:
bb:aa:e9:84:34:1e:48:d1:93:df:5a:86:00:ad:5a:0b:ea:9a:
90:86:4f:31:95:bd:82:df:f5:9d:cf:13:24:11:29:b9:cf:97:
b5:e9:69:24:5c:bc:3a:2d:88:57:8e:de:19:fc:63:90:c7:dd:
b8:4e:82:15:4e:43:69:8b:b3:f6:f0:d9:1f:99:2e:ad:17:9d:
30:8b:79:e9
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICIc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4
QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw
MzA5MDFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQ0ODIyMEE2MkZFQ0NG
OTQ1OEU1NTQzRjZFREU3Q0QzRTdENjcwMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdZbkwvxeN0nbaBWH9Axsxk2SXrKy9ZRcGjl83Km4CppGVa8YN
TDWrfluraYMXarGeRctcZvwJXBE5KiKa7ozpEhd5ZS6qcy5t8/8cNlcPXhf654tk
5UeYP/wwBo+25LJdHp7HXykiQTfecOf1SiK1T+hSKCmRNAyAtCC1mPXY4zy0WKsH
tQpxR5089TtpkTJ9v0DaaYp+SLHyPoUq6thAqP7f5G3WMSlXe4sSgt//29r7mVJP
kAs8L7o1nzJekikJWQtw0da62Wcumcs6AayvTp5w5SfDPuRUeD6nbXqMNrGin6s0
ZeP5O7ejTktuug9YrU2t4rvOLydhHcH5U8lbAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU1IIgpi/sz5RY5VQ/bt580+fWcAcwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw
dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0
NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvMUlJZ3BpX3N6NVJZ
NVZRX2J0NTgwLWZXY0FjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAQ5nSDANBgkqhkiG9w0BAQsFAAOCAQEARUY1fraUtMn0bhOM6cD40/GjsLVh
PgRGQGQfGLNGetD1gVN8pF/FjUrmFY9bkkV4IftQcuSpjy6/3DDKDdonG85/+FV/
CRM00ugQON2iPYK64o6KS8awLY4ZdQIh0a5JsRL9r+rgk6ZFqkIcRkMTWbQm89FM
/zUIGIhSZ9SQxMhG7Ds7bj+RAR9ubaeDPH7WrPL7i8zOIIfwZP95XUaXqNDXi+JC
SkX72FbG0YaHy0arSqKmu6rphDQeSNGT31qGAK1aC+qakIZPMZW9gt/1nc8TJBEp
uc+XtelpJFy8Oi2IV47eGfxjkMfduE6CFU5DaYuz9vDZH5kurRedMIt56Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:24:59 2025 by rpki-client