Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/7cKNbHCzvxU6DhdU3W8ob_RzVD4.roa
File: 7cKNbHCzvxU6DhdU3W8ob_RzVD4.roa (raw, json)
Hash identifier: EYQsAtU8l/oCVuRFsihHv5dKlKDdAyLbmcyPyGj9Nrk=
Subject key identifier: ED:C2:8D:6C:70:B3:BF:15:3A:0E:17:54:DD:6F:28:6F:F4:73:54:3E
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 22DC
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/7cKNbHCzvxU6DhdU3W8ob_RzVD4.roa
Signing time: Wed 29 Oct 2025 05:58:43 +0000
ROA not before: Wed 29 Oct 2025 05:58:43 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 4811
IP address blocks: 2406:d440:110::/44 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8924 (0x22dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Oct 29 05:58:43 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=EDC28D6C70B3BF153A0E1754DD6F286FF473543E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:8a:31:21:7f:a8:c9:f9:e8:d7:5b:a1:24:
d2:5c:72:4a:e5:22:65:2b:66:82:75:57:23:a0:4e:
ee:91:50:f3:f6:0f:40:3b:e5:1a:0e:bb:ca:a5:28:
0a:b8:d9:50:37:ce:2f:f2:01:62:cb:f3:4f:23:69:
f7:e9:03:15:d6:d1:84:3e:54:50:09:97:3e:d3:00:
9b:83:55:4d:82:11:8e:a6:ec:25:9a:84:c7:3f:79:
86:3f:b7:34:5d:3c:5b:b6:5c:96:ac:7d:13:cb:b4:
fa:74:38:c6:7c:fe:b3:9b:cf:be:a6:ac:f3:92:2f:
ac:52:75:7a:50:56:21:83:43:3d:ca:61:80:f9:3a:
75:55:6c:19:94:01:f8:cd:d3:b0:26:34:d7:c3:55:
1a:0e:fe:ac:c6:cb:da:5e:b3:67:b8:cd:db:c2:93:
81:04:f7:cf:f0:de:dc:79:b7:98:b6:a6:89:de:ef:
c8:87:8f:b8:a2:76:ed:64:ac:82:86:bc:56:82:b3:
9e:da:7c:9c:30:53:2f:1c:f0:27:e9:e9:c2:09:f9:
8c:47:da:44:cf:b3:ca:d0:15:f2:7d:f4:2b:7a:ca:
20:fa:c4:b2:ef:7f:36:72:b5:b1:f4:cb:0e:e5:20:
bf:68:c2:d6:d7:62:e9:49:b6:48:76:51:22:e0:53:
2f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C2:8D:6C:70:B3:BF:15:3A:0E:17:54:DD:6F:28:6F:F4:73:54:3E
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/7cKNbHCzvxU6DhdU3W8ob_RzVD4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:d440:110::/44
Signature Algorithm: sha256WithRSAEncryption
5c:21:78:bb:b6:10:1e:d4:5c:4d:2a:0a:3e:ec:e6:e7:29:1d:
3d:39:f5:4f:f7:70:4d:9b:75:6b:90:70:4f:70:72:20:20:92:
c7:c1:65:d2:09:f4:2e:4d:5b:13:95:57:ff:15:2d:35:04:56:
2b:83:b9:e8:a4:5c:c8:3b:c5:b5:ce:ef:7c:63:3a:f2:16:5a:
06:b0:97:b5:b5:4c:a3:69:5e:02:10:b0:f5:46:54:7b:c1:32:
08:11:11:9e:79:ca:58:8c:19:5d:76:80:72:65:73:61:4d:0a:
a6:33:23:86:ea:ac:f8:78:1c:36:9c:7d:1f:9e:5c:8a:1c:8b:
56:00:57:b9:96:f1:1e:80:fc:54:7e:c7:66:31:72:4d:eb:fe:
30:45:ac:fd:e2:67:06:38:54:5c:d3:9d:9f:15:b3:16:bd:81:
ef:3e:89:c5:22:94:f8:f0:0e:81:8f:04:9d:e8:5b:ca:5b:ac:
d0:33:01:2a:81:36:c5:af:30:e7:ce:04:a4:0d:1e:83:29:62:
6b:e5:5a:f9:05:56:94:af:6a:51:59:64:f6:64:c5:e4:bf:6d:
eb:e4:5e:c6:4e:61:e5:5e:10:63:a2:b9:43:ff:1a:81:67:39:
6f:e6:92:7e:ad:c0:b9:0e:8c:77:0f:55:c1:8d:e2:83:e4:63:
ad:20:21:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:25:27 2025 by rpki-client