Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/unECYORprGtkFNHjIqFP1D8mFGI.roa
File: unECYORprGtkFNHjIqFP1D8mFGI.roa (raw, json)
Hash identifier: WpTFyuLSYvX7DRF/XPeyaRA1m5Lwotn263mTwV5KSXQ=
Subject key identifier: BA:71:02:60:E4:69:AC:6B:64:14:D1:E3:22:A1:4F:D4:3F:26:14:62
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 21DB
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/unECYORprGtkFNHjIqFP1D8mFGI.roa
Signing time: Sat 13 Sep 2025 03:09:02 +0000
ROA not before: Sat 13 Sep 2025 03:09:02 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4811
IP address blocks: 118.145.32.0/19 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8667 (0x21db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Sep 13 03:09:02 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=BA710260E469AC6B6414D1E322A14FD43F261462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:24:fd:6f:ed:54:65:2b:13:35:18:1d:04:
36:ce:5d:f6:69:74:f2:8e:45:eb:dc:a2:d9:3c:76:
75:6f:a7:1a:66:e0:83:3c:4c:b1:fe:0e:8a:a9:21:
d1:f8:3b:66:85:10:75:5a:2c:89:7a:40:63:98:fa:
b4:59:0d:5d:ba:22:45:b8:50:9e:31:74:39:69:11:
ca:c5:16:9c:ca:be:ad:0a:43:22:2f:e7:26:07:d1:
27:49:29:23:98:17:af:93:4d:7e:e2:e1:e4:70:55:
99:41:00:90:f3:50:0e:67:ab:cd:6b:a2:f6:14:8f:
1f:c9:2d:6e:2a:6a:ac:60:48:17:3d:7c:78:c5:88:
ce:94:30:d0:7a:53:3f:2a:3a:51:5c:27:2e:10:88:
bc:47:df:26:6b:b2:9b:d7:74:44:b5:8b:dd:0f:2a:
ce:1a:ff:58:dd:eb:43:bf:a1:bf:8a:4e:58:96:a2:
ad:34:b3:5c:a1:6e:7c:b3:af:46:7f:aa:67:fd:13:
43:07:cb:f0:42:36:72:0c:e1:60:8f:47:31:61:fc:
6e:d5:1e:e8:5d:50:7f:d9:80:6c:52:21:02:ce:0d:
9b:84:2a:55:bc:8d:b3:f7:1f:f0:0c:24:eb:92:e5:
7f:77:25:bf:7e:b9:14:64:1a:6b:81:6f:c0:65:c1:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:71:02:60:E4:69:AC:6B:64:14:D1:E3:22:A1:4F:D4:3F:26:14:62
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/unECYORprGtkFNHjIqFP1D8mFGI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.145.32.0/19
Signature Algorithm: sha256WithRSAEncryption
89:c2:5c:c3:49:6f:f0:74:27:68:40:0a:eb:15:33:f2:e7:ae:
f0:5f:85:8e:57:48:a9:0c:f2:86:51:58:34:97:97:27:a7:7d:
e5:8b:95:b0:6e:73:3c:af:f6:20:5a:e5:09:9f:ff:9c:f9:e3:
8b:23:c1:31:42:00:fd:b9:06:79:c1:49:bc:4c:35:be:ce:18:
6c:57:a5:15:c1:5b:66:11:50:d2:cb:7f:cb:69:48:16:d1:54:
38:4b:b4:d2:dc:73:7a:bd:25:f1:6f:f1:a6:69:47:45:5b:df:
59:93:3e:97:06:03:bb:ed:7e:32:2a:aa:3b:94:d7:93:ea:51:
36:d6:8a:4e:1f:13:4f:52:87:89:93:a8:be:e1:ff:35:b9:1c:
ce:be:6e:3f:19:1c:25:4f:14:ed:2f:63:58:01:c5:e2:be:73:
67:4e:1b:1d:15:eb:92:c5:83:17:6b:2f:2f:ff:83:d4:ab:69:
9c:23:a8:4b:76:ee:99:14:72:eb:2a:3e:af:24:d7:de:57:12:
b6:fc:78:66:51:2f:5e:24:5d:f2:ab:50:11:91:6f:be:18:bd:
fb:6b:b9:cc:b5:ec:f3:10:a8:da:27:10:ba:df:b8:c6:ff:cc:
3b:ea:9c:8e:ea:19:8a:8a:0d:a0:34:13:d8:4e:8e:cc:c3:0f:
e0:ea:e0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:26:05 2025 by rpki-client