Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/9oETNch_gAv-6wYdAez9jmFoFig.roa
File: 9oETNch_gAv-6wYdAez9jmFoFig.roa (raw, json)
Hash identifier: GgwdWkb0fGfgHm3tVJPTd6CmGXO7mmzdMa/kySWrGZ0=
Subject key identifier: F6:81:13:35:C8:7F:80:0B:FE:EB:06:1D:01:EC:FD:8E:61:68:16:28
Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Certificate serial: 34
Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9oETNch_gAv-6wYdAez9jmFoFig.roa
Signing time: Sat 17 May 2025 03:40:38 +0000
ROA not before: Sat 17 May 2025 03:40:38 +0000
ROA not after: Sun 10 May 2026 04:51:55 +0000
asID: 151270
IP address blocks: 110.40.37.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Validity
Not Before: May 17 03:40:38 2025 GMT
Not After : May 10 04:51:55 2026 GMT
Subject: CN=F6811335C87F800BFEEB061D01ECFD8E61681628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:ca:13:78:14:80:97:99:a7:ef:86:ec:9f:
e3:e3:ea:5c:38:94:b6:7f:63:61:c2:cd:9e:80:57:
2c:86:0a:ca:d9:a5:61:fa:88:b1:a8:21:26:17:d1:
4e:26:cc:86:ca:bb:36:cc:63:cb:e3:a4:e9:71:b8:
11:3d:4d:41:9e:d9:ee:12:a5:ee:42:8d:fa:b1:ed:
dc:7c:3b:d6:b1:c2:41:fd:26:76:a7:3c:79:42:8d:
02:65:88:e2:e5:84:2e:0a:44:a4:06:c4:7d:f0:54:
0a:3c:b6:61:e7:88:a8:8f:73:44:5b:0d:ca:c1:25:
6d:48:90:aa:98:9e:18:0b:a4:e2:bf:ca:08:27:70:
77:a8:bc:55:f3:34:0a:13:72:09:86:a6:7f:85:11:
2d:0e:88:a3:05:b0:37:6e:6f:2c:8c:d5:69:17:7c:
e6:ea:8f:e0:c8:d1:c7:3a:72:87:f5:73:ad:1a:d0:
b6:5f:59:de:86:84:7d:b3:05:d6:1e:ee:5d:00:53:
eb:04:16:0b:c4:64:ee:ed:b5:af:3c:38:ab:24:1d:
ca:e3:e3:89:f1:c2:81:45:f9:0a:ca:2c:29:01:e6:
07:8a:1a:0b:85:1f:a0:2e:32:15:07:35:3f:b0:f4:
4d:3b:db:81:d3:b1:f7:73:c3:5a:8d:e5:a3:5f:2e:
4d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:81:13:35:C8:7F:80:0B:FE:EB:06:1D:01:EC:FD:8E:61:68:16:28
X509v3 Authority Key Identifier:
keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9oETNch_gAv-6wYdAez9jmFoFig.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.40.37.0/24
Signature Algorithm: sha256WithRSAEncryption
91:b8:5f:81:94:8a:43:08:6c:60:c2:76:90:85:06:68:a9:c7:
41:06:e9:af:2d:fe:a8:69:db:ce:cd:cf:e6:18:52:14:5e:a1:
08:de:c5:b0:61:57:ec:33:50:86:4c:74:87:0e:e6:d2:ca:ab:
9b:86:a9:6b:8b:dc:61:2a:40:b3:23:b6:90:0d:11:b2:e0:8a:
5e:ef:82:41:45:63:cd:cd:d5:d6:12:4d:be:68:1d:d3:54:92:
38:23:a1:09:61:0f:4f:ca:1a:f7:dd:33:57:74:90:7f:8a:8a:
fc:07:fa:80:6c:03:02:11:d6:4d:07:25:02:bf:cf:a9:26:c0:
6e:ae:46:ee:ea:77:18:e8:f9:6a:fe:9d:9c:87:22:e3:7a:a6:
a8:0a:fc:d5:c5:ff:da:01:9f:a4:e3:bd:1f:51:c7:77:a3:5e:
1d:17:30:4f:e8:6a:78:f7:a6:85:f4:a5:09:0f:f4:23:39:88:
d4:77:09:04:5e:c6:9a:64:41:ca:73:7a:ea:32:bf:3f:5c:45:
6f:1a:62:21:74:76:09:2f:35:24:93:a2:dc:c8:5b:70:cc:22:
32:c2:1a:c9:61:af:04:98:9e:f9:b9:3c:46:16:15:02:21:88:
ef:e8:d3:22:d6:97:ba:d8:4b:23:f0:66:cf:77:93:d0:44:e3:
b0:c5:53:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 02:30:00 2025 by rpki-client