Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/S_MaBuVvXeEz8EUEzsZ2VLaSYeM.roa
File: S_MaBuVvXeEz8EUEzsZ2VLaSYeM.roa (raw, json)
Hash identifier: b9Pj/98DyH1i/9rmPav1GV/LK/101bgqHUXbqdTkwEw=
Subject key identifier: 4B:F3:1A:06:E5:6F:5D:E1:33:F0:45:04:CE:C6:76:54:B6:92:61:E3
Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Certificate serial: 37
Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/S_MaBuVvXeEz8EUEzsZ2VLaSYeM.roa
Signing time: Sat 17 May 2025 03:40:38 +0000
ROA not before: Sat 17 May 2025 03:40:38 +0000
ROA not after: Sun 10 May 2026 04:51:55 +0000
asID: 151270
IP address blocks: 110.40.50.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Validity
Not Before: May 17 03:40:38 2025 GMT
Not After : May 10 04:51:55 2026 GMT
Subject: CN=4BF31A06E56F5DE133F04504CEC67654B69261E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:78:43:80:24:39:2f:ac:5d:47:85:f3:9b:
e7:3e:4d:ef:49:e9:c1:13:ef:6f:34:e9:a5:dd:bd:
67:c4:92:1d:62:2b:32:2e:97:63:26:c4:66:d6:10:
c5:90:b7:40:b5:f1:92:4d:80:5c:0e:fb:d9:21:cf:
f3:23:34:0d:30:3b:99:18:e6:c6:c4:47:24:8a:e2:
7f:c4:69:4a:b9:49:27:d1:b2:76:0e:df:df:e1:a4:
6a:93:59:ad:05:87:96:30:c9:44:17:c2:8d:93:22:
1d:1c:b1:08:7d:7f:ee:a6:58:86:d4:c0:8c:21:ee:
85:99:5b:91:fb:a7:0b:c4:10:de:32:00:b3:51:c9:
3c:44:d2:a8:6c:d5:90:c8:c1:3a:8c:df:a9:43:34:
5d:e3:01:d4:5f:63:d7:37:ac:12:79:5d:b2:ae:76:
b2:a5:56:26:67:f9:5e:03:a9:5a:cc:64:3b:78:0e:
dd:7c:e2:72:b3:c7:8b:35:33:b4:c1:dc:36:d4:03:
a0:ff:0b:6b:f0:a8:c0:f8:a2:bf:9a:06:78:b8:72:
cd:ff:66:26:fe:09:62:0a:50:11:2a:ef:e2:70:ef:
84:db:e8:e5:b2:fb:16:4b:c7:0f:e1:1f:4b:36:20:
fc:48:5e:7f:c7:e6:57:c6:30:1d:ea:fb:5c:16:41:
b3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F3:1A:06:E5:6F:5D:E1:33:F0:45:04:CE:C6:76:54:B6:92:61:E3
X509v3 Authority Key Identifier:
keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/S_MaBuVvXeEz8EUEzsZ2VLaSYeM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.40.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:5b:9f:36:2e:c5:92:1f:1d:ce:16:0d:d2:f9:e4:6e:be:eb:
82:ee:f9:be:55:68:cb:ec:c3:6f:ba:24:7a:5b:f6:b0:e5:d8:
9c:98:58:8e:67:52:22:f2:e8:aa:77:3b:d8:4f:c6:91:b2:a6:
78:42:46:28:c2:25:cb:a1:40:88:52:c2:96:d9:44:e7:aa:ce:
06:05:da:b6:65:cf:7d:89:9c:2c:a7:05:6b:97:db:61:01:d6:
6c:54:10:6c:2a:1a:ab:a7:8d:32:59:bf:ef:c7:1c:b5:10:c3:
d2:ac:0a:e6:b2:b1:ca:c8:ba:1b:0a:0d:dc:83:35:a6:de:3f:
f4:03:d1:94:7a:07:ca:c6:b6:19:51:d5:6a:37:fd:0f:d0:1d:
eb:6e:d3:eb:36:1a:d1:ef:d0:85:f4:3f:b8:40:d9:67:82:48:
f3:c5:1f:d8:91:7f:a6:5f:c2:dd:04:b4:4b:df:86:6f:18:d5:
79:9a:4f:05:c6:d1:75:33:5a:31:99:45:93:b9:4e:c2:dc:f4:
5b:26:da:0b:6e:4a:f2:8a:6b:95:9d:f2:3a:43:2a:bb:0d:ac:
cd:4d:75:76:3b:f0:a2:de:f1:97:9c:9f:ff:f0:7d:15:9f:2f:
14:74:90:e4:b3:18:f1:dd:0e:1d:31:9a:d7:79:ef:50:a5:b8:
dd:dc:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 18:13:08 2025 by rpki-client