Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/mYrHHv-tXUm8zvPCiVVHlFQeA-Y.roa
File: mYrHHv-tXUm8zvPCiVVHlFQeA-Y.roa (raw, json)
Hash identifier: Ndebnz/VJzrPk2L5DUkV8W9j8kHZFwUZcbNj85tMtoQ=
Subject key identifier: 99:8A:C7:1E:FF:AD:5D:49:BC:CE:F3:C2:89:55:47:94:54:1E:03:E6
Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Certificate serial: 0DF0
Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/mYrHHv-tXUm8zvPCiVVHlFQeA-Y.roa
Signing time: Sat 06 Sep 2025 08:02:53 +0000
ROA not before: Sat 06 Sep 2025 08:02:53 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 135061
IP address blocks: 2407:8f40:2::/48 maxlen: 64
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3568 (0xdf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Validity
Not Before: Sep 6 08:02:53 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=998AC71EFFAD5D49BCCEF3C289554794541E03E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:e2:ce:44:35:c5:9e:fd:cc:d8:0f:33:3c:
a5:c4:86:fb:62:d9:5b:86:ac:52:0a:c6:34:0c:09:
ec:5c:d3:62:45:02:1b:99:5d:8c:5d:7e:70:86:e2:
7e:40:69:cd:f3:e0:2d:69:b3:32:31:45:e9:10:99:
35:71:05:d4:d0:ec:87:03:07:61:2d:21:07:91:47:
45:7f:5c:05:82:3d:bb:7b:8e:3d:f6:5b:58:e2:d5:
cd:a8:67:a5:11:05:f3:04:6c:83:7b:f8:f3:86:b1:
2f:dc:39:c7:f4:42:8f:84:ad:af:f4:69:a8:2d:e9:
a5:3f:36:46:01:b7:7d:d1:7d:62:d6:2a:6f:52:15:
69:4c:31:fd:7b:60:ed:d0:f6:9a:2d:2f:57:ba:0d:
e8:e2:3f:71:e7:4c:2d:83:73:44:60:71:c4:2d:25:
71:6c:9e:c2:bf:63:45:5f:25:cc:3f:b4:c3:c1:04:
b7:24:5d:b0:70:d1:2a:e7:d2:3a:7c:bf:2f:58:b0:
c4:cf:89:7e:90:4a:e6:df:d4:7e:11:ef:34:7d:0c:
9d:19:96:bb:06:14:4c:56:61:e5:74:e7:36:29:85:
cb:80:e0:ff:bc:0c:d8:f6:81:9e:d7:1f:c2:58:de:
04:c5:53:ec:4a:a2:01:6c:20:62:e6:93:df:8d:af:
9c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8A:C7:1E:FF:AD:5D:49:BC:CE:F3:C2:89:55:47:94:54:1E:03:E6
X509v3 Authority Key Identifier:
keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/mYrHHv-tXUm8zvPCiVVHlFQeA-Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:8f40:2::/48
Signature Algorithm: sha256WithRSAEncryption
4a:3d:f9:e1:42:7d:73:65:a6:93:da:bd:03:0d:d8:71:d8:2f:
73:c9:aa:fe:47:6e:8e:a2:28:17:09:58:4b:a2:fc:c1:50:7d:
02:5f:45:74:e0:82:3c:1f:a9:a0:cd:2d:e3:4b:95:73:51:ae:
0f:6d:e0:80:f9:d1:df:27:62:d9:6d:5c:02:91:01:9b:f3:1c:
1f:ac:4a:71:ae:97:ca:41:59:df:c3:87:7a:64:08:f8:61:ac:
e9:e0:62:3c:93:23:dd:7f:fc:8b:10:8f:b4:f4:3a:84:a2:cd:
3e:a5:4f:67:a6:5b:66:be:60:86:cc:a7:ca:11:83:2e:4d:7f:
4a:a7:97:6d:cc:2b:f2:12:c6:41:57:04:79:50:fd:19:4b:f3:
8c:08:42:99:7a:af:7d:51:e6:16:1d:bb:df:9d:1a:fc:ff:6c:
2c:b2:14:69:d9:32:03:dc:9a:c4:2b:dd:eb:aa:12:88:fd:15:
0a:9a:4a:80:2b:b6:d0:7d:9a:d0:b7:92:1a:48:af:fd:17:f1:
f7:bc:12:3e:25:d9:ba:5e:8c:86:34:e8:e7:88:d0:ca:69:1d:
2f:ef:36:05:d3:1e:14:3d:c3:28:e5:95:66:9e:57:13:e8:9f:
70:58:7d:46:d7:df:7e:e6:4a:3a:1e:31:ef:15:54:42:b7:bb:
e8:77:3d:29
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICDfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ix
NjcwN0VBRjBCREZEMTMyNkFGRDlCREVDNkFGRkE2RTYzQkE5ODAeFw0yNTA5MDYw
ODAyNTNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDk5OEFDNzFFRkZBRDVE
NDlCQ0NFRjNDMjg5NTU0Nzk0NTQxRTAzRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHHOLORDXFnv3M2A8zPKXEhvti2VuGrFIKxjQMCexc02JFAhuZ
XYxdfnCG4n5Aac3z4C1pszIxRekQmTVxBdTQ7IcDB2EtIQeRR0V/XAWCPbt7jj32
W1ji1c2oZ6URBfMEbIN7+POGsS/cOcf0Qo+Era/0aagt6aU/NkYBt33RfWLWKm9S
FWlMMf17YO3Q9potL1e6DejiP3HnTC2Dc0RgccQtJXFsnsK/Y0VfJcw/tMPBBLck
XbBw0Srn0jp8vy9YsMTPiX6QSubf1H4R7zR9DJ0ZlrsGFExWYeV05zYphcuA4P+8
DNj2gZ7XH8JY3gTFU+xKogFsIGLmk9+Nr5wRAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUmYrHHv+tXUm8zvPCiVVHlFQeA+YwHwYDVR0jBBgwFoAUyxZwfq8L39Eyav2b
3sav+m5jupgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
NS95eFp3ZnE4TDM5RXlhdjJiM3Nhdi1tNWp1cGcuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3l4WndmcThMMzlFeWF2MmIzc2F2LW01anVwZy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTUvbVlySEh2LXRYVW04
enZQQ2lWVkhsRlFlQS1ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACQHj0AAAjANBgkqhkiG9w0BAQsFAAOCAQEASj354UJ9c2Wmk9q9Aw3Ycdgv
c8mq/kdujqIoFwlYS6L8wVB9Al9FdOCCPB+poM0t40uVc1GuD23ggPnR3ydi2W1c
ApEBm/McH6xKca6XykFZ38OHemQI+GGs6eBiPJMj3X/8ixCPtPQ6hKLNPqVPZ6Zb
Zr5ghsynyhGDLk1/SqeXbcwr8hLGQVcEeVD9GUvzjAhCmXqvfVHmFh27350a/P9s
LLIUadkyA9yaxCvd66oSiP0VCppKgCu20H2a0LeSGkiv/Rfx97wSPiXZul6MhjTo
54jQymkdL+82BdMeFD3DKOWVZp5XE+ifcFh9RtfffuZKOh4x7xVUQre76Hc9KQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:12:20 2025 by rpki-client