Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/316/ZhXxJV2arO2xggBTe8wJv0qZwzE.roa
File: ZhXxJV2arO2xggBTe8wJv0qZwzE.roa (raw, json)
Hash identifier: 5Krff80yQvRxDh4YE8ASSc5SrFdV3r9MIb5bIyiDWy4=
Subject key identifier: 66:15:F1:25:5D:9A:AC:ED:B1:82:00:53:7B:CC:09:BF:4A:99:C3:31
Certificate issuer: /CN=4BC6A9B58BBEEAD50DDD48F844782C8294A18B39
Certificate serial: 1BEF
Authority key identifier: 4B:C6:A9:B5:8B:BE:EA:D5:0D:DD:48:F8:44:78:2C:82:94:A1:8B:39
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/S8aptYu-6tUN3Uj4RHgsgpShizk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/ZhXxJV2arO2xggBTe8wJv0qZwzE.roa
Signing time: Mon 26 Jan 2026 07:00:53 +0000
ROA not before: Mon 26 Jan 2026 07:00:53 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 38378
IP address blocks: 119.40.64.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7151 (0x1bef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BC6A9B58BBEEAD50DDD48F844782C8294A18B39
Validity
Not Before: Jan 26 07:00:53 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=6615F1255D9AACEDB18200537BCC09BF4A99C331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:9e:8e:64:40:1d:0c:5f:b6:88:59:79:18:
16:0d:a0:d7:37:04:e1:8a:88:ee:d6:48:45:f8:c7:
e8:56:e8:34:c9:a2:77:4b:93:55:c1:a9:b4:e7:77:
fe:e3:68:fe:5b:f5:a6:e6:5a:bc:a2:cc:a6:0f:a2:
83:8f:83:be:4d:49:aa:cc:17:44:59:5a:a5:15:76:
8d:3f:0c:91:df:2f:b0:fd:ef:3e:e2:4d:da:a6:5f:
75:93:e1:d2:4a:ac:38:1a:09:05:47:9a:c9:9b:f2:
54:7e:d2:fe:1e:37:88:2e:6e:25:f2:0f:37:40:0c:
78:51:6d:6a:fe:ec:aa:53:c1:e6:db:3e:58:e6:b5:
d5:ad:0b:b5:e1:18:e6:99:b6:e5:74:84:24:6f:bd:
0b:54:8c:fe:53:97:96:f4:9b:4c:bc:24:84:fd:eb:
57:d6:1c:2c:b3:b7:2c:5c:28:a9:5a:e5:0f:c5:40:
11:99:5f:87:c7:74:37:c4:6c:61:52:77:72:fd:b4:
f9:01:ca:07:4f:0c:23:4e:fb:79:ff:52:b9:d6:28:
0f:ab:14:fb:0b:72:f0:1e:5e:7d:ae:a5:56:f6:04:
5a:3d:f7:47:fa:ce:88:91:3a:ea:44:2c:f2:8c:6c:
b1:ac:f6:b2:d0:14:d5:49:c2:ab:a0:be:57:86:a2:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:15:F1:25:5D:9A:AC:ED:B1:82:00:53:7B:CC:09:BF:4A:99:C3:31
X509v3 Authority Key Identifier:
keyid:4B:C6:A9:B5:8B:BE:EA:D5:0D:DD:48:F8:44:78:2C:82:94:A1:8B:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/S8aptYu-6tUN3Uj4RHgsgpShizk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/S8aptYu-6tUN3Uj4RHgsgpShizk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/ZhXxJV2arO2xggBTe8wJv0qZwzE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.40.64.0/20
Signature Algorithm: sha256WithRSAEncryption
b6:a1:10:27:20:2c:1d:7b:98:9c:5a:ea:d3:74:fb:9c:8f:43:
65:4c:bb:8e:73:19:30:78:53:6c:1b:62:09:bd:a6:0f:0c:11:
47:8b:05:5e:3c:43:b1:7a:70:0e:c1:79:f0:74:28:89:7e:33:
8a:1d:17:00:19:0d:3c:9f:eb:da:bc:48:bb:43:8f:1a:3b:93:
13:c8:89:17:47:aa:ae:f5:22:62:61:07:ca:39:db:a9:0b:ab:
c9:f6:c2:cb:96:f7:fa:b1:a5:e5:d0:e7:a6:14:d1:52:2d:1e:
75:ca:cd:77:e9:a8:f8:c9:24:f6:8e:c3:59:8b:77:bf:cf:d8:
65:6b:6a:d4:c9:e7:ab:16:c9:55:87:ad:8c:37:56:74:c1:6d:
1b:a0:c3:a5:bd:08:f4:e1:18:f4:15:97:1a:4e:51:63:a6:d2:
0b:6c:83:7f:bd:1c:60:cc:ab:c4:7d:e7:b6:72:36:75:5a:19:
e3:87:e9:aa:7f:e1:0c:c6:2a:3e:0e:41:f1:ba:31:74:54:63:
b0:86:2a:1d:33:c0:95:0c:c2:7c:d0:b2:c9:73:eb:76:0d:60:
4f:9e:b2:46:70:e6:b6:28:b9:1a:16:09:5e:0a:c9:26:ec:ed:
f5:c8:39:c0:f5:57:62:6f:76:13:4e:6d:a4:d7:b8:02:6e:1c:
01:1a:8e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:59 2026 by rpki-client