Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/DWcUJsR3Dgg7KbjhwnrCjdTovuQ.roa
File: DWcUJsR3Dgg7KbjhwnrCjdTovuQ.roa (raw, json)
Hash identifier: jrKcbvvKtIHdsQ4RvaaTHYkPK4YTDnCkQq8CfnmnpEA=
Subject key identifier: 0D:67:14:26:C4:77:0E:08:3B:29:B8:E1:C2:7A:C2:8D:D4:E8:BE:E4
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 1363
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/DWcUJsR3Dgg7KbjhwnrCjdTovuQ.roa
Signing time: Mon 21 Apr 2025 07:31:48 +0000
ROA not before: Mon 21 Apr 2025 07:31:48 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146806
IP address blocks: 45.250.152.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4963 (0x1363)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Apr 21 07:31:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0D671426C4770E083B29B8E1C27AC28DD4E8BEE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cf:22:8d:e2:bd:7f:a7:09:78:81:84:93:90:
df:bd:a4:89:56:e7:9a:0b:8c:02:a6:8d:22:2e:91:
c3:5d:e5:78:c6:d5:70:9e:db:ab:6b:18:90:7a:ba:
47:29:ae:d7:78:a0:4e:a9:89:a9:43:6e:5a:b6:a0:
35:9f:98:e4:9e:f7:a5:d2:c4:3c:6d:dd:09:76:40:
cf:4d:cb:97:51:88:35:d8:0a:43:17:12:a4:8d:37:
13:d4:9f:35:c0:c0:34:a2:73:ab:25:52:ca:ee:3a:
24:85:0b:96:d6:1a:63:ce:34:04:7b:4a:84:2a:13:
44:42:58:0a:1c:f4:03:60:db:b4:79:d8:33:ab:41:
90:21:8a:e4:36:3a:cd:65:96:b6:7c:d1:c5:32:50:
58:50:ce:5f:ff:f8:82:8d:7f:d6:a8:73:a3:27:a2:
d5:b9:ff:cd:2f:4c:44:cd:ce:b0:fa:2e:fc:c8:4f:
7b:73:ea:3c:31:35:9a:fc:f7:54:93:77:1e:95:db:
db:82:10:5e:78:00:1a:bb:3d:60:59:b5:e9:2a:7c:
06:86:a5:08:ef:df:36:1a:3c:66:24:77:ea:94:33:
b0:e1:8b:4f:84:91:51:63:f1:d8:03:86:98:e9:c5:
cf:65:52:ac:5b:c9:be:89:ef:fb:ce:16:a3:2c:b1:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:67:14:26:C4:77:0E:08:3B:29:B8:E1:C2:7A:C2:8D:D4:E8:BE:E4
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/DWcUJsR3Dgg7KbjhwnrCjdTovuQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.250.152.0/23
Signature Algorithm: sha256WithRSAEncryption
56:54:f7:20:ed:44:eb:0a:f6:6d:ad:ec:60:0f:e9:19:f2:9e:
3f:45:f1:77:b7:6d:05:50:b7:a4:81:35:38:f9:d1:32:ad:19:
bf:b3:3a:a5:56:d6:4d:3f:ce:e2:f3:51:0d:f9:e4:16:b8:dd:
38:5f:ad:7f:3f:50:dd:d5:1e:57:ea:b5:e0:b5:5d:de:14:18:
32:be:2e:fa:5d:39:c3:5f:2d:39:f9:e0:23:65:07:23:a2:c5:
6f:fa:8f:a7:17:b8:76:3a:7f:73:e7:02:e1:07:87:9a:4f:07:
3b:16:14:ac:94:fe:09:cf:e7:a7:22:6d:10:59:67:98:19:6b:
19:35:d4:50:1a:78:00:08:b8:a1:d7:04:5b:6d:a9:7f:bc:e7:
39:af:f2:e9:f3:b2:37:fb:ec:ad:0f:61:c4:72:02:54:54:1b:
0a:8d:c4:f8:07:b9:36:a8:17:67:eb:a4:1f:c5:6d:70:3e:a4:
37:e4:1e:2d:c7:88:58:97:1d:a2:f2:23:15:46:92:12:84:a1:
2d:50:d9:00:f6:5e:fb:7d:71:32:e5:f7:83:09:1d:ee:78:32:
46:83:5b:bc:3b:1f:9c:62:35:7b:da:c1:e4:aa:80:cb:3a:f1:
1f:69:62:27:ae:ef:cc:ee:49:cd:5e:3f:5c:cf:ff:43:38:4a:
7d:b3:e4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:39:40 2025 by rpki-client