Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/fvd69ZsPYeQZtzroqsavM-2UErE.roa
File: fvd69ZsPYeQZtzroqsavM-2UErE.roa (raw, json)
Hash identifier: qSesFb98caUbD4FGBELb4OZX9SygP4mja1bw9UcJR5w=
Subject key identifier: 7E:F7:7A:F5:9B:0F:61:E4:19:B7:3A:E8:AA:C6:AF:33:ED:94:12:B1
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 1184
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/fvd69ZsPYeQZtzroqsavM-2UErE.roa
Signing time: Fri 17 Jan 2025 01:28:22 +0000
ROA not before: Fri 17 Jan 2025 01:28:22 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 209242
IP address blocks: 103.79.228.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4484 (0x1184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Jan 17 01:28:22 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7EF77AF59B0F61E419B73AE8AAC6AF33ED9412B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f1:b6:c5:3c:7d:e2:7f:b8:1c:b7:84:f7:3c:
64:65:d3:d5:86:25:bc:65:25:05:3c:53:10:56:fe:
0d:62:78:48:8b:c2:e1:7b:73:34:0e:8c:cd:87:e4:
a3:3f:be:7d:83:13:dd:2b:c0:6f:e5:73:45:81:5c:
59:5f:24:4a:c8:cb:ce:6e:fe:fc:5a:8a:17:79:0c:
57:6a:48:9e:a2:e5:cf:f8:93:86:dc:d6:41:ae:99:
9d:50:94:36:8e:11:db:40:0f:0b:a3:a3:94:c6:d5:
87:5c:c0:68:b4:75:e9:70:78:17:05:1c:38:e6:11:
74:ac:23:1e:62:bc:18:e4:93:7b:a8:cc:35:72:81:
2a:a6:ba:24:0e:b7:cd:54:7d:51:8f:44:9d:2a:91:
d1:ff:81:2a:a5:83:fc:2e:30:cc:73:6a:76:bd:69:
39:23:90:35:a9:06:f6:f5:21:26:01:76:50:39:a2:
66:1b:e1:54:bd:5f:f7:37:f2:84:cb:10:34:46:84:
88:d5:d6:c6:0e:27:91:ab:fb:3a:67:d9:31:55:ce:
1f:a0:24:92:0e:44:a8:2c:ba:4a:8d:ab:de:6b:2b:
7e:7b:f0:f6:6c:a3:c4:62:0c:24:ca:e7:12:7b:6f:
1e:24:16:5b:29:2a:8e:0e:15:88:a1:5d:cb:7c:84:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F7:7A:F5:9B:0F:61:E4:19:B7:3A:E8:AA:C6:AF:33:ED:94:12:B1
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/fvd69ZsPYeQZtzroqsavM-2UErE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.228.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:c4:c0:1f:59:70:3f:95:4b:18:6d:5e:9f:b9:b5:19:4e:8c:
7e:e8:22:24:40:61:36:33:d7:73:d7:82:5f:d0:a9:55:ea:44:
65:21:21:e5:77:3a:f4:5c:65:ef:f6:96:73:2a:f1:74:2e:0a:
76:3a:75:ec:d0:29:17:a2:ef:e9:cc:7b:48:25:d5:98:d4:04:
f7:df:65:00:91:30:6f:14:dd:fb:f1:29:cd:c6:0f:f4:4b:51:
1c:8b:fd:b0:0a:3b:64:25:4c:87:44:ad:b3:57:96:19:d5:7d:
d8:80:b6:21:19:84:9a:1b:67:ab:b5:64:28:b9:b6:d9:31:fb:
8b:91:ab:19:b2:c1:63:d2:f6:ec:7c:6f:43:78:72:5d:b0:bf:
12:5a:92:73:b6:43:ef:92:53:eb:6e:94:6e:49:3d:32:81:fc:
05:21:8a:57:78:61:a4:0b:a9:8e:d5:a4:d1:04:e0:00:5d:bf:
61:42:2c:c5:4b:52:b3:12:34:fc:ef:77:7a:1a:50:d0:fb:f8:
36:c4:91:9d:a3:37:fe:43:ee:6a:6c:87:36:3b:74:15:ff:0d:
39:d6:35:28:fb:fd:47:1a:8e:3c:fa:d6:76:58:39:17:79:44:
08:19:58:e9:c2:a1:8d:6f:29:e9:e0:b8:48:ae:17:04:3c:58:
7c:79:bc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:21 2025 by rpki-client