Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/CDf_MajPS1f1HXU9tVsQ8qkD-l4.roa
File: CDf_MajPS1f1HXU9tVsQ8qkD-l4.roa (raw, json)
Hash identifier: YjhgqiVZ0TE0/2/VORQP2eNMqrgWdLk0VxLTxiyTEx0=
Subject key identifier: 08:37:FF:31:A8:CF:4B:57:F5:1D:75:3D:B5:5B:10:F2:A9:03:FA:5E
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 1840
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/CDf_MajPS1f1HXU9tVsQ8qkD-l4.roa
Signing time: Tue 24 Feb 2026 03:17:03 +0000
ROA not before: Tue 24 Feb 2026 03:17:03 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 62387
IP address blocks: 101.232.36.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6208 (0x1840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Feb 24 03:17:03 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=0837FF31A8CF4B57F51D753DB55B10F2A903FA5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:7e:49:04:70:4b:5e:37:7d:b3:49:7d:0b:
7e:e2:68:81:f4:f2:40:7d:83:27:9c:4a:d0:63:a3:
1c:9f:c4:6c:1c:76:b7:10:8f:9b:58:54:0e:65:76:
4b:2c:87:8e:50:fe:6c:8d:44:58:8d:3a:88:68:e6:
5d:bd:03:cc:47:c9:5e:35:45:31:99:f2:68:c1:86:
ec:33:37:44:04:cc:7f:44:d3:24:bd:e5:52:8b:85:
18:86:80:12:f2:92:56:b5:ba:8b:2d:a1:0c:0b:85:
23:60:c5:41:ff:1d:d7:f7:3e:12:cf:b7:6c:78:3c:
3c:21:49:df:fc:96:35:ca:0b:74:54:18:65:df:86:
12:6e:e8:8f:e7:e7:88:bf:a3:fd:8a:57:a2:16:d9:
cf:27:ad:23:25:78:24:84:25:ed:ce:1b:e1:49:4b:
cb:d7:2f:70:f5:3c:2b:24:f1:ff:86:dd:f2:eb:3a:
69:0f:43:27:a7:a3:53:c2:f6:b4:ea:56:20:c1:5e:
03:48:23:2d:15:a1:ae:66:de:80:dc:a1:9c:a6:70:
88:fc:f4:33:89:b5:00:85:68:c0:cb:d4:6b:2d:93:
bb:dc:e0:e5:38:dc:f9:33:73:11:39:05:a8:4e:7f:
51:fb:c6:e6:9e:5d:39:fe:15:c9:6f:1b:c6:c3:c3:
ce:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:37:FF:31:A8:CF:4B:57:F5:1D:75:3D:B5:5B:10:F2:A9:03:FA:5E
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/CDf_MajPS1f1HXU9tVsQ8qkD-l4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.232.36.0/22
Signature Algorithm: sha256WithRSAEncryption
95:3d:75:d4:48:92:be:39:57:51:c5:fe:1c:d6:44:ce:8e:0c:
fa:2b:f7:24:ab:5b:0e:bd:b0:cc:4b:31:9a:d4:cb:85:5d:84:
c7:9e:a5:b5:37:9d:83:60:b9:e8:3c:4a:f9:fb:ed:a7:99:a3:
74:74:14:3b:89:fd:01:4a:3b:c0:9d:79:71:e5:3a:ac:cc:73:
1b:b3:fb:9c:ba:b4:f0:81:a8:1a:47:88:67:65:d3:34:98:57:
a0:c7:05:87:6f:01:a3:82:19:d0:45:b0:2d:09:4c:31:0e:58:
e8:53:5b:5d:e9:9e:97:26:eb:ff:7a:fc:55:94:de:06:f7:59:
d0:b4:b1:0a:5d:87:72:cd:b3:b6:a4:86:8b:09:c4:b4:f9:b4:
98:f1:0f:0f:25:3a:59:f2:0b:1b:ec:ae:78:38:0e:b3:74:d2:
02:52:9e:d8:5a:ae:f6:b2:5e:76:bb:69:7a:e1:fc:3b:0f:06:
26:28:84:1f:9b:db:fc:87:00:70:cc:08:03:46:90:f4:5c:5d:
bc:e0:12:79:14:4a:41:7e:3c:08:80:1e:b5:27:87:32:44:9f:
b5:60:93:e4:c7:a3:3b:01:2c:b0:13:0e:95:74:bb:43:9f:ad:
d0:2f:0b:8d:3a:08:0c:dc:98:5a:31:a2:e7:04:06:b3:41:e3:
62:5e:1e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:19:10 2026 by rpki-client