Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/CEn2UfXf6_JupaP-5X0y-kTXKi4.roa
File: CEn2UfXf6_JupaP-5X0y-kTXKi4.roa (raw, json)
Hash identifier: Z8SqjP5wQhl4hFnp1rbJoGklVVbR+kNwoKG3v1a5M+w=
Subject key identifier: 08:49:F6:51:F5:DF:EB:F2:6E:A5:A3:FE:E5:7D:32:FA:44:D7:2A:2E
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 1804
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/CEn2UfXf6_JupaP-5X0y-kTXKi4.roa
Signing time: Thu 12 Feb 2026 08:17:05 +0000
ROA not before: Thu 12 Feb 2026 08:17:05 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 399468
IP address blocks: 124.42.156.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6148 (0x1804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Feb 12 08:17:05 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=0849F651F5DFEBF26EA5A3FEE57D32FA44D72A2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:f7:7f:6f:9a:3c:74:7a:06:f4:a9:45:80:
a7:55:eb:94:de:6c:c8:98:69:4c:b1:94:e6:2a:8b:
bd:9d:bc:6f:33:ce:b1:c2:85:8b:e6:33:b9:3e:ef:
4c:d0:56:57:af:7f:f3:4c:88:a6:e7:f0:53:57:e2:
f9:6f:68:04:40:b7:37:a4:53:56:fb:d6:9f:6b:25:
01:0d:b2:40:55:9f:88:65:26:cf:19:78:3a:09:09:
6b:7c:dd:6f:3d:47:8f:6d:0f:89:ed:c5:c8:35:98:
eb:e0:74:c0:f4:53:e2:c0:75:93:34:b4:ff:9f:2c:
35:68:6a:51:63:64:26:4d:1f:00:c1:44:44:1c:1f:
fe:c5:f4:9a:b8:7b:fb:cc:7e:f1:2d:e4:68:14:47:
23:3b:a0:5d:71:73:64:55:22:6c:89:c2:25:0b:bd:
16:97:13:e4:32:59:06:99:c7:eb:d0:4e:90:ab:8a:
ed:b1:69:3a:0a:b9:cd:a5:1e:85:f9:9e:95:bc:39:
dd:61:54:40:49:30:43:b7:12:1f:3f:ff:a4:f9:f4:
c9:35:a4:bc:c7:53:ae:40:46:9c:de:b4:3f:c5:e5:
22:38:b6:7e:dd:b7:85:78:52:d8:f4:73:9c:c2:0f:
7d:84:1a:69:b9:22:77:7c:d1:7f:84:fe:04:a6:f1:
b6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:49:F6:51:F5:DF:EB:F2:6E:A5:A3:FE:E5:7D:32:FA:44:D7:2A:2E
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/CEn2UfXf6_JupaP-5X0y-kTXKi4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.42.156.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:e3:84:bf:35:34:1a:c2:2a:9e:ff:9b:b0:77:8b:e5:b8:5e:
8b:5a:f3:7f:26:98:3a:10:e6:f7:bd:8b:59:d0:98:7d:a1:51:
a0:59:3b:da:dd:fb:c9:c3:4d:73:38:fe:a2:a6:61:f8:71:d9:
58:03:23:c6:06:91:75:f8:08:5e:e0:59:40:d3:0b:64:47:d6:
fa:81:05:70:0d:27:e9:2f:b4:74:3a:70:2b:cd:ea:b8:bf:e5:
a6:36:69:db:77:15:ea:8e:9c:12:6d:f4:e6:c8:cf:a8:e7:77:
06:47:f1:0f:7c:aa:39:a4:06:c1:f4:3d:24:b3:af:12:ea:41:
9b:8a:70:2b:a2:ee:46:bd:08:16:ce:d3:fc:fb:25:10:49:f7:
ae:27:9c:08:c2:21:95:c0:e2:4e:da:d4:54:55:af:cc:16:89:
09:6a:79:e1:c6:e8:89:0a:6c:35:df:ae:ad:c3:59:11:47:4b:
69:0f:05:5b:b3:95:49:e5:90:5d:d4:6f:0c:bb:0a:80:c4:7f:
06:2e:8b:db:47:c8:d7:47:7c:96:4b:eb:d3:e7:d0:50:11:5a:
bc:cd:ed:c3:14:a4:d8:e2:cb:f5:19:48:25:f5:9a:b2:b7:0e:
27:f9:fe:3a:9c:54:98:bb:28:78:8c:17:df:c8:8c:82:f7:c3:
30:e6:59:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:18:55 2026 by rpki-client