Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/uoiUVIDNfkZ2KuHlklKV7NsoVHI.roa
File: uoiUVIDNfkZ2KuHlklKV7NsoVHI.roa (raw, json)
Hash identifier: 43VUL3d9OyAeFthVYs6awZG7mx4zABCC9QywbNaKgr4=
Subject key identifier: BA:88:94:54:80:CD:7E:46:76:2A:E1:E5:92:52:95:EC:DB:28:54:72
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 17CC
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/uoiUVIDNfkZ2KuHlklKV7NsoVHI.roa
Signing time: Mon 02 Feb 2026 02:50:45 +0000
ROA not before: Mon 02 Feb 2026 02:50:45 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 399138
IP address blocks: 124.42.128.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6092 (0x17cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Feb 2 02:50:45 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=BA88945480CD7E46762AE1E5925295ECDB285472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:f2:71:9b:a1:52:e1:09:b0:18:59:2a:f7:
88:71:69:70:22:07:61:52:b1:31:bf:52:46:4f:36:
7c:f1:5a:e8:78:3a:1e:78:4f:ac:bf:af:0d:64:df:
e6:de:a0:32:94:1e:a7:1d:0d:19:1f:44:28:81:61:
25:bb:1e:be:6e:09:31:9a:bf:0a:f1:d2:0b:30:c0:
90:b0:9b:55:32:1c:69:17:c3:79:35:01:98:85:c1:
e2:a6:b8:52:78:78:53:e1:da:23:7c:9a:93:6c:c2:
09:7e:2b:a4:3f:f5:bc:66:30:c8:09:92:18:2b:a0:
79:1d:22:6b:94:64:30:3f:63:29:6b:0f:53:ee:cd:
58:54:d1:fe:ea:50:b2:87:65:c2:c9:f8:1a:56:aa:
00:d6:35:2e:0b:a8:0e:7f:0b:5a:24:08:af:a7:a3:
84:26:2c:23:51:4b:99:86:6f:e3:0d:5e:a7:ef:15:
33:0f:f7:08:d2:1b:bb:bc:ea:cd:65:a2:23:5f:c0:
47:1d:58:84:65:a4:41:6d:b0:ce:57:59:cf:68:99:
c5:5d:b2:d5:06:9e:5f:c3:ee:00:ed:0c:e8:09:c7:
61:2b:0a:b8:60:09:ac:b1:f6:9e:20:69:f1:86:c6:
78:2b:6b:c9:7d:93:12:aa:61:3b:1b:61:82:f9:c5:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:88:94:54:80:CD:7E:46:76:2A:E1:E5:92:52:95:EC:DB:28:54:72
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/uoiUVIDNfkZ2KuHlklKV7NsoVHI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.42.128.0/22
Signature Algorithm: sha256WithRSAEncryption
18:45:74:e9:32:3a:5c:18:53:be:b4:70:bd:41:14:88:87:ad:
b1:29:6d:b2:8d:99:43:78:bf:c7:72:a4:d8:04:96:c3:cc:19:
33:e1:68:ea:c8:0a:c8:5e:74:83:46:99:86:d8:c4:f7:90:6c:
43:b5:4a:d8:a3:22:7f:d5:7f:c3:c6:93:4c:1e:a6:09:0a:fa:
78:95:40:50:bd:8f:f0:47:25:50:4d:e0:9e:af:ec:b6:47:93:
21:05:9b:9b:8c:95:cb:11:67:86:1f:5f:3a:13:12:98:5f:62:
67:d8:72:27:29:9a:30:b0:c1:55:69:d1:30:4e:b8:82:e7:98:
a2:15:e5:25:7b:9a:63:e8:b5:a5:f4:d1:14:b0:94:74:d4:61:
76:eb:ea:89:e4:45:e2:d9:87:bb:c5:04:e5:fc:97:3f:e7:29:
d8:55:f5:39:93:2b:81:b4:3c:ee:7a:42:46:bc:69:60:78:81:
18:d4:2e:cf:dd:ee:e9:e7:39:87:29:eb:c5:9b:69:ce:20:9d:
91:2e:25:10:52:29:8c:44:1b:12:92:a8:8b:7d:da:8e:bf:6f:
89:b2:81:7e:c9:30:d9:33:ab:5d:9d:b0:36:8d:80:a3:cf:d8:
9f:12:03:63:cb:be:f8:b1:64:ca:49:35:e1:92:88:48:17:85:
59:b8:14:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:18 2026 by rpki-client