Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/m-EajZ3UtC-jWVcwAdQHCRdXmwM.roa
File: m-EajZ3UtC-jWVcwAdQHCRdXmwM.roa (raw, json)
Hash identifier: v6Hwo6tn+sOXXx9/lMrIRNpo0cSa4BR/TBVNQMr6M6M=
Subject key identifier: 9B:E1:1A:8D:9D:D4:B4:2F:A3:59:57:30:01:D4:07:09:17:57:9B:03
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 0C43
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/m-EajZ3UtC-jWVcwAdQHCRdXmwM.roa
Signing time: Sat 07 Jun 2025 14:02:28 +0000
ROA not before: Sat 07 Jun 2025 14:02:28 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4134
IP address blocks: 59.107.192.0/18 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3139 (0xc43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Jun 7 14:02:28 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9BE11A8D9DD4B42FA359573001D4070917579B03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:6b:1c:01:5d:82:f6:51:5b:f8:70:59:e5:
73:06:b2:03:9d:b6:89:76:db:5d:05:9d:c9:99:be:
42:6b:64:ad:82:cb:1c:fc:17:a3:89:db:26:e9:dc:
ba:5c:48:18:47:2e:31:4c:09:74:0c:44:d9:9f:e5:
d7:48:be:5a:2d:e0:7a:b6:40:5f:b5:35:de:8b:a1:
56:65:49:0b:40:95:01:5c:a1:ab:1c:04:03:f6:eb:
4d:8f:a4:7f:97:f9:70:f9:40:b4:f3:ae:8f:11:c7:
4f:96:79:3c:c2:09:4c:c9:1d:83:ac:7c:66:04:03:
c1:b8:ce:20:0e:9d:9e:5f:c4:41:dd:96:f5:b9:ed:
c0:07:4d:1a:ac:da:0c:72:0c:5a:7d:a4:7e:b7:5f:
e7:21:07:c3:83:a6:e5:44:4d:ec:b0:d2:31:b7:cf:
db:fa:07:28:24:33:28:20:08:fa:df:bd:a5:5f:1b:
58:7d:37:13:de:0a:9f:bc:14:18:7f:a5:5e:de:be:
2f:0e:77:29:e6:34:6c:45:1b:ca:1e:c0:96:39:a9:
a4:40:6e:5f:72:e5:ea:c1:33:79:c8:f3:9f:14:f6:
68:34:1d:ce:71:a6:5a:09:51:ae:f8:d1:b2:1c:49:
17:f3:77:6b:2f:9e:ef:db:5f:bb:a6:92:78:2b:bf:
0e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E1:1A:8D:9D:D4:B4:2F:A3:59:57:30:01:D4:07:09:17:57:9B:03
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/m-EajZ3UtC-jWVcwAdQHCRdXmwM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.107.192.0/18
Signature Algorithm: sha256WithRSAEncryption
43:78:af:7f:8f:be:33:c2:21:50:db:83:cb:23:89:fa:a8:c3:
eb:d5:df:b8:1c:7f:c9:4f:16:5e:84:75:5c:7f:99:94:b2:50:
c4:f6:0b:a1:13:9f:aa:76:77:a6:13:cc:5a:43:20:bc:2a:50:
d5:05:65:34:bb:2d:ec:fb:39:13:dd:60:aa:7c:55:47:89:9a:
75:03:47:20:3c:ce:d5:29:f0:a8:f5:97:ab:6a:b7:16:e6:f2:
df:12:33:38:f7:56:1d:c1:28:36:2f:da:bb:cb:ab:63:e4:43:
00:71:63:36:0d:a1:5d:1f:35:81:ba:c1:34:d9:d4:26:a1:64:
51:7f:7e:4a:72:4c:62:1d:35:45:09:0c:1e:d2:5d:c1:03:04:
aa:c9:6e:3c:34:06:59:7b:16:4e:0e:5a:0c:28:42:44:0e:d2:
4b:f0:e3:8d:85:f1:59:5f:65:37:1d:5c:37:54:a5:4f:b6:5f:
39:22:e8:0a:5a:3e:11:de:01:08:a2:c7:a2:cf:01:b4:42:ef:
c0:de:93:7e:db:c3:4e:25:97:fe:91:73:d2:70:38:78:9c:df:
7f:eb:a5:91:ff:31:a8:a8:e8:f7:0c:d3:91:f3:a0:63:3c:41:
60:01:15:5b:9e:a7:73:c6:be:da:13:2d:d2:d7:41:1c:c7:c7:
9d:01:17:be
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICDEMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4
MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNTA2MDcx
NDAyMjhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDlCRTExQThEOURENEI0
MkZBMzU5NTczMDAxRDQwNzA5MTc1NzlCMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/MGscAV2C9lFb+HBZ5XMGsgOdtol2210FncmZvkJrZK2Cyxz8
F6OJ2ybp3LpcSBhHLjFMCXQMRNmf5ddIvlot4Hq2QF+1Nd6LoVZlSQtAlQFcoasc
BAP2602PpH+X+XD5QLTzro8Rx0+WeTzCCUzJHYOsfGYEA8G4ziAOnZ5fxEHdlvW5
7cAHTRqs2gxyDFp9pH63X+chB8ODpuVETeyw0jG3z9v6BygkMyggCPrfvaVfG1h9
NxPeCp+8FBh/pV7evi8OdynmNGxFG8oewJY5qaRAbl9y5erBM3nI858U9mg0Hc5x
ploJUa740bIcSRfzd2svnu/bX7umkngrvw7RAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUm+EajZ3UtC+jWVcwAdQHCRdXmwMwHwYDVR0jBBgwFoAUlIG05AkBXY630D82
A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s
SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT
BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw
MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvbS1FYWpaM1V0Qy1qV1Zjd0Fk
UUhDUmRYbXdNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu
L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjtr
wDANBgkqhkiG9w0BAQsFAAOCAQEAQ3ivf4++M8IhUNuDyyOJ+qjD69XfuBx/yU8W
XoR1XH+ZlLJQxPYLoROfqnZ3phPMWkMgvCpQ1QVlNLst7Ps5E91gqnxVR4madQNH
IDzO1SnwqPWXq2q3Fuby3xIzOPdWHcEoNi/au8urY+RDAHFjNg2hXR81gbrBNNnU
JqFkUX9+SnJMYh01RQkMHtJdwQMEqsluPDQGWXsWTg5aDChCRA7SS/DjjYXxWV9l
Nx1cN1SlT7ZfOSLoClo+Ed4BCKLHos8BtELvwN6TftvDTiWX/pFz0nA4eJzff+ul
kf8xqKjo9wzTkfOgYzxBYAEVW56nc8a+2hMt0tdBHMfHnQEXvg==
-----END CERTIFICATE-----
Generated at Wed Jun 18 20:36:57 2025 by rpki-client