Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/JXuZIZYmDKKfvzlBpYURBcDhNYw.roa
File: JXuZIZYmDKKfvzlBpYURBcDhNYw.roa (raw, json)
Hash identifier: Fbtcy6nVt9+B6sg/xCkSdPjLqo07YUtd8VvIpojvSBw=
Subject key identifier: 25:7B:99:21:96:26:0C:A2:9F:BF:39:41:A5:85:11:05:C0:E1:35:8C
Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Certificate serial: 01A9
Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/JXuZIZYmDKKfvzlBpYURBcDhNYw.roa
Signing time: Tue 01 Apr 2025 03:54:43 +0000
ROA not before: Tue 01 Apr 2025 03:54:43 +0000
ROA not after: Tue 13 Jan 2026 01:35:26 +0000
asID: 24413
IP address blocks: 114.28.233.0/24 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Validity
Not Before: Apr 1 03:54:43 2025 GMT
Not After : Jan 13 01:35:26 2026 GMT
Subject: CN=257B992196260CA29FBF3941A5851105C0E1358C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:18:1e:16:01:1b:1a:b2:60:a1:15:2f:a4:
9f:fa:49:01:43:7c:a4:ef:d9:f0:70:b2:a3:c7:3b:
08:55:2b:12:3c:6f:d6:94:fc:da:37:91:4a:8f:42:
8e:a0:a3:42:08:25:c9:6b:0f:97:a2:e2:33:38:44:
ef:f8:3e:ab:bb:69:7f:cc:90:7d:00:c5:e0:68:bc:
17:02:ca:0d:0f:58:6a:a1:a8:7e:f3:94:6f:66:94:
b1:72:fd:57:a7:22:fb:9c:cf:81:ea:38:9c:82:2d:
dc:f5:01:d8:f1:e8:c1:e6:54:97:7f:60:d3:11:a4:
38:2a:18:f7:30:56:eb:82:c6:45:d6:7f:c6:4b:33:
17:c9:ae:c2:b4:52:7d:70:8e:76:00:80:ee:dd:ac:
1d:71:3f:94:6e:99:00:02:a4:40:b8:00:a6:7e:33:
3d:ea:cb:d5:7b:28:e1:63:6e:cc:d6:ac:56:e0:99:
26:09:92:87:f4:1c:18:16:45:2a:c6:ad:62:0f:ac:
62:e5:4b:09:94:cc:16:99:12:b8:60:d9:a0:6d:be:
3e:9f:3b:d2:1a:f0:6a:03:1a:65:d4:25:d8:09:08:
16:a8:19:08:7e:36:d3:2a:c2:03:89:00:d0:6d:60:
3d:2b:a3:7f:64:48:10:58:73:f0:c4:70:db:35:d3:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7B:99:21:96:26:0C:A2:9F:BF:39:41:A5:85:11:05:C0:E1:35:8C
X509v3 Authority Key Identifier:
keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/JXuZIZYmDKKfvzlBpYURBcDhNYw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.28.233.0/24
Signature Algorithm: sha256WithRSAEncryption
19:0a:bd:2b:f2:82:c9:47:27:6f:6d:d0:52:49:9a:5b:3c:ee:
40:fb:69:78:41:d0:d5:63:3f:21:5f:6e:70:6a:e1:8f:64:e5:
71:72:ea:bc:89:9e:58:8a:0f:66:77:40:7c:b5:62:42:01:bb:
16:b6:31:2f:57:05:ab:ac:3f:b3:32:29:eb:69:1f:b9:91:0d:
d3:77:ff:9b:3a:45:ee:1d:c6:fd:1e:e9:6d:e4:4f:64:76:71:
91:e0:3b:a2:89:d2:45:5f:77:e0:96:b6:74:4a:04:7a:94:b4:
7d:53:5c:bd:46:47:3f:e9:f5:12:ba:70:81:bf:89:f9:0f:b6:
b6:05:63:73:1b:35:6b:1a:b5:b4:7f:13:72:b1:39:81:6c:41:
e7:9b:62:4c:95:89:82:5f:15:e3:01:97:e2:b4:cc:22:fc:19:
99:ab:54:c0:8d:10:c9:32:86:2a:32:36:e6:01:8f:1b:5b:97:
05:8f:23:2d:c7:70:75:84:46:3d:6e:dd:bf:e6:74:71:36:b6:
70:00:0b:74:3c:90:57:ba:ea:5c:9e:a3:88:1c:fd:f2:40:8b:
4f:46:99:97:1e:df:a2:24:63:5d:13:ea:34:08:7a:f2:c3:db:
b5:56:45:dc:b7:cd:8d:e9:86:d1:9a:41:9b:29:cc:33:e4:27:
28:4b:74:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:17 2025 by rpki-client