Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/UyCaqegX0-eEEhnSjZvBk6mm-0E.roa
File: UyCaqegX0-eEEhnSjZvBk6mm-0E.roa (raw, json)
Hash identifier: wOvH8cOq6jMa075cTj4pdqejCseoQGoIaw+as+jKw6I=
Subject key identifier: 53:20:9A:A9:E8:17:D3:E7:84:12:19:D2:8D:9B:C1:93:A9:A6:FB:41
Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Certificate serial: 0184
Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/UyCaqegX0-eEEhnSjZvBk6mm-0E.roa
Signing time: Fri 28 Mar 2025 02:40:04 +0000
ROA not before: Fri 28 Mar 2025 02:40:04 +0000
ROA not after: Tue 13 Jan 2026 01:35:26 +0000
asID: 142132
IP address blocks: 114.28.218.0/23 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Validity
Not Before: Mar 28 02:40:04 2025 GMT
Not After : Jan 13 01:35:26 2026 GMT
Subject: CN=53209AA9E817D3E7841219D28D9BC193A9A6FB41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:a9:d3:bd:2a:6e:f5:0d:7e:cd:a4:ac:76:
f2:bc:00:d2:2f:7c:0f:4f:d5:37:d6:74:d5:cb:ae:
e8:38:09:8e:fa:da:4a:50:ec:76:8c:29:9d:4e:2b:
35:9e:8c:ff:57:da:ef:f6:db:73:7c:1b:30:4f:c5:
b6:b2:c4:2b:99:f0:51:75:a3:dd:42:72:e9:d6:de:
ec:1c:4d:7b:2a:b2:c6:88:c6:73:ec:f9:56:e4:8c:
63:45:2c:38:4b:4c:f8:ba:b2:3b:1b:3c:4a:45:e1:
22:4e:fe:63:4b:14:8c:ba:bd:05:f5:23:c4:83:f1:
7c:8b:15:b1:14:b7:b3:81:54:94:9c:7f:bb:ca:1e:
c7:e9:3f:34:3f:d1:9b:45:70:1f:09:d2:bb:88:a4:
1c:47:c6:0f:1a:50:e7:41:72:36:3c:66:3c:cf:1a:
45:cb:5f:1a:7d:b0:01:00:54:f1:d9:65:2b:87:7f:
4f:47:7b:78:75:08:a8:f1:8a:b5:41:d3:ef:bd:72:
1b:39:1a:8a:61:76:04:4f:a4:cc:97:fd:5b:a4:1d:
30:28:73:66:56:44:c7:32:03:04:b1:0a:f2:34:73:
ab:ad:4d:07:07:8b:10:30:64:f2:2c:62:e2:20:0a:
69:c1:a4:a4:63:83:dc:1f:40:3a:aa:08:c4:b7:4e:
bf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:20:9A:A9:E8:17:D3:E7:84:12:19:D2:8D:9B:C1:93:A9:A6:FB:41
X509v3 Authority Key Identifier:
keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/UyCaqegX0-eEEhnSjZvBk6mm-0E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.28.218.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:46:65:12:c7:86:08:0f:3b:33:52:cc:c3:5c:2d:25:48:ac:
db:ad:5d:25:e2:90:b6:44:1a:b1:ee:c7:07:3f:86:11:ab:f7:
33:79:b4:50:53:7d:9f:42:89:cb:0c:58:b9:c9:aa:d2:f1:9e:
6b:64:36:96:32:18:cd:7a:bc:7b:c4:a7:70:d8:37:5a:af:29:
a9:0a:8b:75:ec:48:f7:05:e1:f7:b1:83:93:9f:ee:30:68:45:
59:15:f9:29:7c:75:b2:3c:24:84:7f:6a:bb:4a:97:6b:64:b3:
d0:06:c9:81:86:7e:2d:fb:a4:4a:f1:03:d1:87:f2:a7:49:b2:
e9:c9:2d:8a:37:0a:0a:4c:3a:ab:ab:b4:16:33:39:92:c0:1d:
43:d6:e5:76:4e:31:33:74:a9:d7:89:65:39:88:97:8a:62:26:
e1:0e:08:e8:3c:4b:aa:bd:a8:9d:b0:c7:d2:ba:19:6d:6a:d1:
b3:94:8f:03:48:59:b7:93:6b:3f:0d:ad:3e:28:96:b5:d7:03:
3c:3c:4c:d5:8d:a0:09:26:92:6a:ca:4d:93:1f:9f:74:98:87:
0d:4a:98:1e:d6:35:08:1d:6a:05:45:c7:ea:49:33:09:4d:79:
22:b2:ab:61:e9:30:f3:d1:ad:49:26:ee:6c:3b:ce:69:bd:43:
45:93:f4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:10 2025 by rpki-client