Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/a1xzLnP9yHS4ZxTx8lT6fiJzvKQ.roa
File: a1xzLnP9yHS4ZxTx8lT6fiJzvKQ.roa (raw, json)
Hash identifier: pnrh09jjMVQxgCPwAjENTCHzECt6FgHZipi1Md1meAw=
Subject key identifier: 6B:5C:73:2E:73:FD:C8:74:B8:67:14:F1:F2:54:FA:7E:22:73:BC:A4
Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Certificate serial: 0237
Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/a1xzLnP9yHS4ZxTx8lT6fiJzvKQ.roa
Signing time: Thu 24 Apr 2025 08:49:07 +0000
ROA not before: Thu 24 Apr 2025 08:49:07 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24413
IP address blocks: 114.28.228.0/24 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Validity
Not Before: Apr 24 08:49:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6B5C732E73FDC874B86714F1F254FA7E2273BCA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:38:99:b7:9c:fd:51:4f:da:d3:d0:23:d7:
9f:82:d3:6b:56:27:b5:29:d2:38:3c:85:cd:6e:d8:
51:aa:4b:4c:e7:63:92:fd:d1:d2:ec:20:9d:7a:27:
a1:d3:0e:88:75:d0:f2:ed:f9:05:84:00:0e:f1:77:
9d:bc:20:8e:1d:a0:37:73:ac:f2:e9:8d:3c:bb:74:
76:4f:2e:23:38:0a:da:18:f0:b6:cf:c5:d3:ad:0d:
df:2a:2f:bb:05:86:58:ad:88:f3:c0:3c:03:1a:98:
36:03:24:d6:5c:b3:b4:c3:92:db:10:88:40:d8:36:
77:30:27:d0:72:09:42:13:0f:65:f7:6e:be:bd:b2:
0b:3e:a7:2e:c1:e0:10:a5:a8:53:63:38:bc:55:4e:
43:60:78:98:cc:ea:03:67:32:9f:cb:20:0e:ef:aa:
f3:93:14:fa:fd:27:f7:12:9b:7e:87:af:44:74:e1:
26:93:ea:14:36:a8:a5:8e:bc:8e:04:40:06:7c:a3:
8e:a5:fe:e6:97:47:75:f7:81:b3:47:52:53:24:f3:
8c:af:87:65:aa:3b:0b:bc:66:b7:70:65:65:11:2e:
06:75:41:0b:83:01:85:4e:2f:cf:76:c8:ad:06:4c:
f3:0a:5f:be:bb:7e:5e:e6:c1:14:1a:e4:83:cd:e0:
37:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5C:73:2E:73:FD:C8:74:B8:67:14:F1:F2:54:FA:7E:22:73:BC:A4
X509v3 Authority Key Identifier:
keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/a1xzLnP9yHS4ZxTx8lT6fiJzvKQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.28.228.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:0d:68:d4:11:fb:ad:0d:4f:5e:bb:a2:cd:ed:92:1e:29:80:
e7:7e:a2:e0:4f:05:47:35:28:54:09:00:45:65:23:9c:20:8a:
c5:e1:cd:c9:cb:36:3b:bf:22:f6:b7:55:fb:a4:3f:dc:e9:e8:
8d:d3:fa:62:f0:93:1a:c3:65:bc:a2:51:74:fb:cb:04:49:0a:
1f:b6:6c:de:3b:c2:4f:cd:68:bf:5e:82:ad:b1:b1:9a:92:f5:
71:ec:10:70:41:d7:6d:95:7c:f2:04:f6:1e:f8:54:f1:ea:b8:
6f:b7:4b:10:ad:0d:3d:c8:04:2e:ca:4f:e4:43:c3:8d:6f:b5:
d3:37:ce:0c:61:62:2e:2d:04:bb:9b:48:8d:78:e2:9c:50:10:
60:d3:5c:6b:2b:6d:a6:de:3a:fc:68:d8:59:b9:21:cf:0e:5c:
62:57:45:9f:15:01:ac:a1:a9:4f:65:3e:27:a2:5d:a6:06:3d:
39:f3:e7:91:b7:95:18:9b:24:b9:83:76:94:6d:95:6f:1f:a6:
ce:a9:f8:80:e5:23:72:a2:5f:0d:61:9e:81:54:b9:12:8a:15:
41:94:16:4f:ef:fb:b0:10:bb:3e:f1:37:44:8a:8e:b0:fb:00:
8d:83:15:ad:62:4d:25:d0:e6:11:e7:a2:18:9f:df:ae:fd:13:
5a:7c:06:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:19 2025 by rpki-client