Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/M5WxiIlYCW6SZUTRDTbxa2LnzjU.roa
File: M5WxiIlYCW6SZUTRDTbxa2LnzjU.roa (raw, json)
Hash identifier: m9tbtocpg4JKbwsMbWXBIPlz4frao3dfUdJHi7zrZgg=
Subject key identifier: 33:95:B1:88:89:58:09:6E:92:65:44:D1:0D:36:F1:6B:62:E7:CE:35
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 1D06
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/M5WxiIlYCW6SZUTRDTbxa2LnzjU.roa
Signing time: Fri 17 Jan 2025 01:26:46 +0000
ROA not before: Fri 17 Jan 2025 01:26:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59077
IP address blocks: 2401:3480::/36 maxlen: 36
2401:3480:2000::/36 maxlen: 36
2401:3480:3000::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7430 (0x1d06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Jan 17 01:26:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3395B1888958096E926544D10D36F16B62E7CE35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:44:0e:79:de:ae:d4:74:88:67:92:47:1e:dc:
28:52:a1:58:ab:a7:39:db:24:74:c0:82:1e:58:5e:
ce:3d:c9:62:c0:ac:2d:64:a4:92:39:0b:c2:a6:8a:
99:30:23:00:cc:8a:19:ac:d5:96:8c:8a:0e:b1:de:
70:c2:e4:de:dd:2a:dc:bc:58:be:f2:52:82:b4:34:
b1:7e:df:39:1f:8d:24:9f:f9:02:57:2b:fe:f6:3c:
77:48:bb:93:62:fb:e0:c0:e9:47:6b:a8:42:c2:db:
d2:70:14:79:cb:1c:b4:59:63:76:95:50:30:42:31:
1b:4a:e1:27:94:e4:4a:9a:0e:7a:cc:c0:16:29:dc:
08:2f:06:bd:9a:ff:c3:ac:b9:c2:d5:17:6b:7c:ea:
53:5a:68:6a:7d:2c:45:06:f8:95:fd:45:2e:91:27:
fa:81:22:90:ab:af:58:d6:00:f5:a8:1b:de:fe:60:
b0:97:76:12:1b:51:75:40:b8:83:e3:4a:10:37:62:
d0:39:de:2d:56:20:5a:9c:57:b6:66:d6:0d:49:e2:
59:5a:b2:f0:19:63:9b:93:eb:20:11:61:ba:c5:85:
ea:fc:5c:34:ec:9b:bf:63:78:82:16:9c:69:8c:b7:
e1:2d:06:80:ee:d1:50:41:71:68:a5:d8:f1:f8:c7:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:95:B1:88:89:58:09:6E:92:65:44:D1:0D:36:F1:6B:62:E7:CE:35
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/M5WxiIlYCW6SZUTRDTbxa2LnzjU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:3480::/36
2401:3480:2000::/35
Signature Algorithm: sha256WithRSAEncryption
a0:7f:a4:b6:45:41:4e:ea:cb:86:2c:ce:bf:67:1b:12:c1:38:
6b:92:fe:c1:a3:16:cc:31:4e:99:3e:63:62:51:10:37:81:fa:
eb:8f:76:4d:cc:72:64:ac:04:d4:f4:a5:e4:e3:cc:53:f1:28:
82:79:20:ee:74:c7:16:18:3c:b2:a8:1e:b9:3d:f9:df:fb:cb:
77:1f:b3:d4:8a:87:8b:6f:35:66:6e:97:7a:c6:53:26:8d:ea:
7d:4d:1b:b3:e7:c1:96:40:51:e6:27:1d:b4:da:a4:19:2d:a5:
b5:0d:46:be:39:28:c8:eb:8a:0a:0a:47:45:05:4d:27:6e:40:
59:fe:22:1e:65:0e:d0:d0:8e:94:05:db:2a:84:85:64:97:d5:
06:fb:b4:d7:61:0b:0f:ba:93:39:c4:e2:80:af:be:22:60:af:
a5:91:6b:7d:e3:91:91:41:cc:e3:7a:36:1c:36:51:03:a3:95:
1a:fd:75:b8:ee:e4:1d:89:32:a9:25:49:c5:6d:16:61:2c:1f:
64:79:28:67:b1:2a:ff:c0:c7:31:32:a8:65:73:8a:a8:52:15:
79:77:9c:38:78:a5:3d:0d:cb:e4:3c:19:51:47:21:fb:a7:77:
bf:e1:b2:c3:9c:16:25:ab:37:6c:f6:ab:7e:62:27:c3:57:8f:
25:0e:da:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:08:10 2025 by rpki-client