Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/1OvAxK-HsLaa-29ye7Q2euJjp4Q.roa
File: 1OvAxK-HsLaa-29ye7Q2euJjp4Q.roa (raw, json)
Hash identifier: bItE0fvNhel2IgKI6mYYy9d0C1TSRiEiaPjN9nlR8cQ=
Subject key identifier: D4:EB:C0:C4:AF:87:B0:B6:9A:FB:6F:72:7B:B4:36:7A:E2:63:A7:84
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 23B8
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/1OvAxK-HsLaa-29ye7Q2euJjp4Q.roa
Signing time: Mon 09 Jun 2025 05:09:00 +0000
ROA not before: Mon 09 Jun 2025 05:09:00 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9144 (0x23b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 9 05:09:00 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D4EBC0C4AF87B0B69AFB6F727BB4367AE263A784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:60:b6:be:ad:4c:0f:8c:51:d0:91:e1:e5:
97:f2:e5:7c:ce:dc:61:db:72:39:f1:8d:34:00:13:
9e:39:7e:63:b1:40:09:e2:e2:dc:41:5b:4a:f0:15:
a3:f1:3a:75:48:4b:9b:4a:b6:2e:38:c8:e3:f3:b5:
65:aa:1a:af:bd:e8:bf:ee:f6:66:b2:ab:2b:ff:92:
41:a4:1c:11:6a:f1:07:a5:7e:96:8a:f4:40:ac:9b:
31:db:f0:a6:27:f3:b0:3e:31:7f:d9:be:df:67:68:
0a:60:70:68:0d:5d:51:01:49:ba:58:6a:1f:1a:72:
c0:d0:65:42:ac:6d:36:4f:1d:53:c3:52:b1:b7:30:
f6:a2:cb:bb:1f:b9:bb:1f:50:11:eb:d1:18:2c:d6:
b0:fe:ac:7d:bb:5d:09:d3:27:b1:90:3f:11:d4:2c:
d9:93:2e:33:71:09:47:c1:de:78:42:89:6c:3d:67:
d6:13:64:a4:9d:d1:26:a9:ff:c4:88:a7:85:8c:a8:
48:28:9a:68:ea:c0:10:23:dd:03:e4:11:fb:ea:09:
cb:a2:a9:18:63:b3:13:95:d4:df:51:54:b0:23:ed:
35:58:20:db:26:04:92:f8:bf:f3:d0:73:57:14:66:
cc:b1:3f:40:97:ba:f9:7d:3e:19:5b:be:ec:55:46:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EB:C0:C4:AF:87:B0:B6:9A:FB:6F:72:7B:B4:36:7A:E2:63:A7:84
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/1OvAxK-HsLaa-29ye7Q2euJjp4Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
36:85:95:f3:4b:a6:6e:15:6f:ab:b8:92:28:d1:b9:08:ac:bb:
63:e5:ab:9e:c7:b1:c8:a3:46:3e:c4:85:b0:1f:35:7a:05:b5:
23:64:0a:a8:7a:5f:87:6d:bc:b6:15:a0:8e:68:4e:a8:82:4d:
86:f8:bd:99:8e:4d:a0:2a:f0:dd:91:27:ee:83:1c:2c:a6:f5:
b1:4e:1c:c1:4e:cf:f9:f9:ee:51:fb:d9:2c:a2:e0:5b:f2:86:
bc:f2:55:2c:8c:d3:19:46:a4:0e:5d:bc:15:59:56:28:24:b7:
ff:77:83:e4:ae:23:f8:62:c5:15:a4:81:36:9b:b6:5c:ca:76:
71:57:4e:2b:c6:8d:99:29:3a:4c:5b:8a:8c:bf:d7:88:5a:20:
37:a4:9d:b6:f2:ce:fe:88:21:9d:fb:72:8c:49:f8:d5:54:40:
7b:5c:9f:2e:cc:a0:bf:6f:d5:3a:da:2e:c5:5a:79:f0:ac:16:
19:9d:d7:6c:7a:e6:20:af:c5:91:37:2e:48:39:bd:b1:a8:a6:
14:42:19:8b:33:80:ac:99:e3:59:66:b0:36:9d:0f:5d:91:9f:
59:b6:01:55:74:a0:3f:d6:e8:2a:f2:a0:8b:88:98:72:06:53:
1b:cb:fb:b8:de:6b:de:49:04:a7:9b:15:59:bf:e1:bd:01:2b:
76:56:7e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 00:37:33 2025 by rpki-client