Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/38iMM_KRDm26BBtJ_eImQNBqNDM.roa
File: 38iMM_KRDm26BBtJ_eImQNBqNDM.roa (raw, json)
Hash identifier: HofG1aLUbPLKhVDP4tWomk+Kq2cxZj+ihs8zW0zXpQo=
Subject key identifier: DF:C8:8C:33:F2:91:0E:6D:BA:04:1B:49:FD:E2:26:40:D0:6A:34:33
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 264E
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/38iMM_KRDm26BBtJ_eImQNBqNDM.roa
Signing time: Fri 13 Jun 2025 19:39:17 +0000
ROA not before: Fri 13 Jun 2025 19:39:17 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9806 (0x264e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 13 19:39:17 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DFC88C33F2910E6DBA041B49FDE22640D06A3433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:80:25:56:63:25:a6:78:5d:e8:80:fe:d8:
93:96:58:86:fb:ce:09:19:b0:b6:0d:3c:22:b0:08:
cd:e5:38:da:b5:0b:ad:9c:34:62:c1:ea:1a:54:48:
f2:9b:9b:c5:b0:b7:cb:8c:6f:dc:4f:21:38:64:21:
06:47:b3:4c:9f:66:ab:b9:2d:52:b3:9c:78:b4:c9:
c9:ce:6f:2c:88:66:ba:31:83:3e:59:41:85:bf:69:
91:b9:44:01:0b:1e:e5:65:35:36:59:f3:46:b7:0c:
c1:2f:f9:bf:eb:30:45:93:af:ce:0a:1c:33:74:cc:
25:a1:a9:50:89:50:e9:62:71:df:4c:bf:6a:63:b3:
c7:e1:00:71:b9:92:4d:75:24:39:7b:0d:80:d7:28:
83:ce:fd:c5:74:df:b9:99:77:95:11:eb:4a:f4:a2:
a9:8e:5d:14:fd:ec:21:c1:7a:33:dd:e7:aa:c6:16:
05:a9:bd:76:21:b1:66:0c:30:96:a9:f2:18:b5:88:
74:6f:e3:37:a0:26:65:05:2a:0a:fd:44:d7:ef:4e:
57:f8:18:13:2a:dd:33:df:8d:6e:51:30:eb:44:4b:
34:c8:e2:15:22:6b:32:52:bb:3c:0f:36:9e:28:22:
a0:d5:93:a0:22:dd:42:e8:89:53:34:59:60:2e:45:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C8:8C:33:F2:91:0E:6D:BA:04:1B:49:FD:E2:26:40:D0:6A:34:33
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/38iMM_KRDm26BBtJ_eImQNBqNDM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
1f:fd:95:de:64:33:89:f2:34:7a:7f:ec:4f:a1:2a:50:9b:25:
cd:e3:a2:61:aa:d2:37:ee:be:8f:fc:f7:e1:b3:26:42:e3:88:
46:ee:07:7f:fb:3f:6a:24:b9:33:6d:40:95:02:8d:9a:65:59:
4f:d8:e0:af:2e:aa:37:67:a5:59:97:5f:b8:8d:e4:3a:b8:d7:
88:6c:2d:e9:a0:99:7a:65:01:a1:4d:f5:d5:3d:f2:37:af:20:
63:52:48:8f:2d:4c:ec:04:23:e0:c0:55:11:b4:d9:0c:34:6d:
97:75:30:e8:3f:bc:7a:af:3a:f1:7c:75:a8:b6:47:ae:7a:38:
d6:b6:e0:12:f6:b7:a5:15:aa:76:14:b9:77:e1:52:22:e9:d9:
d2:a8:ff:e0:bb:b0:85:15:8c:d6:02:86:63:13:ec:bb:d2:33:
35:11:e1:0b:c2:89:26:be:2d:4d:82:67:18:e2:d3:79:16:6b:
03:ed:dd:29:b5:79:ab:46:a3:1a:24:b5:b1:fa:be:27:1a:d0:
a5:4c:4e:3d:2b:9a:b6:1e:f2:ab:6a:38:99:63:2c:82:9c:ef:
f1:b6:8a:20:63:0f:c1:fb:24:63:3f:0b:3f:78:7d:45:6a:0a:
b4:5e:10:f4:c6:22:df:a2:44:2f:c2:1c:9a:65:2e:b3:a0:9c:
5d:f9:47:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 21:12:44 2025 by rpki-client