Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/3V-mjiXHHZg9KwXj3_0uZLq4-r8.roa
File: 3V-mjiXHHZg9KwXj3_0uZLq4-r8.roa (raw, json)
Hash identifier: DIBNM1DqtPknOa6m68v6fMuAq5dcg9SHfzqETUOd/Ek=
Subject key identifier: DD:5F:A6:8E:25:C7:1D:98:3D:2B:05:E3:DF:FD:2E:64:BA:B8:FA:BF
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 207C
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/3V-mjiXHHZg9KwXj3_0uZLq4-r8.roa
Signing time: Tue 03 Jun 2025 11:08:42 +0000
ROA not before: Tue 03 Jun 2025 11:08:42 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8316 (0x207c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 3 11:08:42 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DD5FA68E25C71D983D2B05E3DFFD2E64BAB8FABF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:43:d4:8a:b7:4a:e4:7a:72:2e:91:95:98:1d:
be:99:dc:f0:42:2e:22:73:c0:25:49:f3:a7:5b:9b:
05:3f:a8:0d:39:20:79:1a:00:92:f4:af:4e:f8:1e:
16:22:c2:e1:e9:53:61:38:38:d6:5a:ad:32:4f:88:
7d:4e:2a:35:89:f0:49:28:6d:12:36:1c:c4:5e:60:
d9:60:2c:f4:f9:26:bd:82:25:ac:bc:1d:24:e4:0a:
54:81:08:44:ce:37:e3:55:94:d7:8d:7b:3a:c6:4f:
9b:ea:54:9d:60:37:76:10:e9:99:13:b4:1b:99:83:
47:f0:5d:11:b6:cd:48:df:02:7c:7b:e6:8b:dc:39:
e0:aa:a6:29:d7:f3:0b:09:d3:42:09:3a:7d:77:b2:
f9:3c:f2:d3:1e:6b:58:2d:cb:91:e0:41:5f:38:f1:
04:f2:e2:41:be:64:fc:8a:b9:8c:6c:37:d4:1b:d8:
34:0c:f7:e2:01:f7:07:1f:d9:0d:ef:9b:e4:49:fd:
87:7e:bf:0b:b3:17:2c:0b:99:38:1b:4f:19:fd:02:
ee:90:1a:2a:b6:4e:e1:30:b0:ac:e3:fd:ff:28:79:
8c:85:c9:e7:d3:81:26:da:b6:76:39:70:99:43:b0:
ff:d0:8a:3c:15:41:11:d7:4d:a1:1b:a4:e3:5d:e6:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5F:A6:8E:25:C7:1D:98:3D:2B:05:E3:DF:FD:2E:64:BA:B8:FA:BF
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/3V-mjiXHHZg9KwXj3_0uZLq4-r8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
c3:8a:a7:bb:0f:bb:60:ce:ca:3b:20:f3:9d:a6:f2:d0:76:26:
9d:5f:6a:a5:d9:90:79:4a:06:4f:0d:a5:d2:0a:2e:67:c3:16:
bf:72:01:60:b8:6c:bb:61:6e:a0:55:2c:fc:ef:3b:d7:e4:86:
e6:bd:11:98:1f:3e:72:e4:4e:7d:d4:07:27:9a:01:ce:bf:f1:
61:01:6a:6d:04:4e:fc:cf:16:83:21:82:6c:5f:b4:88:6d:0c:
ff:e5:43:46:f3:4d:54:af:53:f9:68:f1:1d:4c:c6:51:d1:81:
30:27:15:fa:b3:f1:29:aa:eb:b3:4e:78:2d:99:27:2d:6e:8a:
4b:68:ad:bf:93:e6:d2:85:9c:78:78:1d:56:4a:60:93:b6:07:
05:4c:6c:21:21:dc:2b:af:fd:36:fc:39:97:9e:63:31:68:fc:
4b:c8:97:3c:13:df:7b:4a:49:cf:2c:9d:8f:5d:4f:73:b7:88:
05:53:ff:a0:d1:24:a3:24:54:80:53:16:1e:4a:7a:79:51:a8:
04:45:14:47:f7:0d:a4:d7:88:86:e3:d3:9c:28:45:10:f7:79:
7c:d0:83:1f:38:8d:fd:48:71:c6:d2:37:07:72:d1:40:44:1f:
ee:c9:eb:d2:92:da:f5:5f:29:8b:12:f1:1a:b2:46:2d:1e:fb:
18:40:f9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:48:41 2025 by rpki-client