Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/4Itq9gSWf2XZwmZ2ebqe-FtfGiQ.roa
File: 4Itq9gSWf2XZwmZ2ebqe-FtfGiQ.roa (raw, json)
Hash identifier: /wZWCir74e2OjqznHmBTziDae5aE3mlPuD7ZPn7Mb6w=
Subject key identifier: E0:8B:6A:F6:04:96:7F:65:D9:C2:66:76:79:BA:9E:F8:5B:5F:1A:24
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2223
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/4Itq9gSWf2XZwmZ2ebqe-FtfGiQ.roa
Signing time: Fri 06 Jun 2025 09:38:47 +0000
ROA not before: Fri 06 Jun 2025 09:38:47 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8739 (0x2223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 6 09:38:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E08B6AF604967F65D9C2667679BA9EF85B5F1A24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:c4:c0:e0:57:77:fc:ff:d7:63:e2:d9:f7:
b4:fa:ff:3d:82:ee:a4:eb:68:48:04:87:66:18:00:
01:d1:bb:23:f0:89:be:f4:3f:63:38:50:b3:89:e4:
5a:23:f1:59:d5:0e:e8:3a:0c:f0:f7:0f:cc:f6:12:
14:29:04:0a:92:27:4a:46:07:4d:a4:ac:5a:31:d8:
ef:a5:82:7a:87:29:83:db:d0:98:b0:5a:f8:21:31:
30:6d:fd:7b:0e:98:5c:7d:9b:6c:d1:d5:a5:ce:f6:
f6:2d:46:60:75:bd:19:95:c2:35:ce:3b:3e:54:34:
bb:da:f5:69:28:d9:1d:65:3b:6b:c3:32:95:1f:24:
e5:81:40:6f:24:5d:a4:b2:8a:4b:83:7c:91:0f:6f:
51:f7:05:75:41:ee:74:8b:40:1f:55:6b:67:13:f5:
33:98:5f:db:28:83:46:30:0f:2a:b8:b2:5c:95:d2:
ea:2f:ba:5e:2b:14:92:ee:27:c6:e0:fc:56:9e:4c:
34:84:0a:32:32:c5:a4:1d:80:ff:6f:1f:35:88:cd:
d5:f5:58:c1:87:e9:8f:81:14:a7:2c:57:06:23:9a:
66:af:e8:4c:51:76:30:10:c7:fc:d8:df:46:38:98:
84:15:dd:65:54:29:57:2e:55:4a:2b:ef:ed:e0:6b:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8B:6A:F6:04:96:7F:65:D9:C2:66:76:79:BA:9E:F8:5B:5F:1A:24
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/4Itq9gSWf2XZwmZ2ebqe-FtfGiQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
4c:e0:12:42:24:a3:23:44:af:fb:cf:f4:d5:7c:31:6e:84:80:
64:b9:3e:48:62:6f:3c:73:5c:3a:50:2d:cc:6b:42:f4:4b:6a:
f1:7b:50:7d:44:4c:d8:24:eb:b8:9a:72:b0:bd:e7:2a:8a:f6:
4d:d6:a0:11:b7:33:13:7a:fe:4c:a9:d8:fb:bd:a7:48:86:6d:
37:5d:dd:6c:3b:4f:d2:e4:45:b6:d7:37:9c:9e:a8:20:56:87:
67:6e:10:69:a2:70:48:12:99:a2:5b:25:62:18:08:c1:f6:74:
7c:ef:77:b4:b5:11:5e:9f:e4:4e:5b:25:89:54:2b:ac:ab:88:
2a:e5:be:90:07:1f:4c:f9:d3:06:28:af:48:69:b2:53:c0:bc:
d4:af:eb:5f:f7:1e:f5:e1:51:1f:93:4f:aa:e9:28:2d:71:89:
80:3b:72:0e:4b:d1:b8:eb:87:15:dc:e7:75:fd:7f:7a:15:07:
59:90:32:b7:74:6c:f0:1c:86:76:1a:8f:a3:bc:db:f5:0c:7f:
f7:cc:c9:fa:55:06:4c:3f:87:b5:9f:e5:0e:d6:6b:7d:34:dc:
9e:fc:e1:5c:25:e1:4c:a4:c5:f5:f1:76:4c:e0:a6:27:6b:9d:
73:c2:dd:fd:8a:cd:4d:67:3e:ae:1d:3c:cc:8d:b8:66:02:59:
48:3a:92:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:06:01 2025 by rpki-client