Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/4lat1I6UCIKqPKcUs7Qw_6eq7sA.roa
File: 4lat1I6UCIKqPKcUs7Qw_6eq7sA.roa (raw, json)
Hash identifier: zrsyTvjbzVOXAX7qq2umVbyYiz4gHGsnjr3YM5bfhLE=
Subject key identifier: E2:56:AD:D4:8E:94:08:82:AA:3C:A7:14:B3:B4:30:FF:A7:AA:EE:C0
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 25FE
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/4lat1I6UCIKqPKcUs7Qw_6eq7sA.roa
Signing time: Fri 13 Jun 2025 06:09:14 +0000
ROA not before: Fri 13 Jun 2025 06:09:14 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9726 (0x25fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 13 06:09:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E256ADD48E940882AA3CA714B3B430FFA7AAEEC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:a2:8f:8d:04:16:a9:74:8c:c3:e4:af:fa:
e9:9e:30:81:f4:6b:ab:1e:24:30:e3:eb:99:3f:a0:
b4:87:ae:37:51:b6:81:a0:73:cd:80:e8:f0:99:c7:
8a:49:48:5e:46:23:66:de:02:7c:2e:78:54:6f:2e:
39:32:cd:09:ae:74:c8:da:ba:50:22:17:74:1e:ef:
dc:05:9c:d5:73:4d:44:9b:de:c4:6c:d7:c3:37:18:
2c:8b:3a:d4:4f:23:e4:d7:15:63:3a:f4:bb:6d:46:
4b:40:f1:f7:c7:af:01:d5:ba:87:ca:c0:fb:23:5b:
51:22:3e:ea:79:9c:02:55:4f:e8:c1:b3:25:22:99:
8b:a3:e6:53:d2:0f:e5:5e:4c:74:b3:8f:b9:dc:8d:
39:32:11:a9:a5:5e:4f:a7:48:3b:15:29:25:7b:ab:
b3:d1:0a:56:c5:e2:36:25:db:26:ca:2f:a1:19:93:
3b:e2:05:df:f4:a3:96:2d:e4:58:c7:8b:03:0c:2a:
e6:fb:3f:5c:7e:ca:e0:ce:42:b2:cf:dd:2f:ff:58:
af:91:0d:a4:0e:6b:90:88:52:f0:00:80:25:df:09:
a0:ef:79:73:97:08:21:d9:3b:19:a4:f2:4e:28:47:
0d:8a:9e:72:9d:91:c4:43:07:69:a6:d3:e6:3e:7b:
86:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:56:AD:D4:8E:94:08:82:AA:3C:A7:14:B3:B4:30:FF:A7:AA:EE:C0
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/4lat1I6UCIKqPKcUs7Qw_6eq7sA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
2d:cc:ac:a2:cf:87:e5:37:33:1d:f3:0a:17:9d:29:3b:ac:10:
0c:db:3f:82:66:05:f7:69:e7:ae:6e:7f:56:01:16:50:fb:55:
94:ff:80:cb:f7:77:b1:aa:86:66:79:54:de:f4:44:93:c2:12:
9a:ea:23:89:e8:21:e2:90:6d:0e:e6:a3:94:76:45:f3:ca:76:
81:2a:37:1a:70:7c:e9:26:27:84:0a:78:20:50:a7:39:43:8b:
ab:d5:91:59:86:79:f0:3b:39:b8:81:c8:74:d1:e6:b0:3b:1a:
46:8e:45:1f:d4:bc:d5:a5:c6:01:57:dc:7c:43:b4:f6:64:53:
02:45:9e:04:0f:e9:e7:79:f9:61:f3:97:b0:79:e5:59:2f:48:
29:44:3e:4f:bb:8a:88:08:0a:d9:c2:e3:23:9d:1c:88:f5:ec:
7f:a5:c1:df:75:14:f6:82:1e:6e:ca:f7:65:0e:9e:9e:0b:9b:
05:a9:16:40:ca:81:d8:db:3a:0e:48:60:18:dd:59:3b:f2:46:
8f:cd:41:b9:9c:6d:69:b1:4b:66:a7:09:81:6d:dc:45:f6:b2:
6e:86:e1:da:ed:92:a3:44:e3:11:32:1b:7e:bb:5e:d9:f6:b6:
94:25:03:b5:80:ef:f2:ad:6c:98:ab:48:8f:26:e9:65:7f:6e:
ae:49:83:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:13:34 2025 by rpki-client