Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/60GXNzxx8tQQH4t3vpBXO9S9VA8.roa
File: 60GXNzxx8tQQH4t3vpBXO9S9VA8.roa (raw, json)
Hash identifier: o1gA8/KyWxtDrEUl1MNIEnVggJ28jykFGPG55MjLia8=
Subject key identifier: EB:41:97:37:3C:71:F2:D4:10:1F:8B:77:BE:90:57:3B:D4:BD:54:0F
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 20E1
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/60GXNzxx8tQQH4t3vpBXO9S9VA8.roa
Signing time: Wed 04 Jun 2025 04:08:39 +0000
ROA not before: Wed 04 Jun 2025 04:08:39 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8417 (0x20e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 4 04:08:39 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EB4197373C71F2D4101F8B77BE90573BD4BD540F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:43:64:76:30:2d:b9:28:20:54:1c:25:9e:
a5:c5:97:75:33:5c:62:4e:1f:5e:2b:dd:05:49:ee:
c8:61:e1:54:4a:79:83:29:fc:c6:74:4c:ac:78:b7:
f8:8d:3b:55:36:5d:34:3a:f8:46:65:71:0d:67:16:
e0:e4:cc:61:b7:86:a8:df:56:9f:f1:88:c0:d5:12:
c4:d7:e2:73:da:be:bb:b7:5a:5c:9d:fd:58:0a:ba:
64:ef:93:fb:42:90:0b:17:3e:ed:f5:db:04:a1:f8:
eb:55:3d:d7:6d:3d:3b:44:40:45:65:ed:e5:58:e2:
52:45:4a:db:5d:d8:2a:8e:c9:6e:83:da:55:f5:f5:
68:94:42:5b:e0:5f:09:44:87:17:63:fb:eb:7f:c9:
6c:a3:d3:95:fb:8a:00:c4:06:0e:42:23:1c:35:df:
ad:dd:26:be:f4:85:b9:c7:f6:ec:d6:4f:7e:75:a1:
16:28:48:83:80:a4:1b:1b:fb:58:2e:d4:66:2e:f2:
d0:2d:df:64:56:ae:8b:90:0c:87:d5:76:b1:28:da:
1c:74:95:6a:0f:d1:95:0d:43:58:fc:94:82:ae:47:
2c:11:58:5d:73:91:1e:fa:0d:f5:1f:ad:a3:ec:5a:
b2:4b:bb:d9:91:dd:69:0e:0e:da:73:3a:99:9c:99:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:41:97:37:3C:71:F2:D4:10:1F:8B:77:BE:90:57:3B:D4:BD:54:0F
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/60GXNzxx8tQQH4t3vpBXO9S9VA8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
76:66:df:c9:52:77:da:6c:0e:5c:38:e8:bb:eb:85:11:f4:6b:
7e:2f:74:ed:af:8b:be:93:b1:f7:fb:f4:b6:50:c6:7b:c0:d2:
af:11:55:8d:ed:55:a7:a4:94:81:20:11:b4:13:5e:98:b9:1b:
07:e7:af:cb:ba:0e:3b:ca:79:39:68:12:ea:ce:81:75:87:0c:
f0:f2:97:7f:75:b4:73:d2:b2:6f:49:34:f8:ec:97:2f:b4:27:
f4:01:39:d5:87:4c:ed:d1:c4:45:45:43:f5:33:4d:36:60:b6:
65:7f:a0:03:e0:03:db:e8:5a:2a:57:3f:52:c2:b4:cb:5e:ef:
a0:13:f0:80:75:49:1a:08:1f:e3:7c:4f:24:4a:eb:29:c6:e0:
f4:9c:1a:36:64:78:ab:d4:4d:07:ab:4a:69:64:a7:99:56:f8:
bf:34:c8:51:b3:2b:ca:cb:15:7b:1c:80:1c:c0:b2:8d:88:12:
5a:67:27:3c:51:35:59:c3:b3:e9:57:4e:45:c7:30:09:7f:c4:
f1:18:bd:fb:b8:1b:32:ae:c8:c2:b5:92:53:b4:ed:31:85:9f:
60:92:6b:bd:f3:da:fc:88:55:de:76:26:79:74:e7:68:cf:b5:
c1:eb:fb:2e:68:07:ae:b0:85:37:0e:4a:42:f3:1e:1b:25:ea:
57:f6:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:31:36 2025 by rpki-client