Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/8gy-ntHC5ygraTc9zbKgS4JBxjY.roa
File: 8gy-ntHC5ygraTc9zbKgS4JBxjY.roa (raw, json)
Hash identifier: IfmuyNuD35ywblnFbGoeipWiz8k9KeZA7k0kn4Rdv5M=
Subject key identifier: F2:0C:BE:9E:D1:C2:E7:28:2B:69:37:3D:CD:B2:A0:4B:82:41:C6:36
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 24F0
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/8gy-ntHC5ygraTc9zbKgS4JBxjY.roa
Signing time: Wed 11 Jun 2025 09:09:10 +0000
ROA not before: Wed 11 Jun 2025 09:09:10 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9456 (0x24f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 11 09:09:10 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F20CBE9ED1C2E7282B69373DCDB2A04B8241C636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:78:cf:d7:93:08:ee:b7:81:61:7e:24:51:67:
46:0f:32:12:ea:55:69:c1:75:ce:42:e4:ec:4b:7e:
45:1e:e9:49:0f:e8:eb:e6:f2:39:67:02:02:8b:10:
0b:83:0a:e5:05:db:89:2c:b4:a7:22:1c:4e:ec:3d:
e0:35:67:b3:82:35:a8:26:b4:75:9b:97:06:33:ec:
5c:dd:b7:de:68:bb:f9:f4:27:34:09:84:ff:b6:05:
c9:f2:a4:f8:f9:e3:3c:5c:20:a2:1f:41:f3:da:66:
5f:44:01:ee:d0:9a:e6:b3:23:16:a9:69:48:1c:29:
a2:50:31:17:8e:20:15:da:ae:49:1f:3d:14:b1:ed:
9f:2c:30:55:ac:f8:c8:67:50:ec:8f:c1:6b:1b:b8:
ab:7f:24:cb:1a:65:14:e1:b1:a5:83:3e:74:46:d3:
74:de:64:59:b0:74:89:1b:0a:7e:90:21:93:d6:67:
21:69:06:1a:f4:ba:2d:3d:9e:28:23:e1:c3:c4:dc:
30:b9:c2:5f:85:11:10:a9:89:8b:68:70:c9:82:08:
5f:46:d1:b8:51:e5:84:ff:32:59:1d:44:60:70:64:
46:d4:59:a9:1f:d7:af:b0:51:18:46:b5:fe:1e:08:
d9:a2:5c:84:02:4d:df:8a:16:21:75:71:b3:09:db:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0C:BE:9E:D1:C2:E7:28:2B:69:37:3D:CD:B2:A0:4B:82:41:C6:36
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/8gy-ntHC5ygraTc9zbKgS4JBxjY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
93:15:65:34:ed:08:7c:7e:28:f0:66:ab:87:f3:23:14:09:a9:
79:75:93:3f:d7:0b:00:87:03:35:98:4b:e0:d6:a5:30:1d:51:
40:e1:3e:48:09:65:35:65:e8:1d:38:9d:ca:1a:aa:0e:3e:c5:
fe:fa:a3:05:52:67:98:49:f2:1a:ee:fd:be:f6:64:56:7b:8f:
3c:90:46:f2:79:32:84:49:a9:e8:92:02:16:d9:e8:fc:69:ea:
03:b3:4d:40:f1:e7:2d:67:da:4e:e0:12:ec:ac:9a:67:92:46:
ca:73:7f:e5:2b:2c:19:9e:68:b4:1e:08:a2:ae:69:98:6a:df:
81:74:9e:77:ef:81:57:9e:cd:af:f3:70:1e:9e:f1:d0:92:ca:
ab:70:62:a8:f9:3a:cb:7f:61:86:67:3d:cf:e1:ed:57:df:10:
06:3a:34:db:c6:b9:57:15:76:82:4e:4d:d7:ef:99:b8:ea:c0:
fe:37:79:8c:3b:a9:c4:b3:e4:1d:bb:fe:1f:7b:29:8b:7c:bb:
16:8d:d1:32:4a:65:03:fd:de:3e:ef:ea:0a:61:5f:76:f3:a0:
25:b9:63:57:a4:a7:21:26:0c:e1:1e:3d:ca:f8:01:57:24:b7:
8f:64:90:1f:41:82:8a:2d:17:83:f1:ba:91:b2:cf:8a:61:e1:
e7:2d:54:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 02:32:46 2025 by rpki-client