Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/Ink0buLsAxEmrElQzbGsyP6gb74.roa
File: Ink0buLsAxEmrElQzbGsyP6gb74.roa (raw, json)
Hash identifier: fwJOpoZsYNcc+BQp61WLKukQC4K8KBBKJ3TaLwBma0I=
Subject key identifier: 22:79:34:6E:E2:EC:03:11:26:AC:49:50:CD:B1:AC:C8:FE:A0:6F:BE
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 20AC
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Ink0buLsAxEmrElQzbGsyP6gb74.roa
Signing time: Tue 03 Jun 2025 19:08:40 +0000
ROA not before: Tue 03 Jun 2025 19:08:40 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8364 (0x20ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 3 19:08:40 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2279346EE2EC031126AC4950CDB1ACC8FEA06FBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:f9:66:be:04:0c:06:ea:8a:b8:a5:7f:96:
a7:bc:b0:3b:ab:71:69:00:25:54:c3:60:fe:8a:69:
09:76:00:40:72:0a:f6:23:da:69:e5:e1:c1:d6:8f:
04:6f:b0:fd:2b:49:19:a2:1a:ca:f4:8b:d5:1c:d4:
2b:77:c0:47:55:ba:c2:66:02:67:8e:6f:d1:19:c8:
e5:f4:1b:fd:3f:ce:4d:d5:7c:ec:a7:78:3d:89:0d:
42:f5:81:a9:88:51:50:6d:c5:ad:db:e1:2e:cf:6e:
53:63:c6:29:58:cd:fb:5a:41:33:1a:12:b0:b0:37:
ce:71:71:a4:6e:14:37:0e:92:13:31:b6:b6:d5:e8:
41:da:59:3d:cb:c4:17:be:cc:bc:1e:2c:87:5a:a8:
b3:50:08:b2:2a:6b:20:1f:5d:e9:69:65:18:e3:a2:
54:f1:9a:ce:1b:42:6a:71:47:22:cf:64:68:36:22:
55:d1:fb:81:c0:71:b7:b2:a9:8c:53:e4:53:19:d1:
aa:20:00:0a:28:10:6c:c3:c6:bf:65:e1:73:7a:10:
23:a7:20:39:75:9e:9e:00:f5:fb:6e:4d:03:bb:1c:
0d:ca:ef:75:4b:78:9d:88:a2:3d:e0:ec:15:a1:fe:
d6:2b:8b:00:a9:c8:d3:f7:30:44:b4:f5:8c:99:c7:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:79:34:6E:E2:EC:03:11:26:AC:49:50:CD:B1:AC:C8:FE:A0:6F:BE
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Ink0buLsAxEmrElQzbGsyP6gb74.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
a9:bc:48:be:a2:2a:d3:7e:d8:c2:14:69:9d:d0:de:1b:30:58:
f2:81:62:54:84:37:d3:22:3a:f5:33:f7:85:e2:ca:76:9f:59:
94:28:50:24:bf:f0:2b:12:de:70:5c:16:16:8d:1d:b2:21:6a:
24:a0:89:10:49:1a:34:a8:c9:4b:6d:b5:05:75:4f:b7:3e:a1:
99:eb:e0:d7:a7:43:db:4e:dc:f6:be:1f:d6:97:ef:79:dc:39:
8e:4a:7b:38:a9:a5:bb:07:87:e1:7d:74:2e:b4:46:11:0f:67:
99:d3:ff:0e:1e:84:aa:95:df:f1:57:3a:2d:c7:83:d0:00:1f:
96:e2:9f:30:40:c4:b0:5a:6a:d9:7b:02:5b:3e:cd:d7:6d:58:
9f:f0:6c:15:cf:d0:5e:02:44:dc:06:ac:70:e3:6d:e3:86:cd:
d1:fc:64:b9:91:65:47:d7:46:6a:86:df:2f:e5:17:7a:4e:82:
2c:96:a0:69:ee:9a:6d:f6:73:7c:c9:8c:36:f7:59:f0:db:2e:
d8:23:a5:8e:97:7f:aa:c3:9d:09:52:c3:3f:ae:0a:61:4e:81:
a1:26:80:3c:05:4b:aa:d7:15:0b:8d:8a:a5:02:55:c1:d5:a6:
88:25:95:a0:ba:de:3a:e6:8a:8f:b8:24:be:5b:d6:c8:47:12:
85:6a:c7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 08:49:40 2025 by rpki-client