Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/Jcq48RhGR_d9-NHv-LcGT4b7dPo.roa
File: Jcq48RhGR_d9-NHv-LcGT4b7dPo.roa (raw, json)
Hash identifier: 7Rn5lk7ix7iP/UqGDxK7W5gB2BkhixWbSjvaR5R3xR8=
Subject key identifier: 25:CA:B8:F1:18:46:47:F7:7D:F8:D1:EF:F8:B7:06:4F:86:FB:74:FA
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1FB9
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Jcq48RhGR_d9-NHv-LcGT4b7dPo.roa
Signing time: Mon 02 Jun 2025 02:38:35 +0000
ROA not before: Mon 02 Jun 2025 02:38:35 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8121 (0x1fb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 2 02:38:35 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=25CAB8F1184647F77DF8D1EFF8B7064F86FB74FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:54:03:a6:18:81:49:33:3b:6c:ab:8e:1f:
60:b5:e0:c1:bc:e6:ea:e0:77:65:38:49:b6:22:92:
88:58:21:75:fb:62:a3:18:f2:09:68:b5:e5:30:e8:
19:73:ec:3f:0f:ca:d0:d7:9b:39:60:76:4c:99:7e:
b2:9b:43:ec:14:2a:c2:fb:61:88:7f:e4:3c:69:2f:
59:e0:b3:90:44:ec:2a:86:91:98:c7:89:bb:26:53:
9a:ec:47:ab:d6:3a:c0:51:a2:9c:f8:da:b2:42:dd:
ab:f9:3b:91:5b:fb:96:e4:37:9e:ac:4f:32:39:b2:
0e:99:f6:50:60:5a:12:a5:e0:9c:df:2d:30:12:e7:
60:96:0b:18:f9:5b:f7:34:c2:af:be:f6:47:d0:a0:
88:25:1b:01:2f:52:d9:7d:89:41:d2:c0:76:6f:e4:
8e:eb:aa:7e:e9:48:20:e5:b3:29:bb:f5:fd:00:c5:
9a:32:4b:da:a9:ef:4d:2f:58:9b:f3:1d:2c:33:1e:
70:42:fc:78:0d:23:0c:9b:1c:3c:a2:4d:6d:11:bd:
60:64:87:34:18:f8:77:8f:5c:f6:cc:90:77:43:91:
95:76:45:b3:02:e6:88:11:9d:dd:9c:8f:e4:73:53:
0c:f7:68:95:90:23:44:e0:34:56:05:89:9e:a1:16:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CA:B8:F1:18:46:47:F7:7D:F8:D1:EF:F8:B7:06:4F:86:FB:74:FA
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Jcq48RhGR_d9-NHv-LcGT4b7dPo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
80:55:70:a4:49:7e:e6:93:35:20:f7:e4:36:bd:8d:7c:6b:49:
4a:fa:20:9f:c5:97:47:46:b6:02:94:ea:2b:92:32:ec:87:93:
d3:db:5d:21:e1:02:15:9c:29:a9:c4:a3:34:ee:f8:0f:c0:60:
5b:26:21:99:19:eb:40:b9:64:8f:18:8d:8f:e1:fd:13:95:92:
d0:87:18:d6:71:f1:01:98:72:8b:22:d7:86:90:7d:f0:84:b4:
e4:7f:fb:02:1b:f1:27:63:b2:5b:03:48:7e:71:71:99:b2:7a:
05:96:19:ce:ee:fa:65:05:04:b0:f2:c4:1a:fa:8a:f3:33:d0:
69:23:64:f2:07:8e:22:46:b3:42:97:e4:15:5f:37:b4:26:a8:
8c:2f:21:04:bd:fc:a6:ea:49:6d:54:92:d5:8a:85:04:2e:3e:
24:be:85:b8:df:02:24:ff:7f:43:b8:6e:69:a3:d4:da:94:bd:
3e:d7:c4:9c:c4:85:41:0b:75:b1:9b:74:f8:68:06:35:57:d1:
a2:35:21:e9:6b:cf:04:90:18:f7:72:29:b8:30:5e:f8:e9:9a:
2e:f5:30:7a:36:05:6b:fc:ee:79:be:65:fe:1c:d6:33:51:ff:
71:cf:ff:98:a2:c7:f5:ac:05:23:36:82:2c:cf:9b:a2:61:a3:
94:fa:cd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 15:07:27 2025 by rpki-client