Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/JiMqh7luUyAOm39tKiBBNOIcRO4.roa
File: JiMqh7luUyAOm39tKiBBNOIcRO4.roa (raw, json)
Hash identifier: y0L4QH0G+JjQ4FKwWzoQ0GNYPU9G4OFsaW3qK8PIjdk=
Subject key identifier: 26:23:2A:87:B9:6E:53:20:0E:9B:7F:6D:2A:20:41:34:E2:1C:44:EE
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2000
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/JiMqh7luUyAOm39tKiBBNOIcRO4.roa
Signing time: Mon 02 Jun 2025 14:38:37 +0000
ROA not before: Mon 02 Jun 2025 14:38:37 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8192 (0x2000)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 2 14:38:37 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=26232A87B96E53200E9B7F6D2A204134E21C44EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:fa:8e:b2:e0:17:51:4e:90:2d:04:8f:a6:
2a:e1:46:d1:e7:c9:8f:76:64:95:d8:a3:ac:d4:6b:
fd:ae:d6:bd:9f:8d:77:93:d4:84:db:64:94:c1:14:
d8:4c:58:74:51:91:d5:5f:b1:81:52:52:78:5e:1d:
58:78:15:ed:01:86:ee:66:7c:87:30:16:88:7b:06:
32:14:76:ac:04:06:0c:db:26:b3:03:ce:81:9d:1e:
ef:c6:5d:00:f4:47:9b:bd:3c:f9:e8:8e:5d:f1:bc:
49:40:17:3f:19:e2:b3:28:86:a4:74:e4:8b:0c:f1:
14:78:9a:87:4b:36:08:95:b9:9d:3a:04:b1:38:d5:
d3:01:71:09:d7:a8:15:76:5a:15:2a:3b:c7:29:05:
b4:6c:31:61:ee:7f:06:6e:1d:b7:27:51:92:bc:b0:
64:61:86:1f:99:12:6d:56:ff:b8:0e:8e:74:50:c0:
ff:57:d6:99:47:aa:cb:f7:a5:7f:e0:44:2a:08:75:
4c:e6:06:94:7b:42:10:a8:07:ed:07:e1:2e:d8:4d:
b9:89:2f:80:de:0e:02:34:75:f7:5a:29:69:08:19:
3b:cb:ed:48:40:e9:9d:61:1f:23:40:4d:69:1a:2e:
8e:f1:0a:7a:bf:cf:89:56:5a:e7:07:cd:c3:ee:cb:
c6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:23:2A:87:B9:6E:53:20:0E:9B:7F:6D:2A:20:41:34:E2:1C:44:EE
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/JiMqh7luUyAOm39tKiBBNOIcRO4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
22:f2:3f:4d:64:34:0a:bc:79:d6:45:70:a7:01:34:bb:7f:f2:
67:1a:5c:12:1d:71:5c:70:8e:2a:51:f8:3a:9b:13:e7:63:fe:
85:51:66:19:85:44:44:18:30:21:01:48:61:91:b9:5f:8a:36:
80:96:44:bd:f0:7a:d5:3f:98:5b:91:4a:a9:34:0b:62:0c:a4:
8a:21:6b:62:ca:16:59:cd:53:b1:1f:48:c1:8b:16:65:55:f9:
70:d8:48:55:d4:6f:dc:c9:73:c9:3b:fe:47:25:ba:4c:b1:e6:
d2:dc:cd:86:9f:11:8b:17:46:9c:90:05:91:b6:4d:c3:88:c3:
ea:7f:b4:98:a8:fc:5b:c9:c3:e8:7f:8b:c9:fe:24:15:a6:08:
f1:35:ed:bb:e0:f5:83:2f:36:93:0c:40:b0:25:ea:df:b5:ae:
10:a0:ef:7d:5d:94:a8:b9:b0:89:72:72:4f:43:96:88:f8:d8:
e3:cb:99:fc:eb:79:83:9c:47:0d:2b:8c:ae:0c:18:64:61:2a:
d2:3f:48:36:e8:af:c8:ec:c1:fd:c3:2b:a2:30:d7:83:f9:1f:
df:9c:68:5b:67:8d:fb:b1:0b:e7:7c:d0:21:d8:35:7f:ee:ee:
6d:22:24:57:19:54:60:54:3f:46:f6:19:a3:79:eb:40:89:51:
c6:8b:a2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 13:28:39 2025 by rpki-client