Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/QOc3D4jnC32nSsC48yn0lw3UyFI.roa
File: QOc3D4jnC32nSsC48yn0lw3UyFI.roa (raw, json)
Hash identifier: GMcuhbGVlHUHkwNdFgAwz9VUopQhFrEdy/xDZ+AcO0s=
Subject key identifier: 40:E7:37:0F:88:E7:0B:7D:A7:4A:C0:B8:F3:29:F4:97:0D:D4:C8:52
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 24E7
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/QOc3D4jnC32nSsC48yn0lw3UyFI.roa
Signing time: Wed 11 Jun 2025 07:39:09 +0000
ROA not before: Wed 11 Jun 2025 07:39:09 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9447 (0x24e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 11 07:39:09 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=40E7370F88E70B7DA74AC0B8F329F4970DD4C852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:ce:5d:7d:c1:2c:3f:d5:45:47:be:cb:35:
c1:cf:a3:44:80:01:70:7e:83:f9:e1:88:5a:da:2f:
3a:6e:df:79:7b:46:1a:ad:35:bc:80:df:fb:36:2e:
46:91:88:68:4d:92:b3:b2:8c:fd:e0:e4:71:a3:a3:
a3:70:94:21:a1:1d:80:36:cc:31:74:33:0e:53:03:
83:aa:e0:62:c6:31:c0:37:d2:72:63:5e:ff:7f:28:
80:09:08:db:d1:c5:ec:b1:ec:61:4b:f0:9a:1f:87:
59:4a:2a:10:04:db:05:09:9b:53:f6:7e:01:f2:f5:
c4:f3:a5:b5:9d:39:b9:d2:8f:11:4e:25:08:b1:61:
91:ed:7f:ff:bb:4c:77:ff:94:81:64:83:42:3a:69:
91:aa:34:ca:9d:2a:71:2a:70:24:40:0d:83:37:82:
2d:4b:4d:3f:8e:63:c0:ed:e0:94:0a:37:1b:de:45:
66:16:4a:7d:e8:13:70:ec:99:9a:46:c7:95:c6:52:
24:3d:dd:29:cc:86:07:30:3d:02:05:a0:24:80:4d:
17:de:09:dd:52:18:02:1d:9e:da:92:4f:31:44:a7:
5c:f5:75:7d:e7:da:46:49:e5:3b:ac:45:9f:81:53:
ed:c3:b4:18:2d:31:cd:43:21:be:e5:2f:64:bb:f6:
d9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E7:37:0F:88:E7:0B:7D:A7:4A:C0:B8:F3:29:F4:97:0D:D4:C8:52
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/QOc3D4jnC32nSsC48yn0lw3UyFI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
a3:0f:ed:64:1a:e9:09:3c:b5:39:a8:3d:ff:92:dd:43:e5:a2:
d1:a3:91:65:f9:01:8a:2d:f4:9d:f1:42:d1:da:ab:a8:51:4f:
83:3f:10:00:a0:51:40:42:23:13:91:55:3d:e4:b4:31:70:8c:
9b:e7:b1:7b:af:ba:92:06:a5:3f:d9:f5:49:4f:b3:55:36:39:
a7:a1:93:bf:32:e4:f9:2c:66:67:5b:42:f0:d7:21:3f:18:1b:
86:ed:be:fb:c1:49:52:37:5e:a9:d4:4b:f3:55:c8:9a:e3:ca:
38:64:5a:1b:74:02:17:04:2b:61:31:b8:3f:e7:cb:8b:bf:9d:
4c:a5:ad:95:d0:cd:94:74:16:7a:b7:3b:c7:39:c9:f4:6e:3d:
5f:cb:0f:70:f3:4d:b2:bd:ad:5b:13:cc:68:6f:c9:7c:ab:be:
0b:14:95:18:3c:ed:53:65:16:b2:08:93:a3:59:7c:b0:a4:64:
d8:73:fe:e6:1f:54:d7:35:a2:95:4a:35:70:86:a6:18:0f:1e:
81:f6:c6:f6:af:9d:b4:d3:10:41:44:21:7f:32:4f:81:8c:bf:
db:ec:e6:e7:dd:cf:b4:fa:87:82:39:e7:88:e2:a3:00:23:52:
5d:6e:e3:02:68:ff:b5:04:58:79:ba:09:4e:68:2c:fc:a5:22:
c8:6a:61:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:28:49 2025 by rpki-client