Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/REbzVgd_nFZNrMXOeaKUirq-hzQ.roa
File: REbzVgd_nFZNrMXOeaKUirq-hzQ.roa (raw, json)
Hash identifier: jPkzFrgzurP/M0J9V3QBJDMYRmzOYC7yeCuzjAjpfAs=
Subject key identifier: 44:46:F3:56:07:7F:9C:56:4D:AC:C5:CE:79:A2:94:8A:BA:BE:87:34
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 23A6
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/REbzVgd_nFZNrMXOeaKUirq-hzQ.roa
Signing time: Mon 09 Jun 2025 02:08:58 +0000
ROA not before: Mon 09 Jun 2025 02:08:58 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9126 (0x23a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 9 02:08:58 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4446F356077F9C564DACC5CE79A2948ABABE8734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:a3:08:70:c8:78:d1:53:08:e5:69:33:e7:
29:1d:11:fc:23:4d:e7:1d:c0:58:f4:f2:27:9d:dc:
d1:df:87:88:86:26:8d:8b:93:2c:ef:54:ed:53:31:
68:89:77:88:2b:3b:cf:e4:e2:d1:c2:ae:62:b5:6c:
a0:d9:dc:4b:69:ca:5c:05:4d:20:12:e4:a1:77:df:
f3:d8:37:1a:bf:67:8c:46:b9:a3:39:7b:8b:fb:1f:
3e:97:c8:49:1e:06:3e:86:1c:a0:d1:27:2a:72:83:
c2:7c:d4:24:fb:72:52:22:12:c7:a6:52:f8:02:cb:
c3:74:45:e5:69:d9:0b:e3:a0:7f:bc:da:3a:1a:92:
50:21:d7:68:a7:88:70:31:5e:9a:a7:18:90:80:30:
42:02:73:ea:fa:dc:e9:22:35:d5:3c:d9:81:d7:3b:
51:4c:19:4f:da:bd:98:c3:3a:a8:62:36:b6:5c:f6:
12:22:7f:07:9d:9d:fd:a5:41:80:f4:f3:51:eb:e2:
4a:f6:29:09:cb:b2:ce:20:6f:7c:2b:11:a0:09:4c:
4f:70:12:20:99:a0:af:3f:cf:24:15:19:02:94:30:
fe:76:fc:af:9d:17:41:3b:74:bc:1d:a9:7d:1c:05:
47:96:50:2e:c5:f2:33:59:39:7a:91:b2:76:89:68:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:46:F3:56:07:7F:9C:56:4D:AC:C5:CE:79:A2:94:8A:BA:BE:87:34
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/REbzVgd_nFZNrMXOeaKUirq-hzQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
0b:fc:66:47:41:af:82:ef:f6:76:3d:34:8e:fa:f2:30:8d:7c:
9f:d0:c9:7a:7b:a3:59:b6:33:c9:c1:d5:9a:e9:2b:b2:71:ef:
5c:2f:7e:77:f7:c0:f6:7a:09:9f:43:63:8a:78:b5:21:bb:47:
26:17:27:c4:03:56:bf:00:15:2a:b5:ba:64:78:b7:d5:c4:e9:
f6:13:d0:2d:1a:a4:6c:91:03:65:5f:c4:fa:c0:7c:d8:43:5e:
4d:18:d5:bf:97:9f:41:52:37:35:8a:8a:1a:36:a0:f2:b1:39:
79:f7:5c:9d:e8:40:e9:75:11:38:36:10:6b:d5:c1:a9:4d:66:
ab:da:c2:68:1a:0f:68:f9:c9:50:cd:a4:aa:9d:91:75:bf:b9:
d9:42:a5:a4:5b:55:d1:58:89:87:09:37:02:cb:c3:53:f5:fb:
b4:96:cb:16:6e:7c:fb:05:a6:c7:cb:fb:6d:ac:1c:f9:de:7f:
24:c2:9c:e8:6f:c8:c9:2a:0c:f7:df:10:8e:f9:be:0d:48:ef:
1a:eb:93:13:3c:af:25:0c:e9:35:d6:0b:e9:a3:9b:49:61:31:
87:e4:98:72:1b:8d:bf:6d:3f:38:93:8c:a4:5a:e7:63:6f:a5:
c9:59:9e:61:dd:cb:04:0e:d5:d8:64:89:cd:34:c9:34:05:aa:
86:f2:fe:5a
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICI6YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDkw
MjA4NThaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ0NDZGMzU2MDc3RjlD
NTY0REFDQzVDRTc5QTI5NDhBQkFCRTg3MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/oaMIcMh40VMI5Wkz5ykdEfwjTecdwFj08ied3NHfh4iGJo2L
kyzvVO1TMWiJd4grO8/k4tHCrmK1bKDZ3EtpylwFTSAS5KF33/PYNxq/Z4xGuaM5
e4v7Hz6XyEkeBj6GHKDRJypyg8J81CT7clIiEsemUvgCy8N0ReVp2QvjoH+82joa
klAh12iniHAxXpqnGJCAMEICc+r63OkiNdU82YHXO1FMGU/avZjDOqhiNrZc9hIi
fwednf2lQYD081Hr4kr2KQnLss4gb3wrEaAJTE9wEiCZoK8/zyQVGQKUMP52/K+d
F0E7dLwdqX0cBUeWUC7F8jNZOXqRsnaJaPLDAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUREbzVgd/nFZNrMXOeaKUirq+hzQwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvUkVielZnZF9uRlpO
ck1YT2VhS1VpcnEtaHpRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAAv8ZkdBr4Lv9nY9NI768jCNfJ/Q
yXp7o1m2M8nB1ZrpK7Jx71wvfnf3wPZ6CZ9DY4p4tSG7RyYXJ8QDVr8AFSq1umR4
t9XE6fYT0C0apGyRA2VfxPrAfNhDXk0Y1b+Xn0FSNzWKiho2oPKxOXn3XJ3oQOl1
ETg2EGvVwalNZqvawmgaD2j5yVDNpKqdkXW/udlCpaRbVdFYiYcJNwLLw1P1+7SW
yxZufPsFpsfL+22sHPnefyTCnOhvyMkqDPffEI75vg1I7xrrkxM8ryUM6TXWC+mj
m0lhMYfkmHIbjb9tPziTjKRa52NvpclZnmHdywQO1dhkic00yTQFqoby/lo=
-----END CERTIFICATE-----
Generated at Sat Jun 21 11:18:26 2025 by rpki-client