Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/Sjo3l75_1S4yz-NBedCSvJUAwy4.roa
File: Sjo3l75_1S4yz-NBedCSvJUAwy4.roa (raw, json)
Hash identifier: 0Q922uqIE2fNt5ZxPasmK1qDVjp53IHhVu4MeZaHOnA=
Subject key identifier: 4A:3A:37:97:BE:7F:D5:2E:32:CF:E3:41:79:D0:92:BC:95:00:C3:2E
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 207B
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Sjo3l75_1S4yz-NBedCSvJUAwy4.roa
Signing time: Tue 03 Jun 2025 11:08:42 +0000
ROA not before: Tue 03 Jun 2025 11:08:42 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8315 (0x207b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 3 11:08:42 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4A3A3797BE7FD52E32CFE34179D092BC9500C32E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:c1:f6:d9:8c:87:52:fd:d4:2b:22:3a:a3:
32:86:1e:f6:fb:a2:b2:bd:a3:a0:4a:83:69:ea:02:
f6:a8:e2:24:50:9f:73:60:80:ef:ec:e3:6b:d0:5a:
b9:52:24:83:2c:35:51:76:aa:e6:c0:94:b2:21:96:
4b:a4:00:ee:32:b0:0a:f3:69:4b:5b:62:d4:5a:f5:
9c:52:4a:28:ee:a4:a9:68:c7:74:47:0c:f1:83:b4:
b0:e0:19:13:91:26:47:b4:7e:11:4d:d9:2a:b3:d3:
18:8e:26:88:65:87:9d:2f:a0:4b:58:cb:f2:a1:78:
d4:5b:93:0f:0e:da:b4:c5:7f:b9:fe:f1:d0:ec:fa:
e5:53:04:be:aa:76:94:0c:19:b7:ba:58:5e:4f:db:
cc:b1:aa:8a:00:4c:f5:dd:11:db:64:f0:13:3f:4f:
a0:b8:ce:df:3f:ef:2e:d4:e4:1b:bc:16:c1:87:15:
4d:ee:73:54:41:c4:bc:3f:5c:e5:35:8d:17:09:59:
45:8e:f1:e6:45:2e:5c:a7:fa:73:39:17:8d:91:5e:
5c:ec:0e:7b:f7:0e:1d:ac:43:43:7a:b7:32:30:9c:
65:63:8c:2a:da:49:f1:a9:47:5d:e1:de:b0:65:8d:
29:39:33:2a:59:5c:12:a9:f9:b3:b7:06:04:06:6f:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3A:37:97:BE:7F:D5:2E:32:CF:E3:41:79:D0:92:BC:95:00:C3:2E
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Sjo3l75_1S4yz-NBedCSvJUAwy4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
19:3f:b7:6a:4b:f7:44:f9:6b:f4:0e:ce:87:eb:7f:20:00:7a:
5d:f2:bb:14:9e:d1:38:d5:f7:77:06:1a:81:ec:80:53:79:33:
75:69:34:a5:22:be:42:70:7f:f4:7c:42:cf:62:86:9a:82:db:
48:22:32:90:42:f4:d3:44:25:b7:8d:ad:65:6d:f6:74:ab:df:
14:f9:7e:9b:a8:65:59:a4:44:7c:58:93:c1:a8:d3:09:8d:2b:
45:a0:76:b5:9c:22:be:30:13:65:08:c2:52:20:7a:08:5b:6c:
2b:c7:17:f4:ff:91:d8:a5:b1:4c:c7:6e:b2:44:89:db:3f:07:
0a:e6:ba:9b:59:f9:ad:c2:3b:54:38:03:98:87:0d:ff:9a:58:
94:f3:a5:48:ee:a3:1d:eb:c5:30:22:8a:f3:bc:9e:91:3a:9b:
7c:75:75:e4:3f:28:d1:58:47:98:b3:96:6e:c4:b3:4c:c5:b8:
7d:d0:d1:8e:7e:29:39:33:d7:c0:28:6d:e0:ab:55:8e:c4:2b:
0f:83:e6:fd:4f:f6:27:97:e0:88:6f:f0:51:4f:06:1a:e6:89:
1b:23:14:5f:1d:0c:a1:6d:df:46:0c:f6:bf:73:0e:9c:21:40:
89:bb:e9:b2:39:82:91:46:48:5d:fa:cb:6f:c5:df:b1:9e:27:
2a:11:9b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:39:15 2025 by rpki-client