Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/XHKOsvCrDGBNnZNmti4BqiPhhjw.roa
File: XHKOsvCrDGBNnZNmti4BqiPhhjw.roa (raw, json)
Hash identifier: weN13t5DQqrFjMkUpdZ81ReBqSsWx7dmRSDF6hGodU0=
Subject key identifier: 5C:72:8E:B2:F0:AB:0C:60:4D:9D:93:66:B6:2E:01:AA:23:E1:86:3C
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1F3B
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/XHKOsvCrDGBNnZNmti4BqiPhhjw.roa
Signing time: Sun 01 Jun 2025 05:38:33 +0000
ROA not before: Sun 01 Jun 2025 05:38:33 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7995 (0x1f3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 1 05:38:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5C728EB2F0AB0C604D9D9366B62E01AA23E1863C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:f0:73:7b:28:d3:7f:6c:92:32:9f:3f:f9:
79:bd:2b:d8:0f:e0:77:4e:7b:a2:18:0f:ab:c3:7e:
f9:cd:b4:be:96:02:b4:1f:ff:59:15:5e:9e:39:4b:
b7:19:f0:3d:21:18:2a:36:54:fc:4d:24:ee:8c:73:
39:9c:7e:19:cf:4d:cc:ab:93:35:96:61:7b:1c:84:
ce:5f:d6:da:db:e8:7e:a5:c5:86:ab:8e:a2:f5:de:
9a:44:a7:3f:78:da:70:90:83:76:1c:16:ea:63:99:
d0:66:ba:c0:ec:99:6f:1e:d8:6f:7d:72:d3:18:ec:
48:b1:c1:0b:ea:1c:f9:07:2c:ed:19:96:6b:9e:60:
7c:cc:56:73:8b:0d:4d:c0:a5:df:9d:a5:ce:8c:23:
ef:e2:76:74:54:de:e2:75:c8:c2:b6:be:57:33:9a:
02:6e:4e:ee:cb:2d:55:a1:73:60:1a:06:01:8f:19:
52:20:a8:64:42:6b:70:71:f1:55:89:41:3a:bb:67:
29:8d:15:fd:63:e6:eb:3f:04:54:7d:9a:b4:11:50:
69:36:6a:c5:f5:b8:3d:52:f4:43:96:3f:ed:5c:4c:
f2:4d:86:22:d9:d6:03:2e:66:e7:bd:0e:29:e4:73:
84:fc:8f:42:a9:4e:c9:2d:66:14:68:b7:60:75:97:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:72:8E:B2:F0:AB:0C:60:4D:9D:93:66:B6:2E:01:AA:23:E1:86:3C
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/XHKOsvCrDGBNnZNmti4BqiPhhjw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
06:09:0b:ca:c1:c7:ed:29:c5:e4:f8:84:be:62:82:f8:d3:b4:
c5:64:45:18:f5:66:03:a2:dd:65:7e:0d:95:86:cc:1d:64:18:
51:12:9f:c1:d2:31:96:9e:6b:67:bb:72:50:93:ba:07:c5:c4:
52:84:21:7e:e8:e9:34:6d:84:cb:8a:1b:f6:04:0b:63:20:75:
e3:a8:90:e2:63:dc:75:cc:06:7c:ab:74:0b:2a:b0:22:7f:78:
4a:4f:19:ff:b9:0d:97:2b:7e:0c:fb:85:55:41:eb:a4:aa:c0:
93:4e:d2:82:b1:9c:a9:6e:85:b3:a2:6c:40:b1:cd:2b:72:f8:
46:47:91:12:21:48:62:81:cd:28:9e:a5:5d:73:94:74:22:c2:
12:5f:43:33:83:57:3f:4b:d3:7e:3c:ad:e2:c9:83:05:cd:ef:
f8:52:00:37:4e:0e:a0:a3:aa:5e:06:c8:ca:49:0e:33:94:10:
2c:73:2d:a9:d1:08:90:7f:24:89:8e:18:fc:92:9d:40:be:c8:
51:6d:4a:13:9e:59:80:a3:b2:19:c4:8e:fd:0c:ae:4e:43:80:
e3:3c:72:62:72:86:ec:44:92:65:fe:1e:cf:40:36:28:cb:ea:
ce:9a:5e:00:cc:c5:86:95:7d:1d:b0:7d:7a:83:66:b6:bc:0b:
13:4a:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:04:44 2025 by rpki-client