Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/dSI7BEa0gtPHKNSaNmRTBnfdNz0.roa
File: dSI7BEa0gtPHKNSaNmRTBnfdNz0.roa (raw, json)
Hash identifier: Knzd09fpFowQeLlfCPGyzecYZxkgbfykn18BRJi/Ub4=
Subject key identifier: 75:22:3B:04:46:B4:82:D3:C7:28:D4:9A:36:64:53:06:77:DD:37:3D
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2445
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/dSI7BEa0gtPHKNSaNmRTBnfdNz0.roa
Signing time: Tue 10 Jun 2025 04:39:06 +0000
ROA not before: Tue 10 Jun 2025 04:39:06 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9285 (0x2445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 10 04:39:06 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=75223B0446B482D3C728D49A3664530677DD373D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:4e:7e:2e:1b:a5:e4:d0:b4:a1:eb:e1:06:
53:96:33:1a:59:c0:56:10:86:54:d2:31:8f:38:6a:
e4:92:8f:88:ec:7a:26:d2:b2:60:f9:6c:5f:cc:dd:
ca:50:e7:e2:fa:5d:6d:32:b2:d7:91:21:5b:cf:9f:
64:bb:44:d9:bf:5b:d7:70:6d:f6:02:e2:71:b6:13:
bc:89:0b:c3:fc:03:b8:5c:46:ed:6d:47:ca:75:06:
4f:e4:d9:27:5f:4e:f9:e1:e6:60:bb:7d:d2:0b:91:
8f:5f:79:da:04:52:35:70:2e:2e:c3:6f:bb:10:f2:
a0:43:11:73:e1:e8:9f:20:89:a2:08:6c:e9:b9:8c:
6e:f9:fb:f2:aa:07:ae:ae:73:79:a9:55:f4:a5:c9:
a1:b7:55:5d:a4:c0:b3:d0:87:3c:9f:cb:d5:08:35:
95:48:0f:6f:05:b2:3d:b2:77:4a:f4:e7:72:b1:bf:
13:35:4e:83:42:83:dd:51:cb:a3:63:5f:dd:8d:39:
65:d4:f0:79:1c:1b:c5:f9:9f:65:46:49:46:77:46:
98:d4:4b:8a:f5:bc:ce:4a:27:87:54:c4:0e:37:a7:
a8:66:9a:3d:ae:74:40:f3:3f:db:43:64:8e:06:57:
41:af:c0:c5:46:71:a3:70:ad:18:bc:02:b9:b6:21:
5d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:22:3B:04:46:B4:82:D3:C7:28:D4:9A:36:64:53:06:77:DD:37:3D
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/dSI7BEa0gtPHKNSaNmRTBnfdNz0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
54:a0:6f:a5:af:24:2c:f3:5a:d5:95:62:6f:33:02:00:36:43:
12:f4:a2:15:5d:55:ec:81:a4:25:de:4a:98:a3:14:5f:36:d7:
af:1e:ad:96:b5:e2:ea:5a:95:1d:36:99:d0:43:64:46:f7:f2:
ea:1e:5c:e9:e0:e5:7e:de:5b:f8:7a:85:7a:5f:b2:4c:8a:04:
21:94:ba:3b:d8:04:54:ab:15:e1:0d:6d:cf:35:ad:b5:bf:39:
95:9d:25:8f:c1:44:21:39:50:97:43:7a:c4:3c:34:5f:be:5d:
e8:ce:be:58:0b:33:88:20:b1:40:65:fa:f5:3a:40:95:be:1b:
c4:b2:af:6d:08:df:6e:8d:7f:49:a3:e4:31:14:fa:78:3b:8f:
35:d2:cc:d9:c5:0e:0b:ad:d8:54:b2:bd:ba:61:61:3c:1e:54:
69:01:8f:a1:b6:bd:74:b1:0a:0d:45:45:75:f6:3d:86:f6:bb:
73:4a:0a:ab:15:5c:cf:8f:9d:6e:06:2a:bc:99:4a:8b:66:85:
8f:2c:24:b1:2f:f9:97:51:7e:75:a0:88:1e:4c:c4:be:4a:09:
88:30:f5:03:33:f3:b5:04:27:bc:0c:70:91:2b:ce:38:c6:a7:
5d:90:10:12:8c:58:d1:bd:63:73:a9:c4:c9:d4:8d:14:ed:21:
32:32:57:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 08:09:45 2025 by rpki-client