Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/ejbkHGenLXKodxiW5UQ3pnsDsRs.roa
File: ejbkHGenLXKodxiW5UQ3pnsDsRs.roa (raw, json)
Hash identifier: 7DJACoRHPdvU2DKFeMxppugJbzM6r5aoys6NFTHacF8=
Subject key identifier: 7A:36:E4:1C:67:A7:2D:72:A8:77:18:96:E5:44:37:A6:7B:03:B1:1B
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 25A0
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/ejbkHGenLXKodxiW5UQ3pnsDsRs.roa
Signing time: Thu 12 Jun 2025 14:39:14 +0000
ROA not before: Thu 12 Jun 2025 14:39:14 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9632 (0x25a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 12 14:39:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7A36E41C67A72D72A8771896E54437A67B03B11B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:ec:3e:ea:f6:9f:51:85:ab:c4:cf:65:3c:
e2:10:33:ec:7c:43:f3:c3:50:a1:50:58:9b:2a:cb:
bf:76:c7:f0:b1:be:84:63:90:60:b8:8b:13:c1:fa:
14:53:6a:79:20:a5:85:f2:cc:b9:aa:14:5f:05:26:
09:9e:75:c0:08:aa:8e:47:b0:2d:ac:7f:2f:82:8e:
cf:e1:e6:be:d7:57:7d:7f:af:e8:78:05:91:8b:6c:
8f:18:e2:87:a3:67:13:1c:ef:c8:ee:93:ed:a2:02:
b5:1e:61:b3:4c:4f:cc:b0:4d:29:8d:9c:00:53:63:
e3:0b:69:99:b7:b8:00:b3:87:e7:b9:8b:f5:33:fb:
d7:97:f1:68:7c:b1:fa:c6:fa:56:e5:23:ba:95:8f:
21:1a:47:3e:54:25:ed:4f:66:88:3c:8f:e0:3a:4b:
f5:f0:46:83:27:c4:13:0e:06:b5:77:6d:86:1d:b2:
f0:48:fc:62:b2:1e:7a:37:fa:72:8e:65:32:75:5a:
46:06:90:0c:e3:64:b5:27:35:1c:18:82:2e:00:8d:
fe:02:d2:57:97:a3:ba:2f:07:84:53:cf:f3:9b:d9:
7b:96:0d:bb:56:bb:58:4e:25:ee:16:4c:70:91:fc:
ff:07:2a:d0:bb:84:71:b2:78:6a:16:bd:28:0d:5c:
7d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:36:E4:1C:67:A7:2D:72:A8:77:18:96:E5:44:37:A6:7B:03:B1:1B
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/ejbkHGenLXKodxiW5UQ3pnsDsRs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
97:1b:5d:7a:f4:fb:e6:33:8c:f7:32:6f:84:e9:74:ea:d3:81:
73:5b:97:ec:02:75:85:77:4d:fc:cc:bb:26:33:c3:a9:cb:86:
75:be:ed:3d:40:cf:a5:f4:64:0c:24:1b:44:30:13:ef:3c:5c:
07:0b:17:f4:3f:50:2f:92:3f:01:a8:93:cb:26:8a:9f:64:be:
ad:d9:04:20:7b:ab:fd:c0:b0:59:6b:e3:9d:ad:0c:ca:2d:d7:
bf:14:ab:da:ff:d4:8d:22:96:f1:b5:f1:af:88:58:39:27:a3:
a8:0f:34:6a:67:e4:08:ba:a6:6b:98:08:bf:2e:2a:95:c6:09:
92:a5:3d:df:21:d1:04:87:97:b6:59:59:c3:19:78:ff:54:66:
bf:51:10:4a:56:bc:6e:7e:2b:40:84:84:9f:ed:4d:6b:a9:04:
f5:2e:92:7e:97:78:f6:ef:e3:34:b0:63:19:38:89:96:97:b2:
df:da:22:ed:6f:af:ae:d5:e9:5a:97:c9:59:ea:af:84:71:18:
50:65:44:a6:37:44:99:ab:b9:5d:e1:fd:d9:f5:f5:09:b1:f8:
a7:5b:a3:05:38:f1:7b:f3:03:a5:fa:22:05:be:28:b8:71:a3:
49:13:e6:5e:7d:4e:57:3a:86:0c:02:29:92:0f:3a:d2:9a:6e:
46:a0:8b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:38:01 2025 by rpki-client