Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/h_a0POOu9tvP9ZyEHz10gLct-_s.roa
File: h_a0POOu9tvP9ZyEHz10gLct-_s.roa (raw, json)
Hash identifier: gHmDXVboNHXatFSmpwoNSFiuIvX3bYSq8GsL6mnevE0=
Subject key identifier: 87:F6:B4:3C:E3:AE:F6:DB:CF:F5:9C:84:1F:3D:74:80:B7:2D:FB:FB
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1FF8
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/h_a0POOu9tvP9ZyEHz10gLct-_s.roa
Signing time: Mon 02 Jun 2025 13:08:36 +0000
ROA not before: Mon 02 Jun 2025 13:08:36 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8184 (0x1ff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 2 13:08:36 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=87F6B43CE3AEF6DBCFF59C841F3D7480B72DFBFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:0f:59:2d:41:d3:2c:24:d4:b8:42:3d:29:
28:0b:b5:21:f4:07:61:ef:c1:8a:3f:12:1d:c4:b0:
ac:52:13:a0:02:6b:2d:11:9a:da:d2:e9:ca:1a:12:
fe:bd:91:c4:54:89:80:b1:44:b3:ac:26:e2:48:2b:
b7:39:7c:de:3c:8e:35:37:98:12:73:de:47:53:27:
12:11:fc:2c:a4:89:81:54:ef:cc:ec:ea:7b:93:59:
d0:36:b9:1b:65:1d:4d:50:a9:22:3f:ed:58:40:48:
f1:a4:56:ed:15:c9:bf:d6:ce:54:fc:ac:c4:3e:b0:
d4:31:c0:57:08:cc:2c:ed:ca:8d:a6:b4:8c:79:d2:
e6:a2:fc:b8:24:a8:b2:65:28:76:73:26:be:3f:f6:
8e:c4:4e:74:42:6c:12:88:22:e8:9f:0e:23:16:c9:
08:9f:66:34:f9:74:98:4e:2b:1b:63:6e:08:9a:36:
2a:48:c8:88:ba:2e:27:37:3c:4f:fa:08:f2:bb:54:
73:6e:0e:db:d3:1c:31:82:3c:e5:50:ed:d0:98:b9:
a5:ef:99:41:44:14:04:f5:28:9e:92:4e:ab:f0:0c:
49:10:89:08:1f:80:4a:8c:e0:5a:6f:38:bb:ef:ed:
c0:30:4c:6e:ed:55:d0:33:ec:74:fd:39:b9:37:69:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F6:B4:3C:E3:AE:F6:DB:CF:F5:9C:84:1F:3D:74:80:B7:2D:FB:FB
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/h_a0POOu9tvP9ZyEHz10gLct-_s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
3c:01:79:bd:a2:04:90:b9:5b:59:46:a5:94:8b:7f:a6:8f:d9:
c6:22:56:9d:2e:b5:59:e5:9a:62:f4:4a:eb:2f:40:e6:8d:74:
d3:7c:4d:60:21:17:38:c7:a3:e3:9f:2f:86:0d:8d:cb:6a:a4:
21:60:f6:13:03:0d:00:cf:23:26:49:da:89:98:9d:99:cd:6b:
22:d7:11:8e:f0:e6:7b:5e:96:15:f9:c0:3b:a3:79:ed:a5:cc:
db:40:4d:3c:e3:45:e7:6e:bc:60:10:ef:a9:b6:e9:e3:f6:ec:
3e:64:d5:c5:c8:6a:3d:35:8a:7e:23:29:d9:4d:7f:12:2f:36:
f1:e3:b1:0d:a1:e8:e3:8e:6b:6d:b5:9f:7c:f7:6b:13:38:d9:
09:38:c2:b5:4a:8d:f8:bb:77:78:ac:8d:1a:4d:fd:b6:ba:b6:
9f:4b:84:f1:e9:21:b5:cd:73:26:74:0e:83:d2:40:fc:c0:d7:
33:b6:1e:66:4c:65:c2:e4:59:97:86:11:34:c5:36:3d:8c:68:
31:db:5d:af:cd:48:2a:46:22:06:95:7b:bf:ff:d8:ef:38:21:
a1:d6:a1:b7:78:4a:c7:26:db:83:d4:4c:79:5c:f3:63:03:56:
05:0b:78:dc:9f:09:3c:4c:d9:b5:e2:4d:de:eb:8b:e2:9d:b3:
d0:09:88:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 06:08:03 2025 by rpki-client