Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/iB41MJdYlkhxKoygfPh2K-psLS4.roa
File: iB41MJdYlkhxKoygfPh2K-psLS4.roa (raw, json)
Hash identifier: ny9uA6XuM68AFBi/PkyYeBIUWB4F6UJ1sjiBh2GnLLU=
Subject key identifier: 88:1E:35:30:97:58:96:48:71:2A:8C:A0:7C:F8:76:2B:EA:6C:2D:2E
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2A9C
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/iB41MJdYlkhxKoygfPh2K-psLS4.roa
Signing time: Sat 21 Jun 2025 22:41:11 +0000
ROA not before: Sat 21 Jun 2025 22:41:11 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10908 (0x2a9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 21 22:41:11 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=881E353097589648712A8CA07CF8762BEA6C2D2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:f3:77:58:7b:8b:82:13:64:83:4a:83:8d:
61:ef:aa:ed:78:2f:91:d4:be:c0:ad:00:2b:e8:4f:
65:40:fa:cd:c2:cd:76:6a:70:7d:92:58:0a:2c:08:
31:45:6c:5e:0c:97:8b:b9:47:fa:0c:63:f2:ee:7e:
b4:08:90:98:da:e5:81:28:eb:f0:d6:29:09:2f:ac:
55:96:07:4a:b9:85:5a:fb:5a:66:9a:ca:ce:0c:70:
ef:f7:54:ad:63:13:15:6e:3a:29:46:e5:85:f2:97:
17:ac:ec:6b:f2:6a:a5:c3:65:09:d9:7a:c7:8e:95:
6c:10:31:74:df:01:06:2c:8b:50:5f:f0:e0:0e:83:
ca:1f:ed:cf:25:e9:1c:63:1f:7e:fb:b6:fc:ff:8d:
d3:58:67:fc:76:2e:27:f5:35:de:78:86:04:14:e6:
38:29:11:e4:a3:00:2b:0f:d4:fa:87:4f:fd:6b:73:
dd:ed:58:84:d4:90:ec:09:13:e2:26:3b:bc:c5:b6:
bc:0a:c2:8f:70:4e:f8:81:53:bb:63:35:5f:a8:91:
88:a1:0d:54:5c:46:f8:86:53:67:a2:e9:0f:8f:6b:
6b:7c:25:20:8f:36:ae:44:05:b0:c8:b9:05:93:a3:
d5:27:12:ea:7b:ab:88:e4:76:cf:c1:2c:52:10:a7:
a0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1E:35:30:97:58:96:48:71:2A:8C:A0:7C:F8:76:2B:EA:6C:2D:2E
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/iB41MJdYlkhxKoygfPh2K-psLS4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
61:b8:fd:7d:d6:4c:e9:85:84:fd:c2:36:52:94:78:da:e9:f9:
88:b2:bb:44:e1:7f:24:89:9e:40:a8:d6:c8:bd:69:cf:14:37:
b2:e4:e6:ff:5f:03:19:49:7f:c7:04:fe:76:79:a9:55:68:51:
7b:79:5e:1e:7a:bb:0f:74:63:30:93:2d:5b:45:07:75:58:b5:
db:bf:ec:84:77:c8:d6:f1:df:af:31:8d:08:93:f3:91:8c:d2:
4a:08:46:97:df:60:91:17:5a:9f:00:44:fb:a1:56:3d:91:74:
71:6c:17:a5:95:dd:32:7d:e8:28:91:64:34:1f:99:5f:ab:12:
15:c8:3a:f2:f2:40:d1:35:41:ef:a1:38:c6:62:a5:bf:34:cd:
98:17:ef:80:b7:a7:c8:b3:8a:e7:5d:47:58:aa:81:c6:04:cf:
ff:64:4c:f6:db:42:58:46:bc:2d:16:a2:c5:0d:f5:58:8a:9e:
07:90:de:31:b0:be:81:a6:1b:b5:7d:fa:94:d5:ad:d2:a6:ae:
ac:43:39:57:20:4b:0b:cb:77:5b:ea:b5:51:36:aa:e9:0d:a1:
cf:67:d1:32:60:00:68:05:09:d9:09:1c:66:6a:1e:e6:10:fd:
63:a0:28:6b:44:2c:a2:cc:30:2d:53:4f:8b:72:ec:56:d0:7a:
c4:e5:b0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:01:31 2025 by rpki-client