Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/jxhl9PMIeHNmZTL0sIRZZNNvehQ.roa
File: jxhl9PMIeHNmZTL0sIRZZNNvehQ.roa (raw, json)
Hash identifier: hNeXEThOkEn6hc86OM8fDauFjsgy/GTvvxn/wgPedww=
Subject key identifier: 8F:18:65:F4:F3:08:78:73:66:65:32:F4:B0:84:59:64:D3:6F:7A:14
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2061
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/jxhl9PMIeHNmZTL0sIRZZNNvehQ.roa
Signing time: Tue 03 Jun 2025 06:38:41 +0000
ROA not before: Tue 03 Jun 2025 06:38:41 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8289 (0x2061)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 3 06:38:41 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8F1865F4F3087873666532F4B0845964D36F7A14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:6d:37:a7:93:df:dd:b2:44:5a:51:d3:a3:
40:75:1d:a4:4d:85:f0:4e:06:45:11:43:0d:19:54:
2b:78:40:d9:42:05:88:d0:7b:c7:c2:e3:d0:3e:57:
a8:e2:2c:d7:f5:03:81:9f:8c:c1:da:1e:1e:6f:66:
3f:af:97:c5:e7:32:3e:54:ba:96:65:38:47:d3:b7:
36:18:22:f6:84:34:2c:4a:da:a2:03:f8:02:eb:b7:
7f:38:21:1a:3f:74:72:11:20:71:13:d7:04:73:0e:
f3:83:1e:49:fe:58:6c:4d:60:f7:95:6a:b7:e8:62:
15:f8:57:fb:5f:57:16:0d:fd:89:30:cf:96:0a:5c:
91:fd:a6:07:be:d1:41:04:68:eb:27:e6:42:7c:3b:
5f:f0:07:43:e6:78:70:46:78:50:4b:98:9f:5d:0c:
cb:ea:e9:2a:1c:09:67:68:ce:c7:02:c8:e2:db:69:
f3:d2:40:c0:ef:d3:e9:b1:a1:cf:83:c8:ad:89:34:
c2:29:03:4c:0c:19:97:8e:96:61:63:7f:1b:7b:ac:
e6:11:a5:f8:4e:cd:f9:32:2a:1b:77:28:21:6b:81:
82:7f:a2:81:56:a5:36:98:9f:94:8a:56:aa:3a:22:
ed:d8:8b:1e:bc:36:e9:0d:1a:a7:5a:c3:5b:0e:92:
2d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:18:65:F4:F3:08:78:73:66:65:32:F4:B0:84:59:64:D3:6F:7A:14
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/jxhl9PMIeHNmZTL0sIRZZNNvehQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
03:ef:0d:94:39:c6:d5:1b:6d:cd:22:13:1e:32:96:8c:96:0c:
35:11:40:72:88:66:06:c7:e5:1e:a2:27:54:f1:11:0f:71:17:
b0:a0:ce:7a:e6:79:cb:cc:2e:90:d6:c4:db:78:d3:32:7b:45:
83:33:86:b4:9d:71:63:13:54:b6:e2:6e:ad:6f:6f:98:c8:dc:
52:67:f2:af:7b:29:55:3b:32:68:5d:ac:91:72:84:40:e7:69:
70:9f:89:a4:cf:1f:99:36:fb:cf:2a:e4:a1:7b:4d:d6:3f:7a:
19:6b:dd:a0:75:21:53:72:8e:f0:d2:b0:81:ae:cf:2b:bb:54:
49:1e:36:57:85:8a:e7:0e:b5:ed:fd:98:d6:d5:71:d8:35:63:
a9:cc:cd:c4:42:0f:7b:f3:1d:6a:af:26:77:b9:0b:ec:63:3c:
f7:f8:bb:57:e3:4f:0f:e8:e0:f6:f3:54:d6:50:3c:cf:90:c9:
e3:fd:bc:44:bc:56:d9:2d:fa:08:90:4a:f4:e9:dc:85:ca:ed:
25:34:24:17:58:7b:85:ad:af:0c:41:c6:b0:4e:e0:29:10:a3:
6e:77:b8:7b:45:cd:79:09:ad:ec:df:5b:f8:3d:fc:af:68:ce:
7a:0b:1e:69:e7:19:a4:05:6b:15:c5:f5:0f:08:78:5f:c7:26:
42:fa:11:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:04:03 2025 by rpki-client