Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/k9FY42unsJ289SIO2PlBa7E8f7s.roa
File: k9FY42unsJ289SIO2PlBa7E8f7s.roa (raw, json)
Hash identifier: 7pPwLnBG8t/SeLPDlqeCgKkK6Bmv/RS1R/SyT3po1l0=
Subject key identifier: 93:D1:58:E3:6B:A7:B0:9D:BC:F5:22:0E:D8:F9:41:6B:B1:3C:7F:BB
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2327
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/k9FY42unsJ289SIO2PlBa7E8f7s.roa
Signing time: Sun 08 Jun 2025 05:08:54 +0000
ROA not before: Sun 08 Jun 2025 05:08:54 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8999 (0x2327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 8 05:08:54 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=93D158E36BA7B09DBCF5220ED8F9416BB13C7FBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:98:6c:11:42:cc:96:66:5f:71:26:cb:46:
eb:1a:e1:67:83:0e:ba:c8:58:4f:7b:07:18:d3:77:
fe:86:88:a1:de:dc:03:cc:75:23:94:d9:6f:8d:34:
e1:49:64:79:46:8a:20:32:b1:23:33:82:80:d2:76:
bb:06:82:8a:33:50:74:61:5f:d3:ed:e0:79:b1:54:
76:cd:0d:98:60:db:a6:6b:e4:18:a5:a6:17:74:36:
07:6e:c0:d8:e0:c2:e9:c9:94:df:ce:e0:a4:e6:06:
00:b7:17:c4:66:25:27:33:7f:ad:04:21:c2:c9:aa:
b4:48:af:d8:6e:16:18:1f:9b:a1:af:82:8b:bb:02:
8b:06:50:cc:af:82:fe:8c:46:4e:17:2f:41:0b:20:
fc:31:f4:b6:67:69:07:f1:ac:01:db:7a:81:3b:92:
1a:0e:f0:50:b7:46:a0:45:54:3b:35:96:4a:56:8a:
b8:bc:38:85:fc:d2:63:f3:54:c6:ee:77:d5:db:09:
67:4a:fd:a8:aa:5c:fb:b1:7f:58:a8:24:5e:bb:0d:
b3:aa:35:2e:1d:f5:57:ee:9c:ee:79:e6:d6:55:6f:
f3:e0:8c:15:1d:70:86:ed:ad:d0:40:c0:a1:ba:8e:
ac:e6:25:a5:32:98:ca:52:1b:d9:19:1f:27:f7:e3:
0a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D1:58:E3:6B:A7:B0:9D:BC:F5:22:0E:D8:F9:41:6B:B1:3C:7F:BB
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/k9FY42unsJ289SIO2PlBa7E8f7s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
5f:1d:12:f8:cb:39:45:21:3d:e9:50:29:cb:fb:63:e5:c4:74:
33:08:0e:df:af:69:64:11:48:d8:4d:a4:e6:ec:1b:fc:e8:e3:
85:f5:dd:19:eb:58:79:88:30:ca:a4:01:5b:fc:19:ef:db:4a:
d8:3b:d6:99:37:41:1f:0a:1e:b7:c7:31:52:3b:02:b5:41:51:
dd:95:d7:d6:33:43:a4:c4:c5:38:97:d1:90:fc:9b:1c:64:a2:
48:1b:8a:e6:91:a8:32:f6:e1:ea:16:f5:ba:14:43:73:bf:7a:
80:e1:c9:2b:32:ec:e9:d5:29:7a:7c:8f:e6:31:93:2b:16:6f:
31:9f:10:f6:1d:bf:67:17:00:4e:87:8f:7b:58:13:9f:c5:c0:
cb:e1:f9:fd:7c:d6:29:b2:48:94:aa:de:3a:bd:f6:b7:80:75:
2e:d4:4a:39:6f:4f:91:28:ee:92:97:76:ae:4f:2c:24:67:f7:
c6:fb:cf:93:67:60:11:3c:1b:16:b2:92:81:67:6b:43:11:cb:
2b:cf:74:71:8a:af:c4:48:4e:7c:0d:de:18:f6:b2:ad:12:85:
56:6e:a2:4a:85:cf:7a:e9:64:5d:54:a1:08:53:b0:51:ac:b7:
e1:80:18:56:3e:77:52:81:90:b4:8e:83:70:03:2d:b1:d3:fb:
d0:47:87:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 11:56:58 2025 by rpki-client