Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/kauOAXJleetQ4FHnbSG1vPQOB-k.roa
File: kauOAXJleetQ4FHnbSG1vPQOB-k.roa (raw, json)
Hash identifier: JeYFGMAmeqExxl3w816b32/y8S6KBHi9kpvWkMc4YfU=
Subject key identifier: 91:AB:8E:01:72:65:79:EB:50:E0:51:E7:6D:21:B5:BC:F4:0E:07:E9
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 22F7
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/kauOAXJleetQ4FHnbSG1vPQOB-k.roa
Signing time: Sat 07 Jun 2025 21:08:54 +0000
ROA not before: Sat 07 Jun 2025 21:08:54 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8951 (0x22f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 7 21:08:54 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=91AB8E01726579EB50E051E76D21B5BCF40E07E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:56:ba:aa:7a:35:99:f2:8c:bd:19:2c:0d:
8d:cd:4f:05:11:f6:ef:06:63:c9:8f:8f:ff:c8:0a:
6b:c8:51:c5:78:e0:17:29:d9:bd:12:c6:e9:dc:28:
d4:41:7b:a3:73:b1:f4:e2:79:f1:47:f7:ef:4a:94:
74:e7:be:0f:bf:53:96:d9:5c:82:ff:55:1f:7d:e9:
14:bf:09:a0:3a:0f:f8:eb:b6:85:22:39:b5:4b:f2:
1a:c4:16:54:d7:2e:b4:c9:0b:69:29:ae:43:95:b4:
c9:00:a8:ca:3c:e2:fa:62:c9:d8:c7:b5:a6:cb:a1:
7b:5e:d6:35:53:51:1e:3a:67:95:dd:fa:f0:4e:6a:
9a:1a:2d:ba:a2:0a:77:2f:a1:0b:69:5c:ba:17:39:
e0:26:11:c6:74:e8:e8:39:20:cb:e3:65:52:af:cc:
bc:03:0c:31:2a:a4:05:73:2b:94:50:f3:be:f0:b2:
42:48:d7:96:99:c2:e1:3f:34:eb:18:8c:b5:81:d8:
28:ac:06:75:c2:31:fd:c7:34:89:ba:eb:26:27:9b:
33:49:9e:07:5d:32:be:a5:4a:3b:f7:59:af:4f:d7:
f3:3b:85:bc:94:62:d7:95:61:6e:f9:c9:67:b8:2e:
62:59:29:57:a8:12:95:b2:68:a7:3e:c2:f7:a2:e3:
6e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AB:8E:01:72:65:79:EB:50:E0:51:E7:6D:21:B5:BC:F4:0E:07:E9
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/kauOAXJleetQ4FHnbSG1vPQOB-k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
0b:47:6a:87:7a:e0:4d:1c:b3:fc:63:11:19:38:d4:a8:22:75:
83:4e:8d:1a:1b:15:ee:d2:a8:c2:04:58:9d:6c:0a:b7:69:7f:
bb:1d:82:ee:d9:70:94:94:ce:31:bc:1c:e6:12:7c:a1:85:50:
a4:17:b1:8c:16:77:56:c2:6c:1d:8b:5d:b5:a1:73:8b:26:9f:
b2:9a:3a:59:43:5f:95:4a:80:3d:bf:16:e4:52:ec:46:0e:ed:
fe:5a:ec:18:93:2c:4e:8a:c2:24:b8:43:14:0d:c5:6a:96:7b:
ca:e0:60:1b:ed:b0:73:64:00:c3:79:89:97:b9:63:fe:3e:f6:
79:c3:62:57:2a:75:ef:77:c1:9b:9c:5e:c2:2d:b1:93:96:31:
27:3f:f3:dc:f3:75:f8:68:e4:a2:a1:ff:4e:06:9b:4c:f4:7c:
eb:a9:68:15:bd:47:88:6f:e8:6c:90:cb:e7:b7:86:7b:dd:f0:
bd:8f:81:f3:12:45:bf:34:2d:a4:56:99:fa:4a:fa:f9:ec:b5:
ec:dc:d9:d2:e1:d9:f3:9b:ce:63:4b:a0:e4:70:1d:3b:db:e0:
2d:ef:70:a0:e3:a8:7a:c8:26:07:df:54:95:00:4b:7d:10:0b:
d0:25:f7:3a:b2:89:3a:aa:32:54:35:bd:2f:b8:08:a0:47:67:
85:33:00:a2
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICIvcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDcy
MTA4NTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDkxQUI4RTAxNzI2NTc5
RUI1MEUwNTFFNzZEMjFCNUJDRjQwRTA3RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkLVa6qno1mfKMvRksDY3NTwUR9u8GY8mPj//ICmvIUcV44Bcp
2b0SxuncKNRBe6NzsfTiefFH9+9KlHTnvg+/U5bZXIL/VR996RS/CaA6D/jrtoUi
ObVL8hrEFlTXLrTJC2kprkOVtMkAqMo84vpiydjHtabLoXte1jVTUR46Z5Xd+vBO
apoaLbqiCncvoQtpXLoXOeAmEcZ06Og5IMvjZVKvzLwDDDEqpAVzK5RQ877wskJI
15aZwuE/NOsYjLWB2CisBnXCMf3HNIm66yYnmzNJngddMr6lSjv3Wa9P1/M7hbyU
YteVYW75yWe4LmJZKVeoEpWyaKc+wvei424TAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUkauOAXJleetQ4FHnbSG1vPQOB+kwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgva2F1T0FYSmxlZXRR
NEZIbmJTRzF2UFFPQi1rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAAtHaod64E0cs/xjERk41KgidYNO
jRobFe7SqMIEWJ1sCrdpf7sdgu7ZcJSUzjG8HOYSfKGFUKQXsYwWd1bCbB2LXbWh
c4smn7KaOllDX5VKgD2/FuRS7EYO7f5a7BiTLE6KwiS4QxQNxWqWe8rgYBvtsHNk
AMN5iZe5Y/4+9nnDYlcqde93wZucXsItsZOWMSc/89zzdfho5KKh/04Gm0z0fOup
aBW9R4hv6GyQy+e3hnvd8L2PgfMSRb80LaRWmfpK+vnstezc2dLh2fObzmNLoORw
HTvb4C3vcKDjqHrIJgffVJUAS30QC9Al9zqyiTqqMlQ1vS+4CKBHZ4UzAKI=
-----END CERTIFICATE-----
Generated at Fri Jun 20 13:17:14 2025 by rpki-client