Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/lKS8U1az5ql2ABrWQfqdiwu4QQI.roa
File: lKS8U1az5ql2ABrWQfqdiwu4QQI.roa (raw, json)
Hash identifier: Q6OkUwo4gTl9U8gi7HypMpuN35/QpUz9JHQpo7FJ+WI=
Subject key identifier: 94:A4:BC:53:56:B3:E6:A9:76:00:1A:D6:41:FA:9D:8B:0B:B8:41:02
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 22CB
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/lKS8U1az5ql2ABrWQfqdiwu4QQI.roa
Signing time: Sat 07 Jun 2025 13:38:53 +0000
ROA not before: Sat 07 Jun 2025 13:38:53 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8907 (0x22cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 7 13:38:53 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=94A4BC5356B3E6A976001AD641FA9D8B0BB84102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a3:76:12:b4:05:f0:4e:a6:c1:f2:03:eb:8f:
ad:61:e2:5e:28:b5:17:7a:78:cf:e0:0b:9c:a4:06:
06:4d:19:48:ad:71:26:97:de:c9:74:c5:48:d5:46:
99:f1:a8:3f:f6:2c:ff:75:04:7d:0e:bd:c6:ed:ee:
e7:c5:1e:a5:b1:9b:9f:26:c4:cb:74:a5:61:4d:78:
4d:a3:73:e6:0b:91:f6:24:0e:21:67:e2:63:14:70:
5b:d0:76:77:87:0f:2e:89:df:f5:44:6e:6b:25:c3:
c7:db:ab:0e:50:2c:e5:70:67:a7:69:4f:8c:0b:91:
93:7c:54:68:63:e2:10:6a:8d:0b:7d:de:53:a2:0a:
a4:40:7d:e7:ed:9f:10:03:32:2a:0b:7d:27:64:7a:
36:10:61:d7:9b:ec:9c:db:61:ac:d9:82:42:57:4e:
e7:ba:e7:42:85:aa:8f:2b:19:8c:20:2a:61:40:82:
2f:0e:4e:21:62:80:d2:7a:9b:0a:27:f8:68:08:20:
05:63:e0:50:3c:ec:25:3f:8c:91:43:cd:59:76:32:
18:07:10:06:11:75:49:1e:59:00:40:0a:b7:fa:17:
e2:3c:ba:6c:f4:96:9c:31:97:83:c6:43:9d:f3:72:
98:d6:15:b2:74:76:cd:03:2d:94:27:79:49:72:ed:
c4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A4:BC:53:56:B3:E6:A9:76:00:1A:D6:41:FA:9D:8B:0B:B8:41:02
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/lKS8U1az5ql2ABrWQfqdiwu4QQI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
bd:ac:fa:4c:98:a7:71:a5:25:7f:f1:5a:04:2e:0d:17:f8:2f:
66:89:6a:a2:09:9c:1b:03:f6:f6:75:99:d9:81:20:65:84:ab:
d1:46:dd:5c:76:df:2a:36:a1:4c:0b:a9:ad:23:f6:81:d6:a5:
c9:2f:37:a2:b1:c9:8b:67:21:9e:f2:3c:c8:01:ab:54:59:8e:
5f:e4:56:c5:46:94:ba:22:95:15:7e:8a:e1:4b:46:53:aa:96:
2a:25:03:87:d6:8a:00:c9:d6:0d:06:12:d3:aa:ec:bb:9b:c1:
5e:38:df:a2:ee:fb:c7:fb:c7:fc:55:3d:ab:86:9e:1e:bb:a2:
b8:83:11:96:94:40:32:b3:5d:58:73:9c:25:31:5d:33:ed:f7:
49:fa:f0:81:9a:fc:51:0d:9b:c2:0b:41:1d:6a:f1:32:b5:20:
c1:8e:1e:42:5d:7d:3d:71:7e:06:a7:b0:0e:e3:d4:f2:61:b6:
df:b6:7b:5c:6f:1e:25:24:65:bd:d3:87:94:75:0b:79:8b:56:
b9:3e:d6:5e:02:3c:f8:08:78:92:06:75:6a:62:b8:66:b2:46:
14:51:8d:dd:4b:38:a7:18:ff:06:7b:f6:5d:7f:0f:4c:8c:db:
de:2c:d3:98:7e:40:f3:87:9b:cc:c4:0d:ff:dc:e5:13:d2:d8:
8f:8f:4a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 00:23:30 2025 by rpki-client