Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/o0u6-BZRmX14iBaRIPOccmYJ1wQ.roa
File: o0u6-BZRmX14iBaRIPOccmYJ1wQ.roa (raw, json)
Hash identifier: QSKrDnx24ZgQ2CTeY0INVhcavgaDH52ejnXUdJPNZyY=
Subject key identifier: A3:4B:BA:F8:16:51:99:7D:78:88:16:91:20:F3:9C:72:66:09:D7:04
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 7775
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/o0u6-BZRmX14iBaRIPOccmYJ1wQ.roa
Signing time: Wed 05 Nov 2025 12:42:57 +0000
ROA not before: Wed 05 Nov 2025 12:42:57 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30581 (0x7775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Nov 5 12:42:57 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=A34BBAF81651997D7888169120F39C726609D704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ca:ba:a2:cd:77:70:cf:df:3f:97:a7:4c:2f:
09:81:3d:23:0c:eb:8b:88:c7:02:e4:65:0d:0b:ea:
9d:08:b0:ca:1f:b9:45:64:40:99:c7:73:c0:4c:63:
86:36:b6:9d:4e:78:24:a4:e4:ad:72:20:16:25:a8:
c1:a0:5a:d6:e6:49:93:ce:ee:61:33:af:d0:06:dc:
68:c5:7a:da:d6:5f:d0:53:9a:bc:0f:76:21:64:ff:
de:7b:b6:57:51:58:36:cd:a2:de:2d:a8:9d:b5:88:
dd:78:10:41:8c:4f:60:e3:3e:7e:83:0c:68:7b:27:
89:ae:ac:5f:ad:43:84:69:51:30:83:4c:56:69:25:
25:c0:48:22:18:63:55:87:79:dd:57:0b:b9:fb:8a:
80:e3:1a:22:76:a6:92:8d:6a:7f:74:14:3c:c2:00:
44:16:9b:dc:01:a4:f5:c4:59:0b:ab:c9:a6:7c:a5:
eb:9c:18:e4:cf:00:42:f6:d1:36:eb:cb:ad:5f:49:
01:fa:80:be:d4:78:75:51:7f:4b:96:9d:40:b9:76:
68:25:0d:0f:20:a9:ee:94:94:51:3f:d0:ae:5e:af:
8b:49:f2:39:17:90:ed:8a:f0:04:62:0c:9c:ce:9c:
af:25:b7:ca:26:c4:5f:06:40:e9:ad:80:75:58:81:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4B:BA:F8:16:51:99:7D:78:88:16:91:20:F3:9C:72:66:09:D7:04
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/o0u6-BZRmX14iBaRIPOccmYJ1wQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
90:5f:8e:16:f4:44:07:91:8e:eb:a7:69:5b:38:4b:89:0f:73:
b1:71:9c:59:93:d0:c1:1c:28:d4:b9:04:ea:66:27:d0:f4:a0:
bd:f5:b4:29:65:05:77:fe:37:a9:48:07:2b:f6:4a:31:3d:55:
ea:8a:a8:fd:ed:32:56:80:c3:31:48:30:96:e6:0f:39:4d:d1:
9f:df:8c:41:09:fe:a7:c1:66:cc:65:ed:12:4d:dc:b0:7a:9f:
08:fd:c8:fb:5f:df:28:e8:03:2f:a4:c5:bf:89:69:f1:f4:68:
44:5b:85:11:7e:62:bc:15:58:ba:2f:0c:75:7d:cc:7d:6b:32:
3f:8c:44:24:81:2c:de:80:91:e0:c0:b9:20:78:f0:e0:bc:dd:
39:cd:8f:8c:e8:77:06:46:d4:57:27:a1:ca:08:c3:12:75:ba:
c9:f7:4a:4f:94:15:83:b4:9e:eb:f8:7c:fc:ab:03:f2:ef:0e:
77:3b:f8:c6:0f:e1:77:06:c2:ef:29:1b:c9:e1:7c:3f:e8:a5:
19:04:37:97:56:c6:44:a4:42:69:e4:b1:24:f9:17:40:f3:44:
79:6d:aa:80:90:44:e2:be:1f:55:77:17:1d:99:c1:19:7b:32:
0a:cc:54:6f:40:5b:61:10:6e:85:c8:fc:10:49:5e:06:bc:92:
c5:97:05:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:14:28 2025 by rpki-client