Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/oeCzl3Xamgk1jwVV3AKBXhTD3OI.roa
File: oeCzl3Xamgk1jwVV3AKBXhTD3OI.roa (raw, json)
Hash identifier: cCYVjgo34EmMBmy/YRp7dhuOjRCuCTn6yhPwIRXruAo=
Subject key identifier: A1:E0:B3:97:75:DA:9A:09:35:8F:05:55:DC:02:81:5E:14:C3:DC:E2
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 262B
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/oeCzl3Xamgk1jwVV3AKBXhTD3OI.roa
Signing time: Fri 13 Jun 2025 13:39:15 +0000
ROA not before: Fri 13 Jun 2025 13:39:15 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9771 (0x262b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 13 13:39:15 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A1E0B39775DA9A09358F0555DC02815E14C3DCE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:d8:66:00:b0:21:95:af:c2:9a:f4:45:26:
2b:e9:e1:e4:45:b5:f2:6b:4c:6b:5d:79:ee:2f:77:
af:54:07:07:c1:11:52:f5:05:e7:a3:96:6b:13:9d:
84:47:67:df:dd:5a:4e:4f:bf:80:5e:0a:f7:1e:c2:
04:bc:8d:27:70:40:0b:24:17:9b:2e:fc:12:b4:4f:
3d:84:91:07:68:42:7a:51:94:85:5a:c6:b8:51:bc:
f3:77:15:86:04:75:72:14:65:f8:e3:8a:9a:76:1b:
18:64:4c:78:a7:ac:a0:b6:4d:98:9c:b3:cf:04:8c:
ee:18:f0:57:6f:4f:2e:1c:36:73:fb:7a:b9:71:75:
88:7f:8a:30:f5:0a:91:1b:b1:e6:da:67:99:85:e5:
99:22:67:4a:51:20:9b:e3:ed:fe:70:ac:fe:7c:a5:
1d:7c:75:74:aa:fb:e9:91:5b:ac:49:28:2f:01:41:
29:7f:ce:77:b9:0e:bc:22:be:d6:2e:76:8f:57:bf:
76:6b:9d:ad:a3:18:af:43:55:46:77:c6:e0:e4:8e:
13:94:fc:3b:5e:aa:d6:7d:c0:6d:90:f2:6b:a5:ad:
62:ae:e2:44:b0:9f:b5:c9:ee:89:19:64:4a:c7:3d:
ad:01:6d:9d:d1:27:5c:3d:06:a0:25:1b:b4:8f:69:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E0:B3:97:75:DA:9A:09:35:8F:05:55:DC:02:81:5E:14:C3:DC:E2
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/oeCzl3Xamgk1jwVV3AKBXhTD3OI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
a6:2d:3f:59:21:d5:49:e1:54:43:20:5a:25:9b:bf:d0:95:fa:
4d:80:bd:7c:84:31:36:a1:b7:90:b4:f4:d2:c0:e0:a8:77:6c:
3a:f8:18:a0:9b:33:37:9f:d7:13:eb:6f:a8:9b:d1:d8:25:2a:
87:89:f9:68:8d:a5:ba:f7:37:d0:4e:fb:c6:54:7e:32:37:33:
12:3d:17:46:81:64:42:82:93:b2:25:9e:af:fa:6f:38:fc:38:
21:8b:27:6f:ad:44:d8:ba:fe:14:4e:eb:4b:37:fc:29:fb:8f:
c8:ef:d0:a3:dc:4c:1b:69:05:61:e2:e3:1b:a3:2c:0c:b9:aa:
17:ee:0f:01:c8:0e:18:98:07:83:48:d9:c4:84:ff:ca:0f:75:
80:39:e4:6e:48:a2:28:df:5e:8f:60:7b:53:f3:a3:68:9c:41:
78:86:be:6b:2a:53:be:d2:03:43:42:f8:30:c2:df:0a:68:9b:
a6:7a:b7:3c:fb:6c:b4:e0:af:00:2d:80:7f:60:5c:83:8b:55:
0c:4c:14:0b:b6:12:70:cc:5c:46:1d:39:1b:d4:8f:13:21:27:
ff:ff:93:ff:48:18:51:0d:a1:ca:a3:45:de:47:c3:65:f5:6c:
1b:0b:ad:17:33:da:31:07:ea:d8:ca:c5:74:19:d9:04:cc:e7:
09:5b:49:13
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICJiswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTMx
MzM5MTVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEExRTBCMzk3NzVEQTlB
MDkzNThGMDU1NURDMDI4MTVFMTRDM0RDRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6HdhmALAhla/CmvRFJivp4eRFtfJrTGtdee4vd69UBwfBEVL1
BeejlmsTnYRHZ9/dWk5Pv4BeCvcewgS8jSdwQAskF5su/BK0Tz2EkQdoQnpRlIVa
xrhRvPN3FYYEdXIUZfjjipp2GxhkTHinrKC2TZics88EjO4Y8FdvTy4cNnP7erlx
dYh/ijD1CpEbsebaZ5mF5ZkiZ0pRIJvj7f5wrP58pR18dXSq++mRW6xJKC8BQSl/
zne5DrwivtYudo9Xv3Zrna2jGK9DVUZ3xuDkjhOU/DteqtZ9wG2Q8mulrWKu4kSw
n7XJ7okZZErHPa0BbZ3RJ1w9BqAlG7SPaeEpAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUoeCzl3Xamgk1jwVV3AKBXhTD3OIwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvb2VDemwzWGFtZ2sx
andWVjNBS0JYaFREM09JLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAKYtP1kh1UnhVEMgWiWbv9CV+k2A
vXyEMTaht5C09NLA4Kh3bDr4GKCbMzef1xPrb6ib0dglKoeJ+WiNpbr3N9BO+8ZU
fjI3MxI9F0aBZEKCk7Ilnq/6bzj8OCGLJ2+tRNi6/hRO60s3/Cn7j8jv0KPcTBtp
BWHi4xujLAy5qhfuDwHIDhiYB4NI2cSE/8oPdYA55G5IoijfXo9ge1Pzo2icQXiG
vmsqU77SA0NC+DDC3wpom6Z6tzz7bLTgrwAtgH9gXIOLVQxMFAu2EnDMXEYdORvU
jxMhJ///k/9IGFENocqjRd5Hw2X1bBsLrRcz2jEH6tjKxXQZ2QTM5wlbSRM=
-----END CERTIFICATE-----
Generated at Sun Jun 22 03:57:29 2025 by rpki-client