Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/ogK6FO7c4tkuzndHnxmkrp1nHi8.roa
File: ogK6FO7c4tkuzndHnxmkrp1nHi8.roa (raw, json)
Hash identifier: O+0PBXvXgH8DxlTDmPbw0dX7o/NNWpvdsKaQWK0iPK8=
Subject key identifier: A2:02:BA:14:EE:DC:E2:D9:2E:CE:77:47:9F:19:A4:AE:9D:67:1E:2F
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2072
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/ogK6FO7c4tkuzndHnxmkrp1nHi8.roa
Signing time: Tue 03 Jun 2025 09:38:39 +0000
ROA not before: Tue 03 Jun 2025 09:38:39 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8306 (0x2072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 3 09:38:39 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A202BA14EEDCE2D92ECE77479F19A4AE9D671E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:9d:eb:cf:e9:51:a3:d5:65:6c:b5:ff:83:
b8:a7:59:a8:1b:ad:4c:ab:aa:81:5c:ad:16:12:88:
bc:de:51:b4:0a:b7:82:0a:0c:90:cd:a4:81:49:f6:
39:0f:a0:c2:75:e4:a4:db:34:8d:29:3f:f1:f4:8f:
4a:37:85:ad:da:08:cf:c2:10:98:c5:81:b3:83:f1:
23:31:84:2e:a7:a2:02:69:7c:a8:c4:fc:a2:99:d1:
82:e2:5c:75:52:b5:55:e5:af:5a:c5:49:98:42:8e:
94:92:48:25:97:25:33:d4:1a:e6:e0:bf:a7:48:69:
bb:9f:58:12:e6:9b:ef:6d:92:4b:d1:d1:cf:00:c2:
f0:b1:bc:85:4b:ab:29:be:80:58:2d:f6:97:79:6e:
cf:6a:08:d2:ac:07:73:b3:6b:b5:5e:51:bc:dc:76:
5f:2b:42:ce:ba:d9:ef:69:0d:53:a5:8e:ff:8d:48:
86:2a:5a:02:cb:83:6c:4c:b7:48:4b:10:b9:d6:d5:
19:4c:5b:56:53:f5:8d:39:07:73:71:2e:b9:91:5a:
b6:2d:2d:12:14:6a:db:70:e8:ae:9b:11:a7:5f:cf:
37:0c:06:a0:ba:ac:08:6f:8c:6f:27:42:57:2f:60:
12:9f:d0:88:1c:ec:46:57:fd:fc:0d:23:35:aa:a0:
41:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:02:BA:14:EE:DC:E2:D9:2E:CE:77:47:9F:19:A4:AE:9D:67:1E:2F
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/ogK6FO7c4tkuzndHnxmkrp1nHi8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
2d:72:ab:88:15:66:e9:1e:cb:d4:b1:26:df:5c:c5:a8:d0:f7:
bb:75:f8:0e:fd:43:df:ba:7d:7e:71:a7:e6:6c:f3:b3:cd:d5:
32:a6:13:78:ef:ee:41:04:56:64:69:5f:88:75:00:82:04:91:
9e:61:c1:53:db:dd:8c:51:75:aa:25:13:09:03:04:f2:ec:8e:
f4:f3:06:c6:a2:e4:96:b6:c0:29:05:33:f5:b0:1b:c8:12:2f:
31:2b:11:4f:2b:d5:88:00:84:be:6e:6a:d4:f6:21:78:b2:26:
61:4c:7f:04:33:be:53:cf:24:77:4a:66:b1:89:4d:57:be:5c:
7b:94:69:a8:68:a7:90:74:a3:f5:b3:ad:f8:d8:72:4a:e4:48:
be:87:6f:54:19:76:97:ef:4e:48:18:0f:3d:cc:3f:81:14:0d:
ac:f7:55:2b:7a:39:59:3f:e8:dd:01:08:b8:3f:eb:8a:97:95:
3b:13:2e:c8:de:1a:86:62:8d:a7:75:28:03:b0:b8:ef:c7:6d:
55:58:31:ba:23:9b:5e:59:ae:7e:88:e8:45:86:97:69:f8:bd:
13:12:93:60:44:46:32:97:25:ec:b4:f8:6a:be:3e:3b:ba:63:
4b:6c:17:9e:c7:98:ce:c5:8c:56:0a:a8:c6:22:00:61:ab:ea:
23:55:ce:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 14:44:07 2025 by rpki-client