Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/EudZ8TKd1mtM5tk4weUuieTtaOE.roa
File: EudZ8TKd1mtM5tk4weUuieTtaOE.roa (raw, json)
Hash identifier: 4SXlUAjGiEMUzUf0TysrXED4m6rGlbt+skSIgI+1H8k=
Subject key identifier: 12:E7:59:F1:32:9D:D6:6B:4C:E6:D9:38:C1:E5:2E:89:E4:ED:68:E1
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 6E96
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/EudZ8TKd1mtM5tk4weUuieTtaOE.roa
Signing time: Mon 20 Oct 2025 19:05:40 +0000
ROA not before: Mon 20 Oct 2025 19:05:40 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28310 (0x6e96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Oct 20 19:05:40 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=12E759F1329DD66B4CE6D938C1E52E89E4ED68E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:f5:18:e4:1a:74:be:06:c2:04:3e:8e:6d:
bc:76:d1:03:03:94:76:60:ae:85:d1:6a:e4:3f:e5:
00:bb:06:bf:09:d9:fc:26:68:20:19:96:f0:0a:ec:
8f:d6:5d:16:1b:23:65:f6:ee:15:bd:33:d2:c6:6e:
9d:98:15:89:c0:6c:8d:8b:9c:f6:5b:72:ae:c6:3a:
02:62:ea:e1:7a:7d:44:eb:e3:20:52:24:d2:27:c1:
6e:dc:79:23:da:b2:95:73:98:3f:97:1f:a8:57:35:
9a:54:b3:38:f1:fb:ee:fb:d3:c5:cc:6a:83:d5:89:
c5:ec:f5:02:02:aa:3f:7f:65:47:1d:43:f9:07:e1:
6a:b7:0c:c8:df:ac:92:7e:2f:f6:90:2e:2b:f2:c6:
2d:ee:e2:12:90:f8:2b:55:4d:79:0a:a1:0e:dc:dd:
2a:89:a0:37:73:83:98:8b:16:dc:a1:fa:f2:a0:01:
25:51:c1:06:5b:89:20:12:ca:34:58:df:37:29:8c:
38:a0:a9:95:d3:94:97:dc:ff:17:76:30:99:a6:9b:
9f:8f:89:78:50:94:cd:76:22:12:3b:b0:ce:ff:4d:
9a:03:f4:41:fa:a8:e0:a4:67:83:88:2a:0c:c4:69:
d7:a9:5c:01:79:54:ee:a4:91:49:0d:80:9e:3d:08:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E7:59:F1:32:9D:D6:6B:4C:E6:D9:38:C1:E5:2E:89:E4:ED:68:E1
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/EudZ8TKd1mtM5tk4weUuieTtaOE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
4a:86:66:e0:e4:10:07:43:8d:fa:0e:45:da:58:a8:2e:1e:1f:
dc:32:88:b5:f8:2e:ac:fb:a0:b3:5f:b7:f5:41:ac:bd:c0:c1:
70:90:1c:46:07:c2:ef:a3:57:b9:b7:0b:0f:6e:7b:b1:36:ff:
4a:8b:f6:65:53:7a:11:0d:a0:11:6f:3a:c8:49:56:1a:f2:eb:
a7:80:d4:92:76:07:d3:ea:4d:8e:22:e6:63:10:47:a6:aa:38:
f5:96:8d:85:8f:56:c6:54:d4:57:bb:a6:1d:f7:92:03:23:69:
f0:92:08:dd:70:22:40:3a:32:96:f1:05:cb:b0:ca:4c:46:01:
47:7f:7e:d4:98:4e:8c:af:3a:b3:ae:e2:b1:05:2b:82:1a:5c:
d4:02:fc:7c:85:ea:39:f6:f4:81:61:04:85:46:80:2c:bb:e1:
e5:bf:35:03:8a:72:82:84:6f:29:ba:f4:4a:4c:11:9c:ef:b3:
aa:17:d1:65:ff:22:a7:18:91:ad:57:79:e4:0d:ec:05:1f:35:
ee:ab:ed:e1:a1:af:64:e2:f3:39:3f:c0:16:5d:f3:d3:4c:18:
8f:f3:9b:64:f5:80:da:78:50:26:88:43:f8:20:a4:b1:39:9c:
6a:c6:56:7d:b9:c9:9b:03:3f:4b:5a:09:0e:15:2a:a9:6a:23:
c9:65:a1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:19:55 2025 by rpki-client