Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/2lFY-FcvG8fHqg985nso5jHm8ZM.roa
File: 2lFY-FcvG8fHqg985nso5jHm8ZM.roa (raw, json)
Hash identifier: 809AbDoIOnGCVT+bBB+E656bO4PZwX1duTGKyU999kE=
Subject key identifier: DA:51:58:F8:57:2F:1B:C7:C7:AA:0F:7C:E6:7B:28:E6:31:E6:F1:93
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2646
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/2lFY-FcvG8fHqg985nso5jHm8ZM.roa
Signing time: Fri 13 Jun 2025 18:09:15 +0000
ROA not before: Fri 13 Jun 2025 18:09:15 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9798 (0x2646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 13 18:09:15 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DA5158F8572F1BC7C7AA0F7CE67B28E631E6F193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:b5:98:00:b6:b3:cc:73:6d:7c:9d:9e:1c:
a5:c7:3a:af:1b:61:a1:18:ce:20:44:10:12:37:19:
f2:3b:91:12:86:f1:bc:36:9b:0a:9c:0f:ad:92:09:
e6:95:5c:6f:e4:ae:d7:14:a9:25:19:63:14:1c:b7:
d8:83:2e:33:64:d9:33:c9:31:da:74:db:78:d8:72:
ba:f8:6e:0b:e1:28:61:88:c4:e0:de:d8:0f:16:d4:
27:22:bf:0f:1b:0c:a5:b4:f3:43:8e:0b:fe:4d:83:
6b:6f:a4:cf:49:7f:0b:8c:2e:f8:3e:cf:d7:80:2a:
03:5c:74:aa:09:1c:2b:49:a1:81:94:a0:49:4f:d2:
ac:0a:f1:ae:ed:08:a4:a9:e3:e8:2d:07:4c:07:03:
1d:eb:38:17:ca:1c:7a:c6:34:6b:0d:c4:cc:bf:ca:
e8:04:37:9f:da:21:92:f3:11:85:17:3f:d7:80:a8:
74:2c:49:98:da:80:10:4d:3f:bf:d8:8d:0d:f1:2c:
35:c6:d7:d7:d6:0c:53:cc:35:8c:4b:8e:96:dc:b9:
e7:8e:80:fe:0e:01:43:b1:9c:53:c3:ba:3f:93:07:
5e:27:0b:41:c9:5b:3f:64:80:97:36:45:4a:24:9c:
6b:38:78:6f:b2:58:dc:ac:c2:04:dc:e2:90:27:ec:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:51:58:F8:57:2F:1B:C7:C7:AA:0F:7C:E6:7B:28:E6:31:E6:F1:93
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/2lFY-FcvG8fHqg985nso5jHm8ZM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
a6:87:8c:00:73:64:d6:9a:4d:e6:98:c4:21:ed:0f:d4:9e:39:
8b:53:7c:08:cc:8a:48:4d:99:47:ab:ea:ec:19:da:34:7c:1b:
2b:1a:07:23:2f:16:4c:87:41:8c:97:f7:57:05:ce:84:23:db:
4e:bf:13:2e:86:f9:fa:d8:01:80:d4:07:d5:0f:90:c6:1a:fc:
4a:8c:86:8f:87:75:ab:50:ef:ae:17:64:53:7f:93:24:4e:be:
c9:cd:21:32:72:a5:ac:ff:92:19:68:07:4f:75:44:ce:21:d4:
2d:d8:1f:4a:2f:71:65:f7:41:af:c8:1e:88:21:51:80:dd:08:
8a:d1:06:ed:06:55:ac:cc:65:7a:ab:7c:38:58:56:52:0d:6d:
01:ea:93:db:a7:b3:92:00:d0:70:db:bc:29:61:47:54:6e:7c:
f8:b1:68:2c:5e:48:f2:24:93:a2:22:5f:c9:cb:8e:8c:79:84:
27:25:5e:8d:84:0a:10:b0:09:98:0b:8a:4a:e2:ca:81:20:77:
d0:3a:e6:95:5f:98:1f:29:80:29:b9:4a:db:78:26:6d:e0:bf:
23:47:a9:b2:aa:2d:28:36:70:74:d4:57:e2:30:a0:33:cc:c7:
9c:72:d7:5e:6c:82:2c:b8:b6:f8:ef:df:85:f7:95:14:fd:da:
f1:2d:21:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:06:05 2025 by rpki-client