Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/5e6QK_PWCr5It-o0GiscETSaj5Y.roa
File: 5e6QK_PWCr5It-o0GiscETSaj5Y.roa (raw, json)
Hash identifier: 4bh8pzE4sMvsGLNYYMSs+w5w43zuUMjsI8aQ1ShEIhw=
Subject key identifier: E5:EE:90:2B:F3:D6:0A:BE:48:B7:EA:34:1A:2B:1C:11:34:9A:8F:96
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 21B6
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/5e6QK_PWCr5It-o0GiscETSaj5Y.roa
Signing time: Thu 05 Jun 2025 15:38:49 +0000
ROA not before: Thu 05 Jun 2025 15:38:49 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8630 (0x21b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 5 15:38:49 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E5EE902BF3D60ABE48B7EA341A2B1C11349A8F96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:db:c5:f9:08:c4:d1:9e:f1:c0:a1:0c:16:
4b:1c:79:ab:03:aa:6e:5a:71:8e:f3:8f:6d:69:20:
ff:8e:fa:bb:0d:d0:cb:b7:b1:30:42:84:32:8a:82:
5e:4f:4d:ed:9b:eb:af:b3:b3:dc:ee:34:75:ba:ac:
b1:68:eb:27:27:55:1d:9d:84:55:81:93:68:ad:86:
f1:32:86:c2:5e:1b:bf:44:bc:b3:cd:37:a9:11:c7:
09:f0:f0:e8:11:93:dd:4a:74:b5:c9:b6:45:19:10:
a4:ec:65:17:9d:ff:01:36:38:9a:83:15:77:c0:98:
0a:3a:05:0e:3d:3d:3c:fb:a9:34:3a:9c:4b:a8:5c:
5c:ef:8c:ec:86:2f:94:47:51:a5:4f:cf:a3:ef:60:
e0:29:7d:39:e1:d6:3e:23:5c:51:80:b0:bf:0d:39:
16:bb:de:29:5c:10:d2:e7:cf:c5:bd:ca:0f:4a:31:
90:d1:4b:11:ed:c2:ba:5f:07:f0:f0:09:3c:0f:f9:
80:3b:78:66:20:2a:f9:75:a9:fc:75:cd:00:4d:04:
e5:0c:d4:cf:60:ea:51:3c:59:39:52:12:0d:a9:96:
48:89:8a:9f:c7:e0:81:52:c5:49:1a:51:a1:e5:45:
12:b8:2e:a2:41:33:6b:3f:88:e9:38:82:b5:82:04:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EE:90:2B:F3:D6:0A:BE:48:B7:EA:34:1A:2B:1C:11:34:9A:8F:96
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/5e6QK_PWCr5It-o0GiscETSaj5Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
5b:31:c8:e9:c9:f9:71:ba:81:5f:1e:0e:db:52:79:12:d5:f4:
30:5e:b0:8a:30:7f:fa:55:77:59:27:e0:b8:36:80:82:be:27:
99:e6:b1:94:5e:4b:9d:9c:e9:0c:a6:7a:cd:4c:e5:03:f0:b3:
ac:bd:26:c9:02:4c:11:15:cb:7c:f2:3c:d0:a1:c7:87:af:52:
1a:a1:2e:76:e5:42:89:2c:55:07:c3:28:77:68:9d:51:ad:b5:
b4:fe:df:1c:6c:06:7f:37:5c:6e:01:2d:2d:9c:3f:3d:6a:a8:
bb:31:57:13:b0:1a:df:20:75:2a:88:02:d0:c1:cf:50:b6:58:
bd:fd:67:16:1e:f6:aa:7e:f6:75:a6:39:56:d2:15:9c:e8:66:
1d:b8:ec:06:b1:66:9c:6d:8d:fd:58:23:c9:6d:14:89:ff:4a:
da:9f:2a:97:33:c1:14:17:c6:29:eb:38:25:03:b1:b4:cc:e2:
f7:9e:23:9f:aa:79:ca:bf:1c:8d:16:a6:07:fd:86:dd:a6:ba:
c3:6b:0f:03:8d:a2:0b:5a:d0:60:c4:15:af:44:ba:9a:bf:06:
b4:01:44:47:9c:4b:06:2f:2a:07:c8:37:d6:22:e6:1e:c7:4d:
4f:9c:93:77:d9:c5:47:d7:a0:62:c0:df:de:25:e3:fd:36:5c:
54:58:a6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 13:42:37 2025 by rpki-client