Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/72zTF9hLhX9xB-7dIvbe-yooCLk.roa
File: 72zTF9hLhX9xB-7dIvbe-yooCLk.roa (raw, json)
Hash identifier: yu7/c8Z9ItQG5wdj06w4eR9euDvEcY4LX8qR1sZjatE=
Subject key identifier: EF:6C:D3:17:D8:4B:85:7F:71:07:EE:DD:22:F6:DE:FB:2A:28:08:B9
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 244D
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/72zTF9hLhX9xB-7dIvbe-yooCLk.roa
Signing time: Tue 10 Jun 2025 06:09:03 +0000
ROA not before: Tue 10 Jun 2025 06:09:03 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9293 (0x244d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 10 06:09:03 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EF6CD317D84B857F7107EEDD22F6DEFB2A2808B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6d:10:81:4f:2c:84:86:05:b4:de:8d:e5:18:
0d:0b:43:f6:c5:1a:71:11:00:83:ef:a5:87:3a:d6:
80:fc:80:4a:8b:d1:9d:37:89:a7:8e:41:8e:31:e0:
43:1c:3f:cb:88:6b:a5:7e:e8:1e:9c:74:7c:f7:b4:
d4:52:55:6f:b1:c0:b1:d6:47:d4:ad:23:fd:f5:67:
96:94:43:ca:4f:52:d4:7c:8a:a0:77:a4:23:c6:00:
77:64:73:04:6b:c4:2e:be:80:7f:8b:ec:02:c9:6f:
90:29:26:52:fb:bb:f3:df:da:a5:08:f7:fa:c0:7b:
36:ea:6b:00:d3:47:06:de:6e:df:04:24:dd:ec:6b:
9c:dc:d0:e8:6b:ed:bc:64:4c:2f:67:d2:2c:b3:eb:
52:92:9b:08:29:8f:8d:10:73:18:61:b8:7a:29:3f:
0b:62:80:f0:a5:02:c2:49:6f:ae:84:80:41:a0:ee:
63:29:15:da:7b:53:fb:3e:09:93:4c:8d:55:7f:d5:
21:16:68:66:eb:c9:31:15:dd:44:72:32:4a:3e:dc:
16:7d:64:5d:cb:2e:ae:0f:a8:ac:4d:f5:c9:34:e0:
28:48:ab:a2:13:b0:23:2f:43:2c:2f:f0:18:a9:ad:
76:f0:e7:18:38:9e:3d:0f:34:72:a3:2e:2c:6e:a3:
43:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6C:D3:17:D8:4B:85:7F:71:07:EE:DD:22:F6:DE:FB:2A:28:08:B9
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/72zTF9hLhX9xB-7dIvbe-yooCLk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
75:0c:2a:42:bb:34:5d:2f:ee:52:1c:1a:91:22:22:d4:01:33:
22:25:10:99:91:7b:fb:59:e8:1e:a5:d8:e0:06:7d:bf:80:3c:
cc:13:d0:a3:12:0f:f9:60:a7:1b:83:61:9a:e4:32:a6:dd:e1:
74:b6:8a:6a:8a:ca:24:b7:59:42:0e:d9:8b:4f:e2:a8:d7:51:
e0:f1:ec:1e:00:7e:7d:ea:8e:29:bb:b3:a9:28:c0:85:5c:00:
11:52:ed:2a:51:03:0e:cd:da:08:9c:6a:8f:00:36:30:6e:df:
15:dd:90:8f:bc:0a:a7:69:48:9c:79:80:d1:32:c4:da:ed:f2:
fa:cb:5c:d5:df:2d:14:3a:79:14:fd:50:0b:fe:6c:8b:f1:77:
e6:c9:59:72:71:83:aa:82:d7:d1:9e:2c:2e:62:3b:55:d6:15:
56:ef:68:bd:c9:a1:c4:18:db:83:4b:f6:0f:be:e3:ed:a5:13:
64:82:c8:7f:6e:d4:7a:c6:95:e7:24:38:7a:e4:da:e8:aa:db:
54:02:29:2a:d9:7a:6e:75:24:5d:e6:c5:a3:0b:04:08:fa:05:
bb:e4:6d:65:a9:31:ea:15:2c:22:8b:00:d3:81:9c:05:b0:06:
a2:5a:df:d0:4b:de:08:b1:6d:8c:e8:0e:3b:3b:eb:33:7f:d7:
a8:b4:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 22:55:51 2025 by rpki-client