Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/Ab5hPnKANL70TbR09063f7gre8M.roa
File: Ab5hPnKANL70TbR09063f7gre8M.roa (raw, json)
Hash identifier: 0kZaZUGvNof6Bdm2zt1XORhbpth8qUf+IK47wOSlfd0=
Subject key identifier: 01:BE:61:3E:72:80:34:BE:F4:4D:B4:74:F7:4E:B7:7F:B8:2B:7B:C3
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2328
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Ab5hPnKANL70TbR09063f7gre8M.roa
Signing time: Sun 08 Jun 2025 05:08:54 +0000
ROA not before: Sun 08 Jun 2025 05:08:54 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9000 (0x2328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 8 05:08:54 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=01BE613E728034BEF44DB474F74EB77FB82B7BC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:15:06:0e:5d:7a:b5:12:96:f9:e9:7a:4d:e8:
b2:ee:e3:5f:3e:06:1f:43:9d:bf:a0:a2:2a:84:a5:
c6:eb:58:93:95:b8:28:74:b0:fa:d2:40:f4:7a:75:
3f:1a:12:96:16:4f:9b:6e:1f:a5:6b:7d:7d:f0:85:
dc:4d:5b:65:dd:c1:91:64:41:ef:39:39:1d:4c:9d:
b3:dc:b1:88:cd:01:17:d4:19:b9:e2:9b:3a:44:09:
d9:8c:16:78:49:be:56:63:82:d5:28:5c:ea:63:05:
59:9b:15:eb:14:0e:85:1b:9e:9a:ff:a5:6b:2e:16:
69:c6:04:e2:dc:a1:18:a6:33:b4:5a:20:e8:3e:a5:
d3:73:c2:4f:9a:4e:22:f1:a9:45:2e:bd:e2:11:ef:
f2:7e:9f:c8:58:33:99:46:16:a8:6e:62:5d:cc:a7:
57:26:b6:dc:e0:97:c0:ec:88:a8:f5:5f:70:cb:9f:
22:61:b6:76:fb:7e:d0:2a:4a:76:47:1a:de:08:ff:
60:91:ed:a4:a3:6b:18:3b:76:de:05:ba:d0:de:27:
95:65:0b:ac:f1:49:e6:c6:2a:b9:fa:f7:49:e8:c0:
e9:07:52:1b:43:71:30:1a:9c:40:87:f7:3b:2a:79:
88:d9:e1:68:2c:68:64:0a:d5:2b:eb:52:4d:a8:69:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BE:61:3E:72:80:34:BE:F4:4D:B4:74:F7:4E:B7:7F:B8:2B:7B:C3
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Ab5hPnKANL70TbR09063f7gre8M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
42:73:4d:6f:e1:78:c8:e5:1d:31:b6:b0:98:ad:14:0a:a6:79:
90:19:b7:c2:df:51:b5:70:ac:99:69:61:0f:dc:b4:45:ec:67:
c9:35:47:06:08:4d:5a:b0:70:51:26:89:75:28:da:f8:5f:26:
a1:60:30:c5:a3:89:33:05:11:38:38:60:e5:b0:fd:13:3a:40:
b7:07:d9:fb:82:49:cb:81:6a:3b:30:82:86:54:76:67:29:1b:
68:6e:32:58:e3:a7:05:74:08:f3:52:a4:59:4c:df:b6:c7:21:
76:6e:77:f8:a2:35:b5:2a:6b:67:78:6b:4e:a8:ee:09:0c:f2:
73:c3:73:48:0d:d5:92:e1:bf:32:39:9e:b9:fc:af:7c:0f:fc:
cd:48:57:8b:9a:1d:dd:33:6d:3f:55:4b:07:3f:8b:f0:3c:c0:
da:d2:af:bc:a3:4f:05:76:01:1f:c9:5e:bc:d2:3d:80:39:d4:
3e:53:2c:20:14:30:b6:d2:80:59:37:95:06:a4:9a:58:15:74:
29:df:0a:2e:8b:d2:57:8b:97:e0:ea:97:f8:70:00:49:5c:75:
15:be:ab:90:70:82:34:0d:43:fc:54:1f:df:dc:20:71:5f:d6:
af:c2:68:51:36:1a:38:ba:40:6f:81:ff:50:d3:ac:57:84:ce:
75:7f:73:75
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICIygwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDgw
NTA4NTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDAxQkU2MTNFNzI4MDM0
QkVGNDREQjQ3NEY3NEVCNzdGQjgyQjdCQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgFQYOXXq1Epb56XpN6LLu418+Bh9Dnb+goiqEpcbrWJOVuCh0
sPrSQPR6dT8aEpYWT5tuH6VrfX3whdxNW2XdwZFkQe85OR1MnbPcsYjNARfUGbni
mzpECdmMFnhJvlZjgtUoXOpjBVmbFesUDoUbnpr/pWsuFmnGBOLcoRimM7RaIOg+
pdNzwk+aTiLxqUUuveIR7/J+n8hYM5lGFqhuYl3Mp1cmttzgl8DsiKj1X3DLnyJh
tnb7ftAqSnZHGt4I/2CR7aSjaxg7dt4FutDeJ5VlC6zxSebGKrn690nowOkHUhtD
cTAanECH9zsqeYjZ4WgsaGQK1SvrUk2oaYZRAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUAb5hPnKANL70TbR09063f7gre8MwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvQWI1aFBuS0FOTDcw
VGJSMDkwNjNmN2dyZThNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAEJzTW/heMjlHTG2sJitFAqmeZAZ
t8LfUbVwrJlpYQ/ctEXsZ8k1RwYITVqwcFEmiXUo2vhfJqFgMMWjiTMFETg4YOWw
/RM6QLcH2fuCScuBajswgoZUdmcpG2huMljjpwV0CPNSpFlM37bHIXZud/iiNbUq
a2d4a06o7gkM8nPDc0gN1ZLhvzI5nrn8r3wP/M1IV4uaHd0zbT9VSwc/i/A8wNrS
r7yjTwV2AR/JXrzSPYA51D5TLCAUMLbSgFk3lQakmlgVdCnfCi6L0leLl+Dql/hw
AElcdRW+q5BwgjQNQ/xUH9/cIHFf1q/CaFE2Gji6QG+B/1DTrFeEznV/c3U=
-----END CERTIFICATE-----
Generated at Sat Jun 21 20:03:19 2025 by rpki-client