Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/B_lgrmYKH6QS2AT-ZY3Lbbz6TwQ.roa
File: B_lgrmYKH6QS2AT-ZY3Lbbz6TwQ.roa (raw, json)
Hash identifier: mD7Ou2g6CtL49AYaVXS3V+rPRNQnHYJszl9BbHJ2aM0=
Subject key identifier: 07:F9:60:AE:66:0A:1F:A4:12:D8:04:FE:65:8D:CB:6D:BC:FA:4F:04
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1BFE
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/B_lgrmYKH6QS2AT-ZY3Lbbz6TwQ.roa
Signing time: Mon 26 May 2025 11:38:12 +0000
ROA not before: Mon 26 May 2025 11:38:12 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7166 (0x1bfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: May 26 11:38:12 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=07F960AE660A1FA412D804FE658DCB6DBCFA4F04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:bd:58:6a:cd:64:22:80:19:5a:1c:aa:32:
98:75:f0:3d:cb:e0:69:dd:52:81:fb:9c:72:76:48:
ad:17:25:fe:3b:16:20:c9:ca:de:27:7e:9c:6b:44:
7b:4b:46:e3:5b:74:7a:e7:97:0f:38:97:71:b2:60:
39:92:5f:7f:ce:0a:4d:6a:bb:f4:6f:1a:d9:77:9b:
34:4b:a7:e7:7e:68:9a:66:40:34:45:b8:a8:2a:e4:
de:12:67:f0:9f:ab:c2:e4:b6:76:7b:2f:16:a0:53:
da:05:f3:8a:e3:33:f4:1a:6d:94:b0:d9:8a:60:e3:
d3:ce:7b:1d:c6:2c:67:38:27:39:f4:54:63:74:c0:
5a:30:23:7c:d6:46:85:4d:3a:33:15:a3:ea:21:d8:
16:7e:44:84:7c:bf:24:30:50:89:10:5c:de:be:ec:
dd:fe:45:7d:bf:f1:75:69:00:31:29:bf:db:b5:0f:
30:43:34:12:74:0a:6a:f4:a5:4b:57:c6:3b:8d:24:
b7:0c:9b:0e:37:60:a7:63:47:a5:6a:71:17:46:c5:
85:71:cf:b1:44:60:91:e6:a7:56:63:22:13:bd:ee:
53:53:ce:52:4a:0f:6b:39:43:38:5a:a5:f5:af:86:
b4:c5:8f:60:a9:61:2e:d3:1b:75:69:ce:db:6f:bd:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F9:60:AE:66:0A:1F:A4:12:D8:04:FE:65:8D:CB:6D:BC:FA:4F:04
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/B_lgrmYKH6QS2AT-ZY3Lbbz6TwQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
78:e5:b6:45:59:a9:24:ef:a6:0b:c8:69:18:79:47:14:e0:10:
10:1c:d0:c0:9e:46:99:33:04:c0:2b:a8:85:5d:57:a9:7e:7d:
0f:19:48:41:a4:76:e6:c0:50:c4:a2:ac:a5:47:95:3a:ac:c1:
ed:a0:46:f5:41:44:9b:97:5a:25:66:cc:f7:ea:21:db:ee:6e:
9b:09:ea:50:37:17:86:dc:72:ba:c0:35:17:6d:0a:56:21:7d:
a6:b5:ce:d3:10:4d:c5:81:e5:00:7b:45:ff:12:fe:82:ea:17:
56:34:be:63:48:6d:8c:22:44:1e:61:7c:46:a4:3b:0d:c3:65:
f5:f8:90:53:f6:9a:8c:c4:7e:10:2a:b1:e7:00:a3:4c:e5:b3:
a5:3a:70:07:12:65:de:49:ba:45:da:44:d9:19:84:56:9f:aa:
c0:5d:d2:5c:05:8c:60:4a:f0:65:6f:75:bb:45:ce:3f:1c:bf:
16:31:1a:4a:d4:63:9c:ab:3c:b6:a3:75:bb:26:a6:35:d3:aa:
7b:b5:ff:9c:36:52:db:1e:93:a7:b5:17:1a:ab:c8:80:c7:b8:
84:74:4b:58:ee:52:38:e5:5b:ce:26:b5:e8:a0:c4:6f:01:69:
af:9d:40:a9:46:55:16:f3:78:d2:ac:a9:f1:b4:b8:a1:c9:7c:
e0:d9:f0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:23:34 2025 by rpki-client