Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/DtPTm6PpDtYnWWFPjgLclwBaS_I.roa
File: DtPTm6PpDtYnWWFPjgLclwBaS_I.roa (raw, json)
Hash identifier: 70EwzAaB279R5EBnI61bUz1IjROxJzBjfc3GY8MjoAo=
Subject key identifier: 0E:D3:D3:9B:A3:E9:0E:D6:27:59:61:4F:8E:02:DC:97:00:5A:4B:F2
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 25A1
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/DtPTm6PpDtYnWWFPjgLclwBaS_I.roa
Signing time: Thu 12 Jun 2025 14:39:14 +0000
ROA not before: Thu 12 Jun 2025 14:39:14 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9633 (0x25a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 12 14:39:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0ED3D39BA3E90ED62759614F8E02DC97005A4BF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:d0:da:71:1c:71:70:2e:f7:ab:7b:5c:48:
6d:46:13:c7:be:8a:10:6b:ff:6b:06:88:c2:2e:24:
cc:cd:54:d0:9e:07:b2:a4:94:6b:1f:91:c0:29:d1:
4c:44:b1:a8:68:c8:71:de:b6:69:db:49:8c:50:51:
ce:e2:a6:a9:93:f5:99:0f:09:47:de:83:4d:58:8b:
ee:f1:7c:1d:10:3d:6e:8e:0d:fb:9a:1a:bd:1a:0b:
1a:86:7b:70:fb:4b:0d:60:7c:3b:10:35:ea:2a:c8:
31:b0:ca:f3:97:f2:ce:01:0e:91:de:8c:f7:45:f5:
20:7b:c7:5c:37:d0:43:69:34:a0:76:85:5f:ea:ca:
b1:4a:28:df:8e:aa:f6:d1:44:ec:73:62:dd:f4:cf:
d7:94:c6:0a:d9:5e:fc:c8:1f:65:40:24:c9:2e:85:
4a:62:fb:68:e3:94:4b:5f:d6:3e:08:42:20:17:72:
76:ba:aa:94:5a:ca:48:53:85:68:17:e9:dd:74:2e:
01:43:9b:c2:0a:97:d3:c5:1a:f5:79:bf:78:47:fb:
3c:6d:d8:d5:67:96:67:38:b4:86:ae:27:24:9e:ca:
91:be:0a:b6:2d:b9:95:9c:0b:9b:d8:9c:0d:e9:49:
5b:3e:8e:2b:d6:90:ba:de:a6:36:c3:39:f9:46:02:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D3:D3:9B:A3:E9:0E:D6:27:59:61:4F:8E:02:DC:97:00:5A:4B:F2
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/DtPTm6PpDtYnWWFPjgLclwBaS_I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
32:47:50:46:2e:fc:8b:66:d1:ff:fc:62:6a:39:12:8b:f7:5a:
1a:82:e9:63:4b:61:25:60:69:9b:08:56:b4:64:0f:47:a9:6f:
d7:1b:6c:28:f8:7f:81:5d:96:d5:75:98:89:f6:7e:1c:a9:16:
40:38:74:9c:95:ea:78:7b:41:8a:1d:e2:b2:b1:b6:5b:c9:f0:
22:64:d6:2c:88:b3:f2:15:87:62:79:1f:da:97:01:c6:5f:dc:
61:d9:b1:62:69:14:2b:6b:d8:91:31:2e:bd:1b:d5:fb:dc:80:
99:7d:dc:14:b5:4f:77:a5:52:16:ac:f1:c4:97:97:11:2f:23:
c7:1f:9e:ed:38:33:1e:b3:b1:62:49:1b:e8:55:77:a2:f1:ad:
b6:2e:b8:0b:69:5b:8b:05:c1:02:be:58:ae:21:50:6c:7b:f7:
68:20:c9:5f:fe:a4:82:8e:bb:40:e2:35:e3:7f:20:d1:86:39:
1f:e6:bd:d5:21:6a:c3:4c:54:91:f8:13:c1:27:32:1f:4b:c4:
e2:3e:35:f2:82:02:82:bc:0e:c5:5b:c3:86:be:63:ad:67:ba:
72:44:a8:c5:7f:59:aa:3b:f4:2e:18:43:fb:68:df:d7:9c:21:
9f:d7:ba:5c:4d:d5:a4:bf:09:be:cc:8e:8c:f6:45:f2:07:10:
b9:c2:72:c5
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICJaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTIx
NDM5MTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDBFRDNEMzlCQTNFOTBF
RDYyNzU5NjE0RjhFMDJEQzk3MDA1QTRCRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxH9DacRxxcC73q3tcSG1GE8e+ihBr/2sGiMIuJMzNVNCeB7Kk
lGsfkcAp0UxEsahoyHHetmnbSYxQUc7ipqmT9ZkPCUfeg01Yi+7xfB0QPW6ODfua
Gr0aCxqGe3D7Sw1gfDsQNeoqyDGwyvOX8s4BDpHejPdF9SB7x1w30ENpNKB2hV/q
yrFKKN+OqvbRROxzYt30z9eUxgrZXvzIH2VAJMkuhUpi+2jjlEtf1j4IQiAXcna6
qpRaykhThWgX6d10LgFDm8IKl9PFGvV5v3hH+zxt2NVnlmc4tIauJySeypG+CrYt
uZWcC5vYnA3pSVs+jivWkLrepjbDOflGAmuTAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUDtPTm6PpDtYnWWFPjgLclwBaS/IwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvRHRQVG02UHBEdFlu
V1dGUGpnTGNsd0JhU19JLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBADJHUEYu/Itm0f/8Ymo5Eov3WhqC
6WNLYSVgaZsIVrRkD0epb9cbbCj4f4FdltV1mIn2fhypFkA4dJyV6nh7QYod4rKx
tlvJ8CJk1iyIs/IVh2J5H9qXAcZf3GHZsWJpFCtr2JExLr0b1fvcgJl93BS1T3el
Uhas8cSXlxEvI8cfnu04Mx6zsWJJG+hVd6LxrbYuuAtpW4sFwQK+WK4hUGx792gg
yV/+pIKOu0DiNeN/INGGOR/mvdUhasNMVJH4E8EnMh9LxOI+NfKCAoK8DsVbw4a+
Y61nunJEqMV/Wao79C4YQ/to39ecIZ/XulxN1aS/Cb7Mjoz2RfIHELnCcsU=
-----END CERTIFICATE-----
Generated at Sat Jun 21 15:55:31 2025 by rpki-client