Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/EtCesDlkWqSlUUjCULXxqi1bpQE.roa
File: EtCesDlkWqSlUUjCULXxqi1bpQE.roa (raw, json)
Hash identifier: 41/+oTlwMhy2TxWIOO7NJ/MJ5s7Ir31DVo8Fm74Pk3c=
Subject key identifier: 12:D0:9E:B0:39:64:5A:A4:A5:51:48:C2:50:B5:F1:AA:2D:5B:A5:01
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 20A2
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/EtCesDlkWqSlUUjCULXxqi1bpQE.roa
Signing time: Tue 03 Jun 2025 17:38:40 +0000
ROA not before: Tue 03 Jun 2025 17:38:40 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8354 (0x20a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 3 17:38:40 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=12D09EB039645AA4A55148C250B5F1AA2D5BA501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:2e:45:d5:d8:da:7e:f7:6e:22:d6:36:64:
36:ad:1d:1e:e5:9f:81:68:21:3e:bf:e0:a2:04:19:
0b:07:b2:b9:63:31:b5:4b:ab:9d:d0:b2:b8:84:2f:
0b:6b:f5:cd:e5:58:d0:66:c0:de:03:53:7c:e4:73:
d9:d0:96:5d:37:ce:78:64:94:00:4f:6b:5b:fe:21:
ac:e0:01:00:59:ab:a9:ba:48:65:9f:0e:b3:e7:9a:
76:00:6a:f0:35:7c:4c:a0:ea:5b:d2:26:70:25:31:
88:91:95:53:b3:6b:79:c4:0d:1a:b1:b4:0d:f6:8f:
4a:47:21:d1:0f:ec:60:64:dd:cf:40:a2:62:ab:07:
ac:7c:6a:52:69:85:9a:60:f4:e7:9e:c3:0e:19:c6:
09:71:59:33:67:65:57:54:ac:06:11:d1:b3:08:56:
be:f6:19:6a:47:3a:0e:be:8c:78:b6:6f:e5:bf:26:
f4:db:a6:8a:4d:9e:8b:fe:9a:20:27:e5:b2:80:db:
cb:da:84:b3:a3:19:09:4f:ff:33:b0:a4:64:16:4d:
57:12:98:89:d5:be:b0:50:5e:79:34:d0:08:55:dc:
73:3a:96:d2:88:6a:cf:89:02:ce:7a:2f:d5:31:07:
36:c7:6a:1e:f3:67:64:97:62:e5:78:3a:e3:45:fc:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D0:9E:B0:39:64:5A:A4:A5:51:48:C2:50:B5:F1:AA:2D:5B:A5:01
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/EtCesDlkWqSlUUjCULXxqi1bpQE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
1e:bd:03:a9:26:ca:4b:f7:f9:53:bd:38:a7:e7:2a:60:fc:c4:
75:0b:e6:e7:43:41:34:cf:fd:f4:ea:f3:59:16:88:a2:9c:89:
c2:44:67:a1:4d:ee:ea:b8:22:88:ed:64:ae:e4:e4:77:67:21:
d0:74:2f:2c:b7:f8:ae:3c:e1:62:3b:0c:b2:ce:0c:7a:97:03:
a1:6e:09:2b:43:b2:bb:b1:6e:fd:8a:07:c0:24:bf:7f:51:dc:
59:f7:82:e1:0c:e1:42:83:f2:59:a9:c8:2c:27:b2:87:06:7b:
3f:d9:85:6c:89:b9:eb:bf:78:5e:67:14:a0:a4:f8:ba:ec:5b:
ae:28:7c:ef:10:d8:35:69:3a:64:67:f1:a3:81:01:ae:4f:87:
37:e3:d0:b2:56:a8:8e:d2:9e:ce:10:12:0f:ef:6a:0b:86:13:
5b:0d:3d:f6:93:20:a1:4c:df:97:31:81:08:04:a6:05:d6:de:
3d:c1:52:76:30:af:4c:b9:0c:01:dc:ed:32:65:17:7d:82:f3:
6f:f4:d3:94:26:43:c7:5c:11:db:4b:9c:25:3a:5b:b6:7a:30:
f9:de:cd:2a:86:c9:9e:d3:b4:81:34:66:7f:15:2b:6f:2e:96:
7c:0a:6f:ce:67:8a:ca:a7:34:dc:59:72:d6:9b:fe:46:e0:60:
29:2c:07:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 22:37:09 2025 by rpki-client