Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/H510jA4Dd-zBiYO36Ay4MXi0wA8.roa
File: H510jA4Dd-zBiYO36Ay4MXi0wA8.roa (raw, json)
Hash identifier: bngVbEpvESYIcoWdMXhswmUQC0kcIAxFbkMdIELWGVs=
Subject key identifier: 1F:9D:74:8C:0E:03:77:EC:C1:89:83:B7:E8:0C:B8:31:78:B4:C0:0F
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1BF9
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/H510jA4Dd-zBiYO36Ay4MXi0wA8.roa
Signing time: Mon 26 May 2025 10:38:06 +0000
ROA not before: Mon 26 May 2025 10:38:06 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7161 (0x1bf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: May 26 10:38:06 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1F9D748C0E0377ECC18983B7E80CB83178B4C00F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:d1:0a:9d:5c:3a:da:a1:80:a5:98:67:6e:
f8:5a:8c:96:fb:54:b3:d9:1c:e7:2b:e3:7f:c6:71:
d0:b2:0f:64:f4:b9:40:61:57:5b:15:93:20:7c:aa:
1e:e4:4a:c8:ed:db:f1:3e:93:6d:ce:0d:4b:fc:72:
65:62:b1:21:50:b3:d6:06:34:42:a9:90:02:b2:47:
cd:52:a7:e6:50:b3:ad:07:0c:ed:d3:46:38:c7:fc:
8a:9d:73:9f:e8:39:9c:be:f5:b6:d7:e3:cf:e5:7e:
ab:94:ab:6f:57:b1:1c:a0:73:c3:29:46:05:57:ec:
ca:34:c9:9f:c5:21:ac:af:72:ce:a1:92:8f:2b:97:
9d:18:90:3f:56:17:10:67:fd:12:0b:5a:84:05:f4:
a2:4b:22:a9:77:5e:87:12:8c:b6:30:b8:8f:9a:77:
3a:24:83:fe:85:1f:c5:55:c3:7d:b8:4d:1a:f3:ea:
a7:7a:fc:fd:92:3b:18:50:93:77:f7:6c:99:bc:ed:
51:f3:05:d9:8c:15:ab:55:b7:1f:98:c5:87:c9:02:
ab:e7:ef:e1:67:22:98:74:ab:62:3f:c3:d2:be:68:
48:84:9f:0e:d6:ec:ed:d8:78:23:5c:1c:05:25:e2:
48:65:e5:3e:88:c2:0a:6e:6a:4f:b4:fd:f9:2b:39:
87:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9D:74:8C:0E:03:77:EC:C1:89:83:B7:E8:0C:B8:31:78:B4:C0:0F
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/H510jA4Dd-zBiYO36Ay4MXi0wA8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
8e:f8:f9:27:21:34:e2:21:c4:d3:77:87:a7:1a:95:2b:14:eb:
2e:b5:05:e3:51:f2:18:52:ee:e7:5e:73:8e:38:1e:5e:03:7f:
b9:4e:7b:e6:ef:5a:35:28:a2:6e:dc:57:c8:75:0d:08:61:c4:
fb:c8:7a:66:ba:4b:1b:40:26:fb:75:9d:6c:c4:fa:f6:8b:da:
43:36:16:c7:62:56:0a:11:cb:34:74:78:35:19:fd:9d:d5:56:
2a:d8:57:8c:61:9a:80:f4:a1:86:8b:0d:4c:82:fd:7e:74:0e:
75:a2:a6:69:a4:65:7a:45:90:d2:ce:5a:86:ba:5c:c1:89:3d:
d6:ef:69:a1:14:b7:b8:9c:83:5b:3d:01:e5:d2:10:41:60:3b:
09:94:bf:0b:78:66:a2:30:9d:b6:f9:ee:bf:56:a2:30:40:cc:
42:5a:ef:b2:f5:da:d4:3a:2d:95:2f:f8:9d:ef:6b:84:27:f8:
b9:d8:e2:34:94:b7:e5:e9:38:50:c7:48:37:24:c2:5a:96:f1:
8d:82:f7:22:5f:fc:f6:42:11:fb:38:b0:11:50:7b:b7:76:88:
2d:73:5c:14:cb:22:dd:00:2a:9c:3f:57:ab:80:e5:45:96:8d:
f4:e0:c1:4f:35:de:b2:02:17:7a:c4:16:a1:15:e7:fe:83:70:
da:d0:f0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:52:43 2025 by rpki-client