Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/H_dwx4hnSF-F--JKcEHczTr7aXE.roa
File: H_dwx4hnSF-F--JKcEHczTr7aXE.roa (raw, json)
Hash identifier: ZIfgxbWLFMmYeVKOrhB/CGnoFw16HQFkBn/RukTq7wQ=
Subject key identifier: 1F:F7:70:C7:88:67:48:5F:85:FB:E2:4A:70:41:DC:CD:3A:FB:69:71
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1EC8
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/H_dwx4hnSF-F--JKcEHczTr7aXE.roa
Signing time: Sat 31 May 2025 10:38:28 +0000
ROA not before: Sat 31 May 2025 10:38:28 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7880 (0x1ec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: May 31 10:38:28 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1FF770C78867485F85FBE24A7041DCCD3AFB6971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:d9:73:01:dc:23:8a:56:23:60:24:5e:c5:
29:83:e8:80:72:da:cc:4a:7c:74:32:1d:a0:36:61:
2d:be:d8:62:6c:d0:5d:3c:fa:65:d0:46:a4:3f:8a:
d6:2c:22:1e:42:11:51:0c:98:fc:2f:fe:82:eb:82:
14:4b:04:7f:5e:fc:1f:12:9d:3b:5a:ef:fb:ee:d2:
e7:e2:e7:82:03:14:f8:39:d7:35:91:f7:c0:44:06:
70:94:42:e5:f8:c6:36:6c:75:6b:5e:14:5d:fc:61:
37:9c:cb:6e:da:f4:97:23:a7:03:8e:f5:5c:fa:09:
27:39:bd:f3:a4:9a:db:d7:ff:75:ff:ab:e6:9d:06:
d6:2e:0c:12:ca:be:5a:c7:26:74:c5:5b:61:d9:4d:
06:ed:78:71:8b:1f:a3:5c:ed:49:03:0a:ab:7f:50:
a2:71:b5:4c:26:d5:ac:ca:32:f1:38:f1:dc:80:9d:
a3:20:16:d6:0e:f1:bc:fa:32:88:eb:8f:1c:72:78:
e1:b5:92:f8:2c:69:f0:3e:c2:82:6e:c0:0c:d7:b7:
cc:0c:5b:67:e5:7f:41:a3:a8:3d:fd:b1:85:fb:7a:
2b:8b:30:dc:28:92:ba:e4:23:af:ab:00:bd:b1:61:
2c:5c:da:88:e8:5e:f9:4f:f0:1f:09:ee:62:b3:97:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F7:70:C7:88:67:48:5F:85:FB:E2:4A:70:41:DC:CD:3A:FB:69:71
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/H_dwx4hnSF-F--JKcEHczTr7aXE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
4a:5f:0e:03:b6:67:36:a6:ef:4c:44:d3:51:32:e6:61:e8:90:
6a:77:eb:b0:d5:05:12:f5:f7:25:9d:85:83:12:8f:ee:80:eb:
a2:64:ba:a3:bc:e9:ca:45:99:5f:7b:f7:52:a2:fb:15:c6:00:
5f:c5:f6:ab:73:b3:2c:49:af:4a:42:51:ab:04:c2:24:2a:82:
36:41:7f:33:82:b3:9c:92:3b:a5:c5:22:1e:2a:a9:81:ce:a5:
b7:84:7e:c4:34:3c:3b:6d:b3:1c:17:9e:bc:0b:0c:b7:d3:76:
02:26:0f:1d:f1:6c:ae:4f:19:b7:8c:c9:53:06:a0:4d:1e:22:
d4:15:86:ce:5f:e0:83:c0:42:d8:ed:ee:82:17:39:6c:ea:27:
58:d2:3e:ce:53:7d:d9:f4:1b:0b:81:48:c0:8d:f3:0e:5f:c6:
ac:b3:c2:10:eb:f6:6b:c7:54:36:ce:c6:8e:0f:35:01:0a:48:
fc:20:81:4a:26:de:b5:34:4e:50:b1:82:15:9d:9f:e2:77:43:
36:ee:90:58:eb:2b:a6:17:2f:d6:82:ef:5d:bf:de:1f:19:76:
b0:45:da:82:ca:ed:53:25:18:85:dd:63:27:1e:17:a4:e8:6e:
c7:ad:71:79:17:b8:ad:64:e7:08:35:cb:c1:30:97:89:85:1d:
39:7d:70:88
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICHsgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA1MzEx
MDM4MjhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFGRjc3MEM3ODg2NzQ4
NUY4NUZCRTI0QTcwNDFEQ0NEM0FGQjY5NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/GNlzAdwjilYjYCRexSmD6IBy2sxKfHQyHaA2YS2+2GJs0F08
+mXQRqQ/itYsIh5CEVEMmPwv/oLrghRLBH9e/B8SnTta7/vu0ufi54IDFPg51zWR
98BEBnCUQuX4xjZsdWteFF38YTecy27a9JcjpwOO9Vz6CSc5vfOkmtvX/3X/q+ad
BtYuDBLKvlrHJnTFW2HZTQbteHGLH6Nc7UkDCqt/UKJxtUwm1azKMvE48dyAnaMg
FtYO8bz6MojrjxxyeOG1kvgsafA+woJuwAzXt8wMW2flf0GjqD39sYX7eiuLMNwo
krrkI6+rAL2xYSxc2ojoXvlP8B8J7mKzl02HAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUH/dwx4hnSF+F++JKcEHczTr7aXEwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvSF9kd3g0aG5TRi1G
LS1KS2NFSGN6VHI3YVhFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAEpfDgO2Zzam70xE01Ey5mHokGp3
67DVBRL19yWdhYMSj+6A66JkuqO86cpFmV9791Ki+xXGAF/F9qtzsyxJr0pCUasE
wiQqgjZBfzOCs5ySO6XFIh4qqYHOpbeEfsQ0PDttsxwXnrwLDLfTdgImDx3xbK5P
GbeMyVMGoE0eItQVhs5f4IPAQtjt7oIXOWzqJ1jSPs5Tfdn0GwuBSMCN8w5fxqyz
whDr9mvHVDbOxo4PNQEKSPwggUom3rU0TlCxghWdn+J3QzbukFjrK6YXL9aC712/
3h8ZdrBF2oLK7VMlGIXdYyceF6TobsetcXkXuK1k5wg1y8Ewl4mFHTl9cIg=
-----END CERTIFICATE-----
Generated at Sun Jun 22 18:16:54 2025 by rpki-client