Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/I_00VHQPTIq2t20RIW-H9GGiXBE.roa
File: I_00VHQPTIq2t20RIW-H9GGiXBE.roa (raw, json)
Hash identifier: hxNuU3YJKp4BKOg0JTrX+jdpa85xTFnUs89taM8Re04=
Subject key identifier: 23:FD:34:54:74:0F:4C:8A:B6:B7:6D:11:21:6F:87:F4:61:A2:5C:11
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 25D0
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/I_00VHQPTIq2t20RIW-H9GGiXBE.roa
Signing time: Thu 12 Jun 2025 22:39:17 +0000
ROA not before: Thu 12 Jun 2025 22:39:17 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9680 (0x25d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 12 22:39:17 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=23FD3454740F4C8AB6B76D11216F87F461A25C11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ba:87:11:78:66:ac:76:01:d7:72:5d:d9:43:
39:a0:b8:76:bb:e4:1e:39:f6:e0:4d:e1:e3:ed:3a:
43:17:cc:c1:e4:e1:90:e4:6d:14:d9:73:97:b0:f2:
2a:2c:a6:3a:7b:61:8f:98:a9:c2:78:ae:f5:87:80:
08:d0:e7:95:f8:9a:82:92:30:74:6e:54:0e:96:bc:
cf:e8:04:bc:7b:c9:b4:98:c1:65:fc:54:39:87:ff:
ea:1a:5a:40:3b:a4:5b:9b:79:ad:84:86:60:11:26:
ca:6d:6d:6c:5d:a2:61:4d:22:de:78:73:8c:9c:9a:
5d:ce:b6:0e:80:25:4e:f0:2a:04:8a:e8:1e:4c:11:
2e:5b:d7:fb:ec:2a:bf:c3:5f:ea:a9:98:a9:ef:5e:
5b:7d:3e:c4:50:a7:c4:c8:3a:23:ec:42:46:aa:a6:
cc:f4:9b:7b:da:60:ee:50:26:26:8d:e6:91:4b:e9:
ef:d4:43:c0:7b:d9:8e:23:1e:66:27:62:d6:2c:3e:
cd:a7:bf:b4:67:c9:c1:15:eb:dc:8f:fc:66:65:fd:
28:11:8b:53:8a:3b:02:b7:28:a6:77:eb:a0:8a:7c:
39:55:ed:ba:27:5d:5a:1d:a2:5c:f6:0a:c8:ac:9d:
79:ed:7b:7d:4b:f8:4e:f4:e3:1b:67:5c:b6:c7:89:
98:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FD:34:54:74:0F:4C:8A:B6:B7:6D:11:21:6F:87:F4:61:A2:5C:11
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/I_00VHQPTIq2t20RIW-H9GGiXBE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
2d:4b:c1:f1:ec:f8:f0:d7:31:d1:68:59:2e:a2:01:8f:20:78:
9b:69:bd:42:c3:a5:d3:f5:7d:28:7d:d1:c3:ad:1e:d0:09:96:
af:a1:a1:a0:7d:44:1f:80:95:82:36:59:7b:00:98:4f:e5:68:
4d:74:f1:94:18:4e:ba:a0:d5:02:d3:c2:e1:98:1f:3d:86:5d:
9e:4a:f5:32:3a:76:24:83:3b:6f:a4:a8:ab:80:76:c0:00:7a:
1d:60:d7:e7:de:f8:fc:e1:4c:26:75:9e:3f:2b:d0:67:47:e5:
ea:c4:1e:c9:02:0d:15:e2:67:d2:87:a8:12:e7:bc:ac:c0:7f:
01:a3:22:55:cc:d2:d1:34:90:d1:29:25:a8:b2:05:d5:25:5c:
b5:81:ce:9a:23:2b:33:0c:42:df:b4:bc:2b:4a:36:bb:f7:b6:
eb:c1:c0:41:5a:24:35:10:2d:83:9e:8a:be:39:5d:75:ca:de:
f4:99:88:0a:1f:70:24:d7:8a:2f:b0:64:aa:ee:9c:43:8a:59:
b5:0d:fb:cd:b8:f1:7b:b6:ac:b0:4f:19:1a:36:05:dd:bd:78:
02:29:3f:6f:2e:b8:08:61:e8:8c:17:7c:78:0d:43:16:34:86:
a0:5a:7d:95:3b:97:8a:5b:94:3b:88:96:49:0c:cb:69:99:2e:
97:c7:06:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 06:59:02 2025 by rpki-client