Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/PMCsbWnVNieOpenJCbeXAVe-AQ0.roa
File: PMCsbWnVNieOpenJCbeXAVe-AQ0.roa (raw, json)
Hash identifier: CEcv2A7EcfTQroqPDBwny0tvin6vekvJqZHuVPe5ypM=
Subject key identifier: 3C:C0:AC:6D:69:D5:36:27:8E:A5:E9:C9:09:B7:97:01:57:BE:01:0D
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 25DF
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/PMCsbWnVNieOpenJCbeXAVe-AQ0.roa
Signing time: Fri 13 Jun 2025 01:09:14 +0000
ROA not before: Fri 13 Jun 2025 01:09:14 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9695 (0x25df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 13 01:09:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3CC0AC6D69D536278EA5E9C909B7970157BE010D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:4b:62:7e:02:6f:fa:41:a4:7c:21:5e:95:
e3:02:d1:49:96:6f:0e:e2:95:9b:a5:79:be:41:d3:
0a:15:4e:90:96:e1:76:67:b2:29:be:d4:c5:35:9e:
ba:d7:9d:f9:7e:34:19:da:ce:44:e0:62:32:a4:23:
a0:81:1d:92:5d:a7:3a:14:c3:82:d1:db:ea:d6:a0:
72:ba:89:dd:20:7c:cb:d5:55:89:e4:00:7d:f6:4f:
7c:20:3b:7d:5c:22:70:9a:7a:76:ee:03:60:0a:4a:
9d:e7:2d:05:b6:09:96:0f:74:06:07:02:4e:33:71:
56:44:c2:68:f2:1a:be:15:81:3d:4a:41:70:52:95:
fe:ad:34:78:62:e2:e7:a1:ef:03:fa:8c:e6:2c:6e:
2a:f5:73:ea:e7:52:d6:82:f0:ea:e2:3e:03:f4:8b:
bc:e3:1f:f5:58:59:37:1c:e8:06:03:5f:7a:ca:70:
a3:82:65:33:6b:a6:92:5f:70:6b:fc:53:b5:b4:75:
57:10:b0:97:34:cf:7f:4b:94:19:8b:3c:07:c2:94:
63:46:08:e7:bc:32:4d:73:cb:34:2c:1d:0c:e0:9f:
52:33:0e:7c:13:3f:f8:51:85:4f:39:b3:03:43:99:
1b:29:7f:d3:5d:03:dd:34:40:33:e2:45:a5:75:61:
fe:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C0:AC:6D:69:D5:36:27:8E:A5:E9:C9:09:B7:97:01:57:BE:01:0D
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/PMCsbWnVNieOpenJCbeXAVe-AQ0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
4d:ce:c9:85:ea:5d:b8:ab:23:ce:12:cd:46:a4:ee:7e:ee:a1:
5c:70:d6:98:f7:c1:44:0d:f4:87:82:13:ea:f8:41:3e:fa:06:
f7:40:be:f4:ca:9e:de:f4:1b:17:37:a1:a5:db:9b:8e:92:cb:
3e:d0:0f:c5:a0:f9:f3:20:af:8e:01:8f:75:fd:75:6a:d3:cf:
50:8c:28:5e:4d:c5:05:d9:87:4a:de:6d:60:fe:6d:80:ad:a5:
9d:e1:91:ec:00:12:bd:35:2c:f6:97:a8:23:3e:f6:52:8a:26:
7c:c4:40:21:8d:59:e4:73:3e:1c:a3:64:20:fc:4b:28:9c:09:
36:c4:d0:27:82:64:4f:ee:76:76:7a:60:1f:c9:c0:e5:d0:82:
0f:fe:ad:ed:81:80:7d:d3:0f:89:2f:f8:59:5a:a1:50:67:d3:
94:50:79:73:59:2d:02:60:62:fe:60:32:65:67:ce:88:25:29:
83:60:c8:9d:e7:d7:63:3b:8a:91:02:a3:68:dd:7d:16:ff:3a:
01:24:88:49:2c:02:1b:42:81:da:a9:0d:02:54:81:23:c2:32:
f8:02:f2:94:83:12:2b:35:3d:1c:9e:8c:63:18:35:5c:4f:2d:
c1:56:e7:7c:96:a8:6e:e2:77:e5:2f:39:83:e1:fa:82:6b:0f:
1c:2f:a4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:54:50 2025 by rpki-client