Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/PkF9UXvxlGz7K7emARCteVIFQAk.roa
File: PkF9UXvxlGz7K7emARCteVIFQAk.roa (raw, json)
Hash identifier: k4ccvw3rE/HGkKfEKQuUxEOayWoHiAWpSDX2xzOzjvk=
Subject key identifier: 3E:41:7D:51:7B:F1:94:6C:FB:2B:B7:A6:01:10:AD:79:52:05:40:09
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1C50
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/PkF9UXvxlGz7K7emARCteVIFQAk.roa
Signing time: Tue 27 May 2025 01:08:08 +0000
ROA not before: Tue 27 May 2025 01:08:08 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7248 (0x1c50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: May 27 01:08:08 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3E417D517BF1946CFB2BB7A60110AD7952054009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:18:da:ba:93:85:02:1e:48:4e:0e:b6:03:
6b:0b:50:6a:cd:37:99:01:db:49:ab:fa:58:d3:d0:
04:d2:f4:d0:a3:98:70:fa:b6:b8:02:7a:66:dc:18:
ec:cb:38:c8:e1:4d:2f:eb:c7:e5:88:82:15:7c:ad:
41:65:d8:91:4b:b3:cf:af:b3:9d:a1:16:e0:e7:2e:
20:cc:a2:0b:81:e0:9d:b6:46:13:31:a0:61:b8:2e:
d7:dc:82:43:d7:37:8c:28:54:25:c3:8f:6a:35:0c:
cf:fd:6a:d6:4a:6e:2b:30:d6:42:c2:72:17:a6:fe:
fc:07:5e:20:44:e6:00:98:53:a3:18:48:89:4d:f3:
c5:14:7a:74:3a:1e:e9:fd:be:c8:58:36:8c:83:96:
b2:6c:c5:34:7e:ee:51:89:fa:62:5c:30:e1:36:94:
92:ae:d1:fd:32:d8:26:5b:2f:80:bf:96:00:1c:19:
dd:77:ff:0e:17:78:91:16:2b:ab:f0:eb:44:25:f0:
d5:36:71:26:db:00:bc:5f:b5:ba:02:c5:cc:ac:a7:
0b:1d:cf:72:83:59:9d:3a:83:e9:00:b3:50:bb:30:
45:f1:b7:3c:9c:36:1a:9b:57:dc:49:de:07:2d:78:
4f:4e:38:48:80:18:8e:ce:41:b4:ee:bc:df:49:de:
57:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:41:7D:51:7B:F1:94:6C:FB:2B:B7:A6:01:10:AD:79:52:05:40:09
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/PkF9UXvxlGz7K7emARCteVIFQAk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
74:c5:47:48:64:b2:50:18:60:48:dc:c1:18:5e:6e:0d:58:f3:
7e:3f:63:17:73:3b:b9:9d:53:e4:5e:39:dd:54:d3:ef:eb:33:
36:01:1f:64:9b:27:cf:d2:89:7e:6b:24:09:4e:fa:c5:14:34:
7d:bb:5b:b3:5f:b1:5e:d6:c1:bf:42:4e:d7:07:96:b0:d6:bd:
3a:fb:c7:88:67:50:ba:5f:a8:40:68:e3:c1:7f:6a:9e:9d:20:
00:80:c7:d4:45:c3:56:e5:b2:88:bc:9f:c9:bd:ed:b6:bf:9c:
ff:f2:cc:1b:2d:db:a9:5a:de:20:32:5e:15:d2:f6:fd:50:c5:
42:70:46:70:3e:12:3b:bb:8b:a4:1e:a5:94:c6:69:d5:00:ba:
e0:fa:82:c7:14:af:4b:87:c4:3f:6c:16:fc:68:ce:e4:72:d4:
0d:8e:fc:1f:be:da:de:4a:37:08:1d:e6:f5:bc:9d:80:d3:d8:
d0:74:b6:3e:93:ed:86:7c:18:ee:f9:32:9c:d8:3a:f1:6d:34:
6d:19:56:33:bf:86:cf:67:a0:7d:52:1e:96:4a:b6:97:f4:c4:
e2:86:fa:02:e1:ca:c6:c9:8f:ae:49:f0:43:4b:46:2d:cd:83:
44:ef:ad:fe:87:ec:f2:c6:b5:4b:39:6f:54:8b:9e:48:f6:10:
45:32:f1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:48:53 2025 by rpki-client