Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/V4771oVSkYSjmemnjaOXPtDKjew.roa
File: V4771oVSkYSjmemnjaOXPtDKjew.roa (raw, json)
Hash identifier: WjJ+lIq3uQrrUBjDgO7OXi3FNIAzANyNHf53lR9Xh7k=
Subject key identifier: 57:8E:FB:D6:85:52:91:84:A3:99:E9:A7:8D:A3:97:3E:D0:CA:8D:EC
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2549
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/V4771oVSkYSjmemnjaOXPtDKjew.roa
Signing time: Thu 12 Jun 2025 00:09:10 +0000
ROA not before: Thu 12 Jun 2025 00:09:10 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9545 (0x2549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 12 00:09:10 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=578EFBD685529184A399E9A78DA3973ED0CA8DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:2d:7f:6f:e1:3c:4f:c0:8e:98:aa:00:ec:
c7:52:72:67:e4:bd:e8:93:ae:9a:e3:c1:9e:97:76:
89:a0:e2:bc:e4:7f:fb:ab:12:f0:8c:14:46:5d:b6:
e9:2c:3d:9f:64:11:f5:03:ac:25:99:87:2f:91:11:
af:a2:7f:ba:01:67:42:f8:6e:65:ea:e8:4b:08:58:
d8:36:ba:91:23:54:e1:f3:d5:d4:ca:fa:26:1d:ff:
a9:bd:f2:8b:1a:ad:6a:21:65:2a:d0:76:57:91:23:
b8:d3:61:ee:dc:91:dc:73:73:44:60:49:92:68:40:
dd:f8:f5:d9:f0:8b:41:a6:c1:20:3d:5f:aa:f4:e5:
18:ff:72:b2:8b:9b:5f:70:b1:ec:fc:c0:96:21:ae:
e3:b2:4b:f9:19:07:11:df:cf:56:61:97:3c:1d:b6:
26:4d:18:60:df:a1:ad:52:ff:73:61:d9:bd:34:d7:
ad:0d:5a:48:82:83:78:24:8d:c6:b2:44:1e:7d:73:
b6:56:f0:84:61:ad:67:36:cb:22:f3:33:bf:40:34:
73:15:d2:32:9a:38:73:b3:90:83:77:d6:08:e8:27:
c2:59:29:9b:25:52:9b:38:09:60:f2:52:9c:3a:f8:
17:ea:33:8e:bc:a9:ae:39:15:8f:bf:dd:e4:8a:27:
38:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8E:FB:D6:85:52:91:84:A3:99:E9:A7:8D:A3:97:3E:D0:CA:8D:EC
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/V4771oVSkYSjmemnjaOXPtDKjew.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
64:89:b4:66:d1:f4:b6:17:42:76:3b:14:16:a8:c5:75:67:49:
f9:c7:c3:79:c6:1d:a2:3e:0f:1f:34:92:07:76:ed:cb:b6:a8:
b4:aa:e9:a2:51:31:a4:39:69:ff:4a:7e:90:34:ec:18:3a:b4:
9a:32:ea:e5:87:a0:08:c7:b0:8e:88:8e:30:6d:f5:11:e0:86:
4a:d3:ee:2a:46:4a:91:c5:29:eb:62:57:65:c6:77:d8:77:16:
46:ac:a3:44:13:c0:21:6f:8f:c7:14:49:3e:51:a9:99:50:96:
8b:2e:74:86:d6:86:f3:97:5b:89:85:94:1a:80:7e:c8:bb:e2:
ee:61:36:b6:eb:e6:38:ba:fc:2a:20:34:54:71:51:1a:da:a9:
37:0b:eb:68:e1:28:3f:41:1c:92:f5:d7:37:40:cb:12:2c:f8:
84:65:f3:89:9c:f4:2e:98:c7:e5:91:cd:a0:d2:37:f6:47:bf:
2e:54:2e:a9:92:1c:69:1b:63:8f:f5:b6:04:20:ad:5d:3c:9a:
d1:a5:31:5e:58:87:55:66:65:e2:12:a5:4b:86:2b:ba:1e:18:
94:d2:8b:1e:42:a0:5f:e1:a1:ea:54:ea:50:e7:69:eb:cf:ea:
2d:07:b3:5c:87:94:89:6f:cc:87:c0:21:fa:f8:d1:d0:33:c0:
20:fd:9a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 12:17:28 2025 by rpki-client