Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/ZAiCBPWsYSC_lBY9-1auRakjJLQ.roa
File: ZAiCBPWsYSC_lBY9-1auRakjJLQ.roa (raw, json)
Hash identifier: bZjYO1c73RA5golykRgwd7lwuz+e/oRVHlUasRY11a4=
Subject key identifier: 64:08:82:04:F5:AC:61:20:BF:94:16:3D:FB:56:AE:45:A9:23:24:B4
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2529
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/ZAiCBPWsYSC_lBY9-1auRakjJLQ.roa
Signing time: Wed 11 Jun 2025 18:39:10 +0000
ROA not before: Wed 11 Jun 2025 18:39:10 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9513 (0x2529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 11 18:39:10 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=64088204F5AC6120BF94163DFB56AE45A92324B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:13:3f:64:64:36:1c:2a:50:21:56:75:1f:
c4:14:51:89:c0:d8:9e:f5:df:4a:fc:5a:5c:30:96:
2e:28:83:75:92:65:7e:3f:e4:f1:4d:89:af:19:89:
b9:14:e4:f7:41:2d:2c:d3:a0:c6:64:6a:d7:0d:91:
34:58:e6:c4:f0:cb:71:b1:18:a9:e3:f2:50:66:54:
77:84:ee:e8:70:a9:38:db:50:93:f8:57:33:4e:47:
9f:d6:e7:ce:76:5c:68:c5:e2:50:af:0d:d3:3e:42:
7a:6f:ca:e7:22:3d:52:3f:ba:af:0e:a7:de:67:a9:
9e:1b:fc:49:a1:73:1d:01:97:9a:15:8b:54:7a:ab:
12:ac:87:68:6e:d8:ef:82:6a:ac:b4:59:4b:f6:91:
c9:61:33:7c:46:6b:24:eb:c4:fd:e3:80:3c:5c:83:
9f:47:8e:94:5d:16:27:e9:e3:26:5f:a5:73:6c:27:
cd:3c:5b:bb:8c:33:46:43:2e:1e:31:56:cb:a2:40:
bb:33:66:a6:64:c4:8b:4c:27:ca:16:51:74:9a:50:
7a:6f:27:61:47:23:83:c3:e2:08:2b:8e:8b:ec:bd:
0f:c6:0c:08:93:56:1a:6f:30:b2:f6:01:62:60:16:
74:22:a8:60:bd:86:62:8c:aa:9c:a6:ec:e2:f4:11:
c2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:08:82:04:F5:AC:61:20:BF:94:16:3D:FB:56:AE:45:A9:23:24:B4
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/ZAiCBPWsYSC_lBY9-1auRakjJLQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
b5:e9:06:01:3e:4c:c7:84:72:a6:24:26:b7:b5:9f:0b:7e:65:
57:a3:d6:cc:fa:ad:af:e4:d5:68:da:95:58:cf:4f:7f:9a:ed:
ed:fd:4e:62:f1:06:04:ad:f2:e5:0e:e0:ee:20:56:a6:5b:42:
ff:6e:e8:8e:58:27:05:51:84:8e:63:9f:93:29:67:3e:bf:89:
8b:27:1d:82:3d:eb:ba:43:61:39:d0:3a:52:1a:77:66:c1:a3:
fd:cd:c1:6c:e1:e5:1f:e7:30:8e:22:3a:a5:7e:91:32:21:53:
01:ea:70:ba:dd:4c:bc:ee:11:05:96:bf:69:f2:80:52:93:23:
fa:a0:9a:88:b5:a7:ef:23:f8:d6:fd:45:fc:bd:b1:57:cc:2c:
e8:6f:ec:17:21:73:56:a4:b9:6f:40:81:ec:d6:33:19:c3:1d:
fd:f7:71:95:5e:06:aa:d8:b6:2d:98:c0:7a:df:64:9d:0c:1d:
d3:75:bf:b4:12:eb:2c:41:c2:69:f9:e6:8d:89:60:d0:1a:1d:
b1:1c:d0:45:62:01:91:e7:e6:c2:e3:b7:fd:3b:49:e2:ec:d6:
25:e2:0d:dd:f3:00:7d:88:57:91:eb:c1:f2:43:90:1c:3f:24:
af:01:76:ee:ab:69:b3:d2:9c:89:71:47:a6:a4:9e:e8:aa:70:
47:2a:b3:d9
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICJSkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTEx
ODM5MTBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDY0MDg4MjA0RjVBQzYx
MjBCRjk0MTYzREZCNTZBRTQ1QTkyMzI0QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHzRM/ZGQ2HCpQIVZ1H8QUUYnA2J7130r8Wlwwli4og3WSZX4/
5PFNia8ZibkU5PdBLSzToMZkatcNkTRY5sTwy3GxGKnj8lBmVHeE7uhwqTjbUJP4
VzNOR5/W5852XGjF4lCvDdM+QnpvyuciPVI/uq8Op95nqZ4b/Emhcx0Bl5oVi1R6
qxKsh2hu2O+Caqy0WUv2kclhM3xGayTrxP3jgDxcg59HjpRdFifp4yZfpXNsJ808
W7uMM0ZDLh4xVsuiQLszZqZkxItMJ8oWUXSaUHpvJ2FHI4PD4ggrjovsvQ/GDAiT
VhpvMLL2AWJgFnQiqGC9hmKMqpym7OL0EcKdAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUZAiCBPWsYSC/lBY9+1auRakjJLQwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvWkFpQ0JQV3NZU0Nf
bEJZOS0xYXVSYWtqSkxRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBALXpBgE+TMeEcqYkJre1nwt+ZVej
1sz6ra/k1WjalVjPT3+a7e39TmLxBgSt8uUO4O4gVqZbQv9u6I5YJwVRhI5jn5Mp
Zz6/iYsnHYI967pDYTnQOlIad2bBo/3NwWzh5R/nMI4iOqV+kTIhUwHqcLrdTLzu
EQWWv2nygFKTI/qgmoi1p+8j+Nb9Rfy9sVfMLOhv7Bchc1akuW9AgezWMxnDHf33
cZVeBqrYti2YwHrfZJ0MHdN1v7QS6yxBwmn55o2JYNAaHbEc0EViAZHn5sLjt/07
SeLs1iXiDd3zAH2IV5HrwfJDkBw/JK8Bdu6rabPSnIlxR6aknuiqcEcqs9k=
-----END CERTIFICATE-----
Generated at Sun Jun 22 06:27:10 2025 by rpki-client