Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/a_FFn-V3SpFC4oXqgGRoZWl6aKY.roa
File: a_FFn-V3SpFC4oXqgGRoZWl6aKY.roa (raw, json)
Hash identifier: XgaxO7tnRajeM7x0zdQxXMUZ4eb+tTRB9IZ9H0EtMgY=
Subject key identifier: 6B:F1:45:9F:E5:77:4A:91:42:E2:85:EA:80:64:68:65:69:7A:68:A6
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2462
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/a_FFn-V3SpFC4oXqgGRoZWl6aKY.roa
Signing time: Tue 10 Jun 2025 09:39:09 +0000
ROA not before: Tue 10 Jun 2025 09:39:09 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9314 (0x2462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 10 09:39:09 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6BF1459FE5774A9142E285EA80646865697A68A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:1f:bf:ed:63:99:f0:7c:c7:e4:ba:2b:83:
a1:bf:6f:b9:fb:73:e3:3c:d5:ec:01:77:34:24:c4:
af:1a:e0:c2:ca:8e:b1:f2:0c:ec:ac:b5:bd:2a:92:
db:68:ec:7b:c8:e7:db:22:74:30:82:7d:8b:54:28:
09:3e:ef:00:be:a9:05:8f:02:2a:85:67:61:f7:e4:
eb:29:76:1d:7d:d3:8d:eb:dc:f6:10:c8:87:cd:a2:
bd:48:6e:62:80:2c:c7:44:e7:d2:d0:25:d1:44:94:
d0:4f:ea:c9:7f:0e:4f:61:a1:e8:d4:b8:61:00:29:
6a:9b:2a:82:ee:cb:b2:b0:90:cd:45:6c:14:79:de:
22:e4:f9:dc:42:63:c3:05:0d:23:36:3a:e9:02:6e:
1e:b0:b0:1c:d2:63:45:a5:aa:46:d2:b1:d9:f9:4d:
89:62:1b:10:a7:02:d1:66:e8:ef:f1:40:e2:80:48:
ea:c3:a5:b0:6f:ba:83:79:07:49:a7:0e:0c:24:02:
d1:81:f9:29:f5:ac:14:0d:df:6e:37:d8:01:ef:2e:
93:d6:fd:de:d0:fe:9a:97:2d:79:65:72:78:00:9a:
8b:94:2f:4d:11:c2:21:7d:59:19:b3:14:12:e6:20:
22:04:d2:6b:a2:27:ff:44:39:13:0a:9c:4d:a6:bf:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F1:45:9F:E5:77:4A:91:42:E2:85:EA:80:64:68:65:69:7A:68:A6
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/a_FFn-V3SpFC4oXqgGRoZWl6aKY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
29:c0:6f:ac:2b:bd:e2:2f:b3:72:9d:68:66:b4:cd:77:4b:4b:
09:18:e2:61:44:6e:86:cb:f6:ce:29:cb:5d:39:33:83:b8:d8:
36:ab:1e:5f:e6:d4:00:6e:9d:1f:d1:20:ab:3d:a8:96:52:db:
0c:63:6f:a8:ae:50:66:48:f0:c1:93:e8:a0:74:55:72:8d:33:
d3:a4:94:d4:18:43:36:9e:f6:7c:1d:8a:20:43:6e:6d:fc:2c:
2d:49:89:24:e6:2f:49:3d:f6:cc:10:56:03:bd:da:20:57:fa:
12:2f:04:94:1c:f4:6d:9a:ea:eb:b1:ff:41:2d:d0:b0:fc:cd:
f2:63:a5:0d:e3:c4:f9:8e:70:47:2d:1b:56:18:20:1f:6b:b1:
73:04:97:e3:b8:72:15:90:8a:82:f2:ea:f3:e8:92:4a:dd:3f:
cd:01:9e:56:94:f7:c3:13:1b:f9:60:2b:d1:99:fb:36:ea:fd:
a5:01:10:89:ac:b1:b1:05:cc:4f:fa:1a:6e:44:cc:85:19:55:
99:1a:fa:f0:0f:9d:94:cd:85:35:4a:6f:8d:6a:a5:7d:e5:e0:
8e:7a:ea:d3:bf:91:66:42:9d:85:c5:35:6e:2d:08:fa:e4:a5:
44:4a:da:84:f9:c0:14:d1:0c:57:36:d2:fc:59:3b:b3:ad:6f:
ac:75:65:4e
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICJGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTAw
OTM5MDlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDZCRjE0NTlGRTU3NzRB
OTE0MkUyODVFQTgwNjQ2ODY1Njk3QTY4QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmyB+/7WOZ8HzH5Lorg6G/b7n7c+M81ewBdzQkxK8a4MLKjrHy
DOystb0qktto7HvI59sidDCCfYtUKAk+7wC+qQWPAiqFZ2H35Ospdh19043r3PYQ
yIfNor1IbmKALMdE59LQJdFElNBP6sl/Dk9hoejUuGEAKWqbKoLuy7KwkM1FbBR5
3iLk+dxCY8MFDSM2OukCbh6wsBzSY0WlqkbSsdn5TYliGxCnAtFm6O/xQOKASOrD
pbBvuoN5B0mnDgwkAtGB+Sn1rBQN32432AHvLpPW/d7Q/pqXLXllcngAmouUL00R
wiF9WRmzFBLmICIE0muiJ/9EORMKnE2mv9FBAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUa/FFn+V3SpFC4oXqgGRoZWl6aKYwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvYV9GRm4tVjNTcEZD
NG9YcWdHUm9aV2w2YUtZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBACnAb6wrveIvs3KdaGa0zXdLSwkY
4mFEbobL9s4py105M4O42DarHl/m1ABunR/RIKs9qJZS2wxjb6iuUGZI8MGT6KB0
VXKNM9OklNQYQzae9nwdiiBDbm38LC1JiSTmL0k99swQVgO92iBX+hIvBJQc9G2a
6uux/0Et0LD8zfJjpQ3jxPmOcEctG1YYIB9rsXMEl+O4chWQioLy6vPokkrdP80B
nlaU98MTG/lgK9GZ+zbq/aUBEImssbEFzE/6Gm5EzIUZVZka+vAPnZTNhTVKb41q
pX3l4I566tO/kWZCnYXFNW4tCPrkpURK2oT5wBTRDFc20vxZO7Otb6x1ZU4=
-----END CERTIFICATE-----
Generated at Sun Jun 22 02:00:15 2025 by rpki-client