Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/c3EMTJr1gZLybvShW1_LQSo8gZk.roa
File: c3EMTJr1gZLybvShW1_LQSo8gZk.roa (raw, json)
Hash identifier: QfroOr/MvNhM4KmXQT9dIPu/rIjIVOqfPG2lkQklswA=
Subject key identifier: 73:71:0C:4C:9A:F5:81:92:F2:6E:F4:A1:5B:5F:CB:41:2A:3C:81:99
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1FD3
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/c3EMTJr1gZLybvShW1_LQSo8gZk.roa
Signing time: Mon 02 Jun 2025 07:08:36 +0000
ROA not before: Mon 02 Jun 2025 07:08:36 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8147 (0x1fd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 2 07:08:36 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=73710C4C9AF58192F26EF4A15B5FCB412A3C8199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bd:42:6a:31:51:c5:6d:ad:9b:f3:38:96:11:
91:d7:17:24:76:6b:c2:fb:fd:39:44:11:ec:07:ae:
3d:a3:ce:81:f3:90:0e:2f:d2:b5:94:76:29:6a:31:
3d:ef:85:1c:b4:1b:0f:a2:3f:ad:68:b2:1a:e2:de:
34:6d:01:aa:62:f1:4a:e6:3d:64:08:b4:50:96:39:
eb:ab:d1:cf:4c:d8:31:9a:dd:69:34:36:cf:76:64:
7a:e5:ec:50:1a:d0:6e:cd:bf:45:19:c9:e9:9c:e7:
20:7a:d8:57:1b:98:eb:41:d2:d1:e3:63:00:21:49:
14:18:d8:5f:90:f3:96:a2:7e:1e:53:2c:a6:85:ac:
de:fc:49:7e:85:a9:40:b5:4a:1e:dc:7f:bf:52:64:
56:23:b9:3e:cb:95:96:f9:ba:80:71:1c:3d:a1:00:
b3:a7:21:11:a1:45:e0:ec:32:41:a4:38:58:50:33:
26:32:96:d2:ac:06:e9:4c:10:46:a3:30:e4:c8:bf:
bf:b2:1e:3c:6a:e5:ef:43:3c:18:18:32:7d:73:cf:
5a:3d:9a:b4:c5:eb:ea:ca:b0:cb:ec:ac:ef:32:c4:
4a:bc:40:77:88:a5:a7:f9:56:73:2e:6b:a3:9f:0f:
65:9a:68:c4:3a:1f:65:d7:45:72:76:18:ae:74:ad:
4a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:71:0C:4C:9A:F5:81:92:F2:6E:F4:A1:5B:5F:CB:41:2A:3C:81:99
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/c3EMTJr1gZLybvShW1_LQSo8gZk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
00:4b:74:29:58:f5:69:0a:28:33:b1:13:21:ad:64:f8:93:cc:
6b:f1:99:d0:97:ab:65:d2:ee:15:ce:fe:a9:db:41:21:28:2c:
1f:15:e9:cb:6b:07:2b:ee:07:39:0d:02:6a:74:53:41:7a:8b:
3f:85:53:6d:99:55:ee:c3:b7:ca:32:88:7a:f5:d7:f7:8d:1c:
8a:c3:d5:7c:2d:b5:5e:c8:de:20:c8:3f:7a:17:1f:98:db:6e:
6f:87:21:ec:8b:91:e7:8c:e8:a5:45:da:32:05:6b:89:cc:dd:
3e:c8:22:85:4c:f1:f8:e7:fa:2d:26:84:19:84:aa:27:5b:45:
74:d4:d6:58:94:5f:22:eb:cc:5c:93:e3:45:89:b7:36:98:2c:
6b:16:e9:6b:79:65:7b:c7:03:3f:1b:b1:26:0f:1b:5f:88:37:
2f:4f:d0:34:1c:69:00:0c:59:15:20:fa:d4:e9:53:9d:4e:f8:
c9:9c:b5:1b:67:fc:30:f1:60:56:37:42:7d:6d:21:4a:f4:69:
d9:ff:7b:6c:af:ef:0c:2f:61:41:ae:c3:b6:24:50:98:22:7a:
20:c5:a9:47:f6:d1:0d:90:f3:fe:bd:33:57:f6:29:7f:b1:97:
2c:b1:3e:46:34:7d:9c:a5:bf:35:22:5b:82:38:d8:c8:92:92:
1b:ff:a9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 03:01:28 2025 by rpki-client