Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/d62PAV8La7TIWWhuHe1PeogLeVw.roa
File: d62PAV8La7TIWWhuHe1PeogLeVw.roa (raw, json)
Hash identifier: S4E8u7OXmPkqQ7YzNzQx4PXaWeoA7CO5Vh1m/fR9R+s=
Subject key identifier: 77:AD:8F:01:5F:0B:6B:B4:C8:59:68:6E:1D:ED:4F:7A:88:0B:79:5C
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 24A4
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/d62PAV8La7TIWWhuHe1PeogLeVw.roa
Signing time: Tue 10 Jun 2025 20:39:07 +0000
ROA not before: Tue 10 Jun 2025 20:39:07 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9380 (0x24a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 10 20:39:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=77AD8F015F0B6BB4C859686E1DED4F7A880B795C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:71:74:93:f7:b0:22:3c:b3:ce:55:9a:01:
c5:c5:e0:22:29:1e:39:32:5a:ab:e3:6b:72:19:f1:
68:3c:9c:18:20:0f:37:0b:6d:be:7e:d0:56:ef:0f:
7a:68:9b:54:dc:83:00:17:dc:a7:f7:ee:39:38:d0:
33:30:2d:09:68:f4:18:83:be:94:c0:5e:37:0f:fa:
4d:50:f9:38:4c:7c:0b:c4:0a:1b:5c:e5:b1:6c:ca:
d4:b9:49:1d:b1:9b:c7:3f:8b:68:76:c3:1a:2f:b8:
0b:ea:5e:ce:50:7c:f8:2f:86:62:62:1b:56:2b:26:
a8:17:2b:21:1c:e4:60:d0:b7:22:01:7d:1f:4b:54:
0d:cd:76:b0:4d:8e:88:c7:77:37:e2:2a:e6:a5:97:
50:4e:18:36:a1:97:ba:a7:c0:a0:d2:07:69:a2:d8:
26:21:ee:86:4b:1a:a4:64:59:22:10:c8:ef:d3:fe:
34:07:26:9d:ab:0b:53:a8:a7:af:e8:c6:b1:b7:18:
9f:a4:35:81:81:a3:e0:7d:39:b1:12:1d:af:be:c0:
50:ee:9d:89:c1:80:5d:73:15:10:16:2f:25:30:cf:
41:51:03:03:90:66:d9:0b:a5:f3:c2:3b:7b:cb:79:
3a:0d:d9:02:ae:11:47:d7:64:20:05:0b:cc:78:b8:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AD:8F:01:5F:0B:6B:B4:C8:59:68:6E:1D:ED:4F:7A:88:0B:79:5C
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/d62PAV8La7TIWWhuHe1PeogLeVw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
8e:be:ab:dc:b4:8f:9c:17:60:76:0a:29:a2:77:4b:d2:1e:e7:
9d:20:97:2a:3a:1b:f0:32:c3:c7:f9:f0:8a:55:ae:ad:c7:c7:
ca:30:56:c2:ab:bd:34:35:3f:c1:eb:15:2c:86:81:4d:90:4d:
14:2d:06:1a:60:f0:ab:54:b7:62:ca:b7:51:a2:21:fa:44:a0:
5c:7c:e2:6c:85:69:41:0a:b2:f3:be:14:e5:a8:57:1b:34:f8:
9b:cd:3c:4b:2b:c0:80:4d:8c:a7:bb:46:a3:9a:8e:a3:2a:f5:
4c:76:e8:c7:9b:3e:db:36:e5:9a:fb:de:25:96:76:18:84:aa:
39:eb:14:8f:5a:d7:74:4b:c8:09:77:37:3b:dc:4a:1e:6e:1a:
0c:b1:36:b6:52:4c:50:a4:66:54:d6:66:a1:42:d4:e3:39:36:
21:72:f9:e9:94:10:16:47:c6:bf:fe:63:38:00:7b:c5:62:09:
e0:99:98:c0:41:df:49:5c:b1:68:0d:7b:5f:bc:cb:60:90:90:
20:3d:8d:e1:c7:92:cd:67:64:b6:39:64:2c:67:9c:09:4c:56:
77:2d:28:e3:a9:b8:35:22:25:93:83:1f:70:db:ee:be:4b:47:
77:80:74:dc:f7:a8:54:fb:20:75:f6:60:8b:c7:ee:13:f0:2d:
3d:2f:3d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:30:48 2025 by rpki-client