Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/djY2fg1pMv6UWkr0_NV1z9pi8q4.roa
File: djY2fg1pMv6UWkr0_NV1z9pi8q4.roa (raw, json)
Hash identifier: GCc1LvujvoItwJ7SHLIcLjOBMW+ZtLrvGATu/TyHYFQ=
Subject key identifier: 76:36:36:7E:0D:69:32:FE:94:5A:4A:F4:FC:D5:75:CF:DA:62:F2:AE
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1C19
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/djY2fg1pMv6UWkr0_NV1z9pi8q4.roa
Signing time: Mon 26 May 2025 16:08:13 +0000
ROA not before: Mon 26 May 2025 16:08:13 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7193 (0x1c19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: May 26 16:08:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7636367E0D6932FE945A4AF4FCD575CFDA62F2AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:57:50:d9:63:9c:e1:43:00:26:8a:64:b9:
1b:0f:d4:78:60:24:d3:ca:a8:4e:fd:83:67:61:04:
00:5f:2e:49:06:a0:22:6b:67:d7:bf:d0:4b:23:77:
a5:d5:7a:cf:b3:41:33:8c:8e:c5:af:85:6a:ce:38:
ec:f2:40:d0:81:34:fa:00:32:de:c4:6d:3a:bc:07:
85:72:bb:2b:7f:44:c2:3b:43:9e:77:35:41:df:71:
f7:e6:60:02:70:35:64:d2:07:7c:e0:c3:91:a8:39:
d3:43:b6:09:bc:dc:e8:db:af:74:dc:fd:79:d9:8d:
4b:e3:de:36:d3:3b:52:b8:8f:f0:05:38:9d:c4:bc:
fc:03:11:51:55:f0:3b:f2:a4:21:2d:49:4e:30:4e:
45:e8:03:e5:22:13:3b:69:98:88:a0:cc:2d:31:16:
26:31:06:ca:4f:ea:ec:fd:97:c8:f2:1c:73:2e:76:
87:b3:0e:0e:be:28:29:9a:f9:65:96:31:88:af:3c:
bb:ac:70:2f:14:a5:da:44:eb:69:e5:8a:67:31:12:
2c:3a:29:7a:68:b5:43:fc:8b:cd:b2:30:4f:aa:76:
d6:9b:e9:79:9c:e3:68:fe:ca:18:e4:24:1c:66:dd:
28:9c:e6:f0:da:89:b0:9a:ff:d5:95:df:dc:c5:2e:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:36:36:7E:0D:69:32:FE:94:5A:4A:F4:FC:D5:75:CF:DA:62:F2:AE
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/djY2fg1pMv6UWkr0_NV1z9pi8q4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
65:56:53:4f:64:5a:b8:79:b4:00:b0:5f:d6:c1:fe:bf:2d:25:
56:fd:b4:47:72:e3:63:1d:bb:6c:be:ed:3a:66:ea:25:e3:36:
9a:b7:f0:4f:54:03:02:8b:4a:9c:ab:15:b7:1a:2b:fc:dc:61:
54:9d:9e:91:fc:f0:e0:1a:6c:70:33:36:fb:9d:96:de:c8:a1:
d3:29:66:95:de:de:8a:03:09:cf:4b:1d:37:78:a0:8d:03:37:
4f:69:c7:be:76:cb:0f:93:cb:1d:8e:de:0a:b8:64:34:48:ed:
81:91:a4:22:57:65:35:4b:5f:52:ff:4a:56:4e:ed:19:db:cb:
93:b3:45:ec:e8:4a:65:df:a9:38:cb:51:65:36:63:8a:83:57:
7a:ec:69:5b:e9:b4:a5:4f:26:5a:d7:74:37:45:3a:93:0c:96:
06:f4:da:09:50:3d:d6:69:53:99:39:93:eb:d8:8b:29:86:9c:
12:03:41:a2:a1:3d:b1:9c:05:c7:26:3b:98:f6:44:62:21:c7:
01:a9:76:bd:40:b9:eb:ad:cb:4c:46:55:6c:b4:ef:b3:da:90:
ce:b6:2c:15:ab:ba:2a:1a:fd:09:c5:ee:2b:c1:d6:55:22:9a:
9c:19:4d:20:7c:7d:1a:61:50:0a:e4:2d:3d:28:7d:b4:1e:46:
30:64:7f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 21:18:39 2025 by rpki-client