Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/f3zhCFjyR6XdP9DKefhWG5HPk7g.roa
File: f3zhCFjyR6XdP9DKefhWG5HPk7g.roa (raw, json)
Hash identifier: v/FtyrN6KHLPBwvP8+U99QXZgP9KSgAF6RuW9YQF9E8=
Subject key identifier: 7F:7C:E1:08:58:F2:47:A5:DD:3F:D0:CA:79:F8:56:1B:91:CF:93:B8
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2523
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/f3zhCFjyR6XdP9DKefhWG5HPk7g.roa
Signing time: Wed 11 Jun 2025 17:39:10 +0000
ROA not before: Wed 11 Jun 2025 17:39:10 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9507 (0x2523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 11 17:39:10 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7F7CE10858F247A5DD3FD0CA79F8561B91CF93B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:86:70:8e:76:14:d9:f3:94:55:f6:5e:3d:
70:aa:03:31:d0:cc:23:07:02:de:af:4a:3c:17:59:
a8:94:96:7c:ff:4e:05:a5:7f:d2:a5:02:75:a0:09:
b4:22:25:ce:48:b3:be:e8:dc:46:e7:3a:76:6e:63:
03:e6:38:b3:86:94:75:01:ea:18:c9:fc:5d:06:6a:
f6:96:3e:7d:d5:68:95:db:7d:49:b3:ad:cc:bb:cf:
94:c8:4b:bc:cc:0b:9f:23:07:20:f2:03:06:4b:f7:
75:c3:60:ee:a9:c6:f8:ad:c0:cb:78:d2:c9:6d:63:
28:56:89:a5:78:5f:6b:18:1c:cb:ee:fe:0f:4b:4e:
e2:c9:77:09:93:2a:f7:30:97:bd:cb:fa:c7:af:40:
e2:8d:5e:3c:a5:06:68:6f:f2:a4:59:0f:09:97:13:
15:b9:b2:97:db:72:3c:3d:38:cb:b2:7e:33:3f:9e:
57:2c:35:51:ba:79:c8:68:98:2f:b5:c3:07:87:c3:
91:97:3a:0a:45:b9:25:39:28:78:f1:c6:1b:d1:ca:
f4:c3:5c:8d:90:1f:c9:84:67:23:14:d1:01:b9:55:
b7:29:d6:6c:ae:d4:04:7e:6d:f0:00:6b:1e:a8:99:
2a:eb:0d:14:8b:2a:58:e6:b7:c5:8b:32:81:34:18:
49:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7C:E1:08:58:F2:47:A5:DD:3F:D0:CA:79:F8:56:1B:91:CF:93:B8
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/f3zhCFjyR6XdP9DKefhWG5HPk7g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
88:d5:8f:7a:32:ad:d3:34:a5:3f:71:c3:90:46:34:5d:6a:dd:
10:61:e3:ea:9e:ff:89:47:1e:d5:9d:ca:5a:e3:2b:a1:29:58:
03:ab:57:4e:dc:37:b6:3f:78:46:27:c5:b6:54:96:f9:80:3b:
12:48:ad:6a:cc:06:67:30:72:87:cb:2b:76:e1:4c:9b:6e:8e:
42:e2:47:fe:39:65:b7:f0:85:8b:6f:a9:b9:bd:9e:69:3a:61:
97:34:51:ab:b6:1e:30:5f:05:ac:7d:5d:da:7b:f1:15:59:2a:
f6:cb:ba:aa:31:3a:fc:9d:fa:ac:4e:7a:cf:ed:88:9f:00:77:
c0:92:d2:73:45:1e:26:d9:b4:11:f5:24:a2:fe:89:6b:19:64:
58:26:17:90:09:a6:dd:84:98:1f:bf:0e:04:ad:15:2d:01:32:
a2:2e:84:44:2a:75:88:37:5a:10:d6:be:6e:e9:55:78:5f:67:
de:58:ea:07:8c:71:8f:40:cf:8a:e3:17:6a:78:be:e4:dc:4a:
f2:ce:6e:95:d8:d5:9c:1e:60:d7:16:78:3c:29:3d:04:d7:f3:
e9:26:0f:9a:11:f0:db:37:3e:c9:4c:be:71:a3:78:01:23:86:
af:7b:c4:6f:70:eb:c1:20:ab:f6:0a:f3:b1:c8:90:42:9c:c6:
a3:41:9d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:15:10 2025 by rpki-client