Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/gADbYnRpdx1E-aATBDWfzZQzrx8.roa
File: gADbYnRpdx1E-aATBDWfzZQzrx8.roa (raw, json)
Hash identifier: K0euzKApyxJNBV8bOIOAuN+9yXQKT0sEWJ4L1XayyKk=
Subject key identifier: 80:00:DB:62:74:69:77:1D:44:F9:A0:13:04:35:9F:CD:94:33:AF:1F
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1FE6
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/gADbYnRpdx1E-aATBDWfzZQzrx8.roa
Signing time: Mon 02 Jun 2025 10:08:36 +0000
ROA not before: Mon 02 Jun 2025 10:08:36 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8166 (0x1fe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 2 10:08:36 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8000DB627469771D44F9A01304359FCD9433AF1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:b7:16:f7:47:0e:86:e2:d9:28:b8:51:4f:
53:49:17:1b:d3:b8:68:52:f3:e3:db:7c:14:d0:d9:
5e:28:36:b7:57:b0:d6:a3:37:be:12:fd:a7:72:3f:
e2:3f:d6:e8:ae:48:f8:f9:d0:dc:93:c8:4c:f2:bd:
fb:f1:65:a5:5f:54:52:6c:a4:5e:58:42:c1:67:30:
1b:cf:bd:bb:e0:e8:ee:61:15:eb:94:34:fa:92:62:
f1:5a:9c:f4:91:d1:44:48:4e:9d:96:66:ee:b4:1e:
cb:6a:81:b4:bc:d1:55:56:29:51:d9:0d:18:68:59:
a9:5a:66:7b:78:21:4c:d2:30:de:cb:25:8f:4b:f8:
67:26:ad:c5:cb:ce:0d:80:bb:9b:95:ad:36:98:da:
70:7e:8b:64:5f:a4:ad:bf:1a:68:eb:3a:6a:ac:f8:
a7:c2:c7:55:f4:6b:2c:ed:01:2c:c8:a7:1e:93:13:
25:ae:9a:72:25:12:62:89:10:d9:67:36:30:71:89:
af:60:a1:18:14:a6:6c:7e:48:dd:16:ce:65:af:c8:
22:dd:6b:eb:13:bf:1d:0f:38:15:b0:62:e3:be:1a:
0b:bc:69:b6:aa:42:fa:3b:6b:c7:f3:3a:e2:91:55:
b5:62:72:d5:c8:b3:ff:ef:09:d1:61:69:bd:37:4d:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:00:DB:62:74:69:77:1D:44:F9:A0:13:04:35:9F:CD:94:33:AF:1F
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/gADbYnRpdx1E-aATBDWfzZQzrx8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
6a:86:4c:a8:72:b4:1d:e7:79:cb:f1:db:48:b0:7b:5c:e1:62:
c8:dc:2a:06:0b:df:9f:29:7d:62:d3:da:63:b9:56:f8:21:0d:
4f:4c:e8:3a:4b:5d:ea:80:db:5e:02:7c:6f:8d:16:31:23:42:
ff:2f:86:bc:58:bb:4f:76:35:f2:0c:05:57:fb:a9:e1:16:cf:
f8:61:bf:a7:ef:55:c2:10:8a:ca:7d:62:1c:14:a6:e4:43:9f:
fb:dc:b8:54:f5:18:f5:a4:de:df:d1:60:5b:ab:f3:b0:6e:9c:
6b:32:14:e3:3b:6b:50:e4:d2:9c:54:67:78:0f:b5:01:f7:aa:
75:0c:97:c7:73:f6:57:ef:25:4d:7f:6a:9f:bd:df:2d:71:a2:
c0:90:d9:c6:28:7b:60:cc:ea:b1:60:45:62:ae:b4:32:ac:ac:
65:7b:6e:12:53:0d:1a:0f:48:fe:63:05:2b:cb:44:1b:20:ac:
e1:0d:80:19:91:bf:f7:58:61:b1:2d:3c:88:84:5f:ff:12:1a:
7c:37:49:9f:d2:90:be:8a:dd:93:cf:2f:8f:1c:15:f1:ba:ba:
49:85:ff:f7:ce:7c:e1:4d:87:55:bb:f0:97:e4:df:0c:96:05:
89:f6:a0:80:a3:25:dd:d1:f1:11:5c:b0:d6:e0:66:37:d8:33:
7d:dd:72:b6
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICH+YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDIx
MDA4MzZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDgwMDBEQjYyNzQ2OTc3
MUQ0NEY5QTAxMzA0MzU5RkNEOTQzM0FGMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmL7cW90cOhuLZKLhRT1NJFxvTuGhS8+PbfBTQ2V4oNrdXsNaj
N74S/adyP+I/1uiuSPj50NyTyEzyvfvxZaVfVFJspF5YQsFnMBvPvbvg6O5hFeuU
NPqSYvFanPSR0URITp2WZu60HstqgbS80VVWKVHZDRhoWalaZnt4IUzSMN7LJY9L
+GcmrcXLzg2Au5uVrTaY2nB+i2RfpK2/GmjrOmqs+KfCx1X0ayztASzIpx6TEyWu
mnIlEmKJENlnNjBxia9goRgUpmx+SN0WzmWvyCLda+sTvx0POBWwYuO+Ggu8abaq
Qvo7a8fzOuKRVbVictXIs//vCdFhab03TeZrAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUgADbYnRpdx1E+aATBDWfzZQzrx8wHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvZ0FEYlluUnBkeDFF
LWFBVEJEV2Z6WlF6cng4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAGqGTKhytB3necvx20iwe1zhYsjc
KgYL358pfWLT2mO5VvghDU9M6DpLXeqA214CfG+NFjEjQv8vhrxYu092NfIMBVf7
qeEWz/hhv6fvVcIQisp9YhwUpuRDn/vcuFT1GPWk3t/RYFur87BunGsyFOM7a1Dk
0pxUZ3gPtQH3qnUMl8dz9lfvJU1/ap+93y1xosCQ2cYoe2DM6rFgRWKutDKsrGV7
bhJTDRoPSP5jBSvLRBsgrOENgBmRv/dYYbEtPIiEX/8SGnw3SZ/SkL6K3ZPPL48c
FfG6ukmF//fOfOFNh1W78Jfk3wyWBYn2oICjJd3R8RFcsNbgZjfYM33dcrY=
-----END CERTIFICATE-----
Generated at Sat Jun 21 18:36:54 2025 by rpki-client