Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/irDO4z_Lvp9AGW6a7bLytxIm0lk.roa
File: irDO4z_Lvp9AGW6a7bLytxIm0lk.roa (raw, json)
Hash identifier: cQXOqXEZCZRexgzQe7tQvVgfbV5b2j7gpjjkvzKy/SI=
Subject key identifier: 8A:B0:CE:E3:3F:CB:BE:9F:40:19:6E:9A:ED:B2:F2:B7:12:26:D2:59
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 247E
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/irDO4z_Lvp9AGW6a7bLytxIm0lk.roa
Signing time: Tue 10 Jun 2025 14:09:11 +0000
ROA not before: Tue 10 Jun 2025 14:09:11 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9342 (0x247e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 10 14:09:11 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8AB0CEE33FCBBE9F40196E9AEDB2F2B71226D259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:76:51:a7:73:80:58:1e:65:19:5a:ca:a8:d2:
58:0f:d7:fc:62:01:ab:51:8d:fe:99:dd:84:9d:7c:
6b:b4:c1:5d:ad:a3:8d:3b:0e:fe:b3:a2:ce:4a:f8:
78:80:72:38:96:79:1a:88:57:ab:3a:6c:2a:6b:71:
05:ef:7d:5a:32:66:62:7e:2b:49:78:52:aa:11:5a:
b0:96:66:c3:17:b2:dd:f4:e4:d0:ad:41:ef:af:19:
6e:98:40:3b:e6:8f:81:d8:79:f1:48:81:3b:63:f9:
38:65:5a:c2:78:4d:51:cd:f5:c0:18:89:42:25:c3:
83:69:df:ce:6e:93:28:0b:33:21:8d:02:64:10:50:
63:7b:1d:96:76:44:82:17:19:2a:77:78:42:1d:6a:
79:1e:62:c5:84:0b:7c:23:66:8c:e2:07:0e:a9:e4:
37:99:4d:b2:22:e0:8b:59:9c:06:3e:b4:42:f8:75:
f8:71:51:35:c6:68:99:e5:fc:98:c6:a7:5d:16:83:
a4:13:b8:02:90:60:d1:5d:32:6e:85:40:52:7e:6c:
ac:8c:fb:c2:4d:cc:40:d9:90:83:46:df:3f:93:92:
98:4c:00:b8:39:da:0e:79:7b:26:d3:70:8a:64:90:
dd:27:b3:92:a3:32:94:a5:b2:ad:1d:7e:14:3c:a7:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B0:CE:E3:3F:CB:BE:9F:40:19:6E:9A:ED:B2:F2:B7:12:26:D2:59
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/irDO4z_Lvp9AGW6a7bLytxIm0lk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
96:f5:17:f0:0e:38:ab:48:8a:79:67:56:04:40:5e:6e:dd:65:
ae:78:4a:41:f9:5f:dc:05:db:82:6f:fe:50:8b:90:4a:6a:8a:
1e:f1:1a:a2:0b:fb:5f:88:90:83:eb:f8:dd:17:da:f6:5e:a4:
73:88:9e:e6:ae:4b:c3:3c:01:20:51:a3:aa:24:09:19:6b:1c:
ec:ce:79:44:75:39:e5:76:41:53:7d:c9:b8:1f:7d:73:07:9e:
8d:b7:d4:cf:41:07:6b:25:53:38:52:81:33:4f:99:94:e1:15:
82:e5:f3:b7:68:a8:d1:40:17:df:6a:0b:e9:9b:8c:b1:56:c8:
61:63:ab:7c:58:e1:c2:b1:8e:4b:c6:e9:64:b0:b0:ed:cf:b6:
7b:ae:f0:4b:0d:cf:b8:57:fa:2f:a8:39:d8:ff:4e:c4:e2:6c:
f3:4b:3e:47:f3:a5:c1:fd:fa:db:0d:6c:04:4a:b1:9b:6b:cb:
fa:ca:e0:59:e9:b8:c5:27:77:99:d5:af:be:8c:13:ea:bd:5f:
36:4c:02:6b:c2:8d:82:cc:10:a5:5c:48:d6:dc:c8:17:bd:90:
fc:ac:92:fc:68:dd:e0:12:5b:d1:d5:dd:55:c3:a2:fa:13:6b:
ba:da:90:22:58:ca:0b:42:fa:94:d0:14:90:4d:af:ea:87:d3:
39:cc:ba:8d
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICJH4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTAx
NDA5MTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDhBQjBDRUUzM0ZDQkJF
OUY0MDE5NkU5QUVEQjJGMkI3MTIyNkQyNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMdlGnc4BYHmUZWsqo0lgP1/xiAatRjf6Z3YSdfGu0wV2to407
Dv6zos5K+HiAcjiWeRqIV6s6bCprcQXvfVoyZmJ+K0l4UqoRWrCWZsMXst305NCt
Qe+vGW6YQDvmj4HYefFIgTtj+ThlWsJ4TVHN9cAYiUIlw4Np385ukygLMyGNAmQQ
UGN7HZZ2RIIXGSp3eEIdankeYsWEC3wjZoziBw6p5DeZTbIi4ItZnAY+tEL4dfhx
UTXGaJnl/JjGp10Wg6QTuAKQYNFdMm6FQFJ+bKyM+8JNzEDZkING3z+TkphMALg5
2g55eybTcIpkkN0ns5KjMpSlsq0dfhQ8p6q/AgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUirDO4z/Lvp9AGW6a7bLytxIm0lkwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvaXJETzR6X0x2cDlB
R1c2YTdiTHl0eEltMGxrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAJb1F/AOOKtIinlnVgRAXm7dZa54
SkH5X9wF24Jv/lCLkEpqih7xGqIL+1+IkIPr+N0X2vZepHOInuauS8M8ASBRo6ok
CRlrHOzOeUR1OeV2QVN9ybgffXMHno231M9BB2slUzhSgTNPmZThFYLl87doqNFA
F99qC+mbjLFWyGFjq3xY4cKxjkvG6WSwsO3Ptnuu8EsNz7hX+i+oOdj/TsTibPNL
PkfzpcH9+tsNbARKsZtry/rK4FnpuMUnd5nVr76ME+q9XzZMAmvCjYLMEKVcSNbc
yBe9kPyskvxo3eASW9HV3VXDovoTa7rakCJYygtC+pTQFJBNr+qH0znMuo0=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:25:41 2025 by rpki-client