Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/mbvLobUwBkmxfWGcNeurlVSPYpM.roa
File: mbvLobUwBkmxfWGcNeurlVSPYpM.roa (raw, json)
Hash identifier: Mfnd12NRbgsHNfePszMeE2HxO7Vd/ycaGtG14ZTN/Us=
Subject key identifier: 99:BB:CB:A1:B5:30:06:49:B1:7D:61:9C:35:EB:AB:95:54:8F:62:93
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 260D
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/mbvLobUwBkmxfWGcNeurlVSPYpM.roa
Signing time: Fri 13 Jun 2025 08:39:14 +0000
ROA not before: Fri 13 Jun 2025 08:39:14 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9741 (0x260d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 13 08:39:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=99BBCBA1B5300649B17D619C35EBAB95548F6293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:3a:38:96:5a:fe:e1:70:77:9a:aa:95:e5:
89:76:fd:6b:05:1d:76:16:aa:f2:8f:06:18:3c:4d:
13:73:e0:fa:ce:11:e7:ce:9f:aa:5b:51:d5:63:d9:
2b:ea:52:f1:de:e1:2f:3e:f3:fc:a6:26:7e:e6:0a:
56:48:0a:0c:bb:e6:27:6c:0b:75:21:57:b2:a5:ba:
65:ca:b7:73:e1:01:d0:bf:d1:bb:ea:03:a9:c5:f9:
77:c3:9f:ed:d0:34:c1:12:41:95:48:d9:85:05:d7:
47:53:84:e0:75:05:30:0f:25:f2:03:a5:3b:ba:89:
1d:7b:40:0f:d4:6b:60:6f:84:52:2c:41:b7:87:18:
0f:59:8c:a2:3a:52:64:70:b0:73:fd:2d:42:99:b3:
89:46:68:17:db:40:4d:66:f8:1d:e5:70:51:72:e6:
cf:4f:1e:27:0a:32:41:8e:4b:d9:05:95:36:6f:24:
f8:6e:64:2e:74:13:6e:20:28:17:d9:f5:58:37:c4:
1d:34:be:11:a1:8a:ac:1d:a6:94:13:bf:f6:fb:39:
9b:c0:37:90:77:b3:27:32:1b:23:bd:bc:53:35:f2:
89:20:40:87:84:ee:95:9b:91:e9:5e:47:c1:29:8b:
e9:e6:90:c2:68:3d:57:26:6e:1b:c7:43:d5:a9:91:
03:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BB:CB:A1:B5:30:06:49:B1:7D:61:9C:35:EB:AB:95:54:8F:62:93
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/mbvLobUwBkmxfWGcNeurlVSPYpM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
b0:fd:63:c1:7a:c9:e1:bf:c4:78:78:49:94:10:10:7b:50:8b:
96:15:50:1d:1c:ee:bc:b7:85:f8:8a:b0:b3:ae:54:ee:cb:9a:
02:59:a3:71:a8:b9:bd:98:be:f7:8c:bd:ec:31:18:1b:60:86:
28:e1:d8:0e:49:8a:64:43:c9:d4:fe:ac:7e:05:3f:6d:86:fa:
5e:99:fc:a4:b5:cb:01:38:7d:b1:59:e2:38:c7:64:52:00:84:
e1:63:c2:35:7f:09:c6:19:28:8f:f0:72:db:68:0d:dd:70:9d:
d4:00:33:a2:ef:ee:d3:78:37:de:ee:e2:46:db:9c:e3:9a:f9:
db:17:19:26:74:32:e7:4c:58:98:48:61:1a:cf:7c:1f:b8:01:
d0:85:8a:f7:cc:bb:ab:1e:38:d3:c9:36:18:9e:d3:35:ff:be:
af:c7:d2:55:97:5e:b0:6f:40:95:79:5a:67:e6:a7:4d:c1:ef:
71:aa:e8:d3:d9:a6:c2:8e:dd:c3:52:70:f1:47:88:af:ac:40:
81:55:af:6b:7c:67:70:e8:1c:bd:98:cb:f5:96:57:a7:4a:3b:
b0:35:da:07:0d:46:df:65:9f:56:e7:75:85:6d:c2:a4:5d:bb:
6a:6d:07:80:c2:0d:66:b9:79:ef:44:69:88:5f:19:98:dd:e1:
d8:72:bd:cb
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICJg0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTMw
ODM5MTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDk5QkJDQkExQjUzMDA2
NDlCMTdENjE5QzM1RUJBQjk1NTQ4RjYyOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfczo4llr+4XB3mqqV5Yl2/WsFHXYWqvKPBhg8TRNz4PrOEefO
n6pbUdVj2SvqUvHe4S8+8/ymJn7mClZICgy75idsC3UhV7KlumXKt3PhAdC/0bvq
A6nF+XfDn+3QNMESQZVI2YUF10dThOB1BTAPJfIDpTu6iR17QA/Ua2BvhFIsQbeH
GA9ZjKI6UmRwsHP9LUKZs4lGaBfbQE1m+B3lcFFy5s9PHicKMkGOS9kFlTZvJPhu
ZC50E24gKBfZ9Vg3xB00vhGhiqwdppQTv/b7OZvAN5B3sycyGyO9vFM18okgQIeE
7pWbkeleR8Epi+nmkMJoPVcmbhvHQ9WpkQMJAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUmbvLobUwBkmxfWGcNeurlVSPYpMwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvbWJ2TG9iVXdCa214
ZldHY05ldXJsVlNQWXBNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBALD9Y8F6yeG/xHh4SZQQEHtQi5YV
UB0c7ry3hfiKsLOuVO7LmgJZo3Goub2YvveMvewxGBtghijh2A5JimRDydT+rH4F
P22G+l6Z/KS1ywE4fbFZ4jjHZFIAhOFjwjV/CcYZKI/wcttoDd1wndQAM6Lv7tN4
N97u4kbbnOOa+dsXGSZ0MudMWJhIYRrPfB+4AdCFivfMu6seONPJNhie0zX/vq/H
0lWXXrBvQJV5Wmfmp03B73Gq6NPZpsKO3cNScPFHiK+sQIFVr2t8Z3DoHL2Yy/WW
V6dKO7A12gcNRt9ln1bndYVtwqRdu2ptB4DCDWa5ee9EaYhfGZjd4dhyvcs=
-----END CERTIFICATE-----
Generated at Sun Jun 22 03:12:59 2025 by rpki-client