Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/o53-mBfLb2zmvWrLiSh9Waz6B5o.roa
File: o53-mBfLb2zmvWrLiSh9Waz6B5o.roa (raw, json)
Hash identifier: yLNoOHUflcgnbFF8mZibvofX/UPG3T7tpNUI7TIrYGU=
Subject key identifier: A3:9D:FE:98:17:CB:6F:6C:E6:BD:6A:CB:89:28:7D:59:AC:FA:07:9A
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1F49
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/o53-mBfLb2zmvWrLiSh9Waz6B5o.roa
Signing time: Sun 01 Jun 2025 08:08:33 +0000
ROA not before: Sun 01 Jun 2025 08:08:33 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8009 (0x1f49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 1 08:08:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A39DFE9817CB6F6CE6BD6ACB89287D59ACFA079A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:81:22:7c:cf:74:b7:5d:72:eb:cf:d5:58:
41:72:08:62:57:3a:5b:55:a2:85:8b:64:8c:eb:fb:
ff:c3:70:18:e5:1f:71:40:ad:8c:cd:4a:95:44:af:
23:78:8d:c7:d5:1a:a5:e9:ca:b7:41:94:0c:96:af:
bc:04:e1:d3:e1:2c:e8:cc:3f:5b:aa:0d:d6:7c:0c:
a3:bf:e9:a9:db:02:50:d2:10:e2:42:72:0e:32:46:
48:ce:38:46:be:d2:83:97:b3:1c:44:0d:b2:95:4e:
46:f5:08:1e:9b:32:e9:f0:94:f4:d3:5b:76:db:92:
03:82:19:66:f1:5e:bd:b0:bc:9a:a2:c5:d7:f5:e6:
7a:2d:0a:f2:13:cd:c4:14:09:7a:1e:fb:a3:03:18:
99:47:a8:e5:50:55:8d:90:dd:dd:d7:e7:f9:38:2a:
23:8d:e9:7a:a5:af:80:0b:a9:17:a9:f8:f8:48:7e:
dd:53:a8:fc:be:46:97:7e:72:79:4b:78:50:70:c8:
b8:2e:7b:83:b5:20:6e:1b:bb:14:52:cf:99:12:51:
21:77:ed:de:93:99:70:9a:bd:3c:7f:16:82:6a:47:
0b:7f:d0:db:0e:53:50:03:63:7f:84:a4:91:29:c6:
cd:1e:7b:ef:1d:f4:86:a0:11:61:0b:13:7c:6a:f6:
0f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9D:FE:98:17:CB:6F:6C:E6:BD:6A:CB:89:28:7D:59:AC:FA:07:9A
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/o53-mBfLb2zmvWrLiSh9Waz6B5o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
bd:23:1f:95:6f:8d:8b:c2:85:3f:0a:b3:af:ec:e9:cd:bd:f1:
97:03:f9:e4:09:ec:3a:c6:38:91:e3:ec:61:04:92:f9:bd:4c:
ff:b6:d1:64:00:08:f9:57:0f:37:73:42:ec:e6:7d:59:f1:3d:
b9:88:20:39:da:83:4e:68:f5:cf:7e:30:e3:ea:f1:a3:7f:54:
86:03:31:91:00:f5:b8:bc:df:41:97:95:94:da:72:d2:16:95:
78:13:39:6a:a5:f8:f7:47:bb:a3:1d:e3:38:c3:dc:85:0d:5b:
19:a9:0d:16:90:0b:b8:60:99:16:4b:d7:53:18:75:09:1a:c5:
fb:03:50:5a:49:d2:51:8e:b5:a3:2c:f4:36:cc:3b:89:d8:35:
f5:04:02:66:f7:d2:49:29:c8:e2:bf:2f:0a:de:bf:8d:30:58:
ac:15:7d:58:5a:7c:45:82:e3:01:a2:b3:ea:9a:ea:0f:f0:36:
5e:ee:45:64:55:cd:26:aa:ce:4a:55:dc:d6:1a:7e:a3:a6:ab:
87:ac:6a:db:a3:f6:b0:7b:ba:9e:8f:15:79:bc:8f:a3:7e:74:
a4:79:9f:52:f6:b1:5d:c4:7e:c6:49:7b:34:7f:ed:d1:76:2f:
81:8b:8f:1a:92:0f:f3:91:28:d8:3b:2c:2a:d2:44:93:8a:1f:
ef:ff:e6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 03:19:58 2025 by rpki-client