Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/p5aVgPNfsloVK4b_TSv1RfOqQCY.roa
File: p5aVgPNfsloVK4b_TSv1RfOqQCY.roa (raw, json)
Hash identifier: GyfWVzgI14AJILtiAwtSl2vws+MyrnJzuA0x8wpVNQw=
Subject key identifier: A7:96:95:80:F3:5F:B2:5A:15:2B:86:FF:4D:2B:F5:45:F3:AA:40:26
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 213B
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/p5aVgPNfsloVK4b_TSv1RfOqQCY.roa
Signing time: Wed 04 Jun 2025 19:08:44 +0000
ROA not before: Wed 04 Jun 2025 19:08:44 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8507 (0x213b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 4 19:08:44 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A7969580F35FB25A152B86FF4D2BF545F3AA4026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:84:a1:74:23:13:34:58:8e:23:47:c8:f3:
f0:f2:76:de:30:2a:c7:ea:83:81:f5:34:c2:e0:12:
e5:06:8e:a8:ea:01:d0:cf:70:5c:2f:42:ec:2a:70:
28:8a:63:fb:c0:02:36:60:f5:8d:5b:d0:76:ba:cb:
1a:09:03:48:31:8f:45:98:ab:6c:09:e5:ba:83:f3:
29:f1:53:68:21:a1:43:31:a9:7a:32:3f:1c:f0:c9:
a9:60:89:bc:ec:72:0d:81:a7:91:a1:64:5b:6e:d2:
b7:bd:29:cc:57:7b:df:34:cb:48:5b:23:a6:0d:d5:
e6:08:21:96:9e:d2:0a:bd:6f:44:9d:c8:0b:d5:a9:
3e:1c:70:80:52:27:4e:e3:30:4a:8d:50:5a:b6:fd:
e5:57:7b:79:2d:09:c8:46:04:b1:7c:d1:b1:a4:4c:
44:d8:9b:4d:ec:ed:43:42:69:96:d1:f2:7c:0e:e0:
87:58:30:f3:df:eb:7d:2d:d1:87:2a:e4:ef:32:52:
98:e7:48:f3:5e:16:d9:02:45:10:0c:c0:99:ea:12:
de:7c:39:80:94:eb:f9:9d:d7:61:73:dc:3d:72:c7:
03:e3:74:79:1d:27:1f:3d:aa:11:34:01:78:40:fd:
45:3c:e4:4e:c2:9a:3c:9b:24:c3:78:8a:39:50:f0:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:96:95:80:F3:5F:B2:5A:15:2B:86:FF:4D:2B:F5:45:F3:AA:40:26
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/p5aVgPNfsloVK4b_TSv1RfOqQCY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
8f:74:fe:0c:88:2b:b4:f0:a4:bb:1d:61:58:84:06:0f:f5:99:
45:78:2e:51:18:d5:1e:12:1a:16:02:ff:20:6c:c2:33:b3:51:
d6:69:f1:2a:91:9d:2e:dd:78:b9:0a:5b:a1:80:4b:04:92:95:
d0:02:65:38:bc:66:b8:82:09:bb:6d:90:a1:9c:ff:b6:50:98:
02:38:18:bb:29:7a:76:44:01:ef:17:98:c6:05:dc:34:bf:91:
5d:0f:95:cb:bb:1b:fd:36:86:79:c7:73:96:4e:e2:6f:ab:19:
5d:73:c1:18:4e:f9:4a:75:97:6a:82:a4:3a:83:ad:0d:7d:c8:
8d:19:a8:c5:9b:5f:04:b3:95:16:5b:a5:e8:36:d6:f0:2f:cc:
0c:f2:db:4b:5c:46:41:51:d9:d2:ea:ee:42:bd:9e:c0:6f:44:
d0:4a:1b:9e:16:14:32:94:57:d4:a5:1c:e0:5b:0d:ec:7d:02:
2c:4d:76:fb:3d:3b:2d:38:e0:68:7e:80:58:78:38:36:50:ce:
65:6e:4d:8d:a8:fa:af:21:8e:39:93:40:ef:b3:b1:12:ec:2a:
82:d1:8f:03:0c:f1:e5:af:aa:2e:7c:2c:d7:2c:b8:07:e5:6e:
62:26:a8:df:42:ea:6d:53:e7:73:86:9f:f9:7c:66:1f:4b:58:
ab:6c:66:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 10:37:12 2025 by rpki-client