Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/q-Fh-p4MYYpLodA_KsNwDWStf8A.roa
File: q-Fh-p4MYYpLodA_KsNwDWStf8A.roa (raw, json)
Hash identifier: NVUt22KMmTBcpXlnK+LeI6W/4aKaZiZo0DQprWWlWbs=
Subject key identifier: AB:E1:61:FA:9E:0C:61:8A:4B:A1:D0:3F:2A:C3:70:0D:64:AD:7F:C0
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1FCA
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/q-Fh-p4MYYpLodA_KsNwDWStf8A.roa
Signing time: Mon 02 Jun 2025 05:38:36 +0000
ROA not before: Mon 02 Jun 2025 05:38:36 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8138 (0x1fca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 2 05:38:36 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=ABE161FA9E0C618A4BA1D03F2AC3700D64AD7FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:92:95:cd:e8:48:fa:5a:4c:2d:b0:b4:68:
72:cf:1e:c2:e6:02:4d:50:46:ed:52:90:6c:41:49:
19:e2:bf:0c:d6:72:39:37:7a:81:d9:40:1d:bb:c5:
79:fb:22:c0:73:e0:a0:ca:43:57:0f:21:b2:71:76:
71:66:1f:52:d6:6f:04:1e:8a:4d:bc:f8:71:7c:89:
34:89:71:65:1f:70:7f:97:29:0b:f4:5a:d9:6a:f9:
b2:7b:47:4f:2c:4f:cc:27:71:c8:0f:8d:a5:5c:2b:
16:60:fe:f3:f8:49:de:61:a0:56:f8:f1:13:18:e7:
d9:6a:3a:9d:a4:fb:d9:29:a5:54:35:a3:6c:f7:97:
5b:83:11:4c:ab:b0:9b:bc:50:f2:22:58:fe:e7:fa:
c4:02:dd:25:1a:74:7a:3a:a6:a3:61:c1:32:4f:7a:
52:66:90:3f:85:b3:bc:35:72:6a:93:4e:54:7b:28:
8c:b7:1b:c9:b9:c0:9f:76:af:02:de:e9:57:74:2a:
1a:ee:00:a7:b8:87:1d:d2:3a:6e:c0:0e:43:d5:70:
8c:35:2a:21:0b:f0:f3:12:35:5e:ba:52:af:e8:8d:
4d:66:bc:9b:58:89:4c:45:18:bf:d4:ec:08:27:81:
e9:80:d5:96:d4:56:c4:e9:53:f4:bf:c6:ea:ab:1b:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E1:61:FA:9E:0C:61:8A:4B:A1:D0:3F:2A:C3:70:0D:64:AD:7F:C0
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/q-Fh-p4MYYpLodA_KsNwDWStf8A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
8f:8f:04:b4:74:ac:5f:9f:6a:b8:2f:bf:84:5b:76:d0:c2:89:
d6:21:a4:cb:dd:8c:87:b8:cf:e1:97:0b:f9:81:5a:ce:6a:ac:
4b:19:37:55:09:d7:ff:dc:07:63:7f:da:4d:a0:2b:9f:0a:dd:
4b:8b:30:16:42:0b:15:18:f4:70:f2:06:36:2f:f1:f0:ce:ed:
02:c2:c8:bd:68:7e:cc:13:74:db:53:02:6f:7e:76:97:93:50:
ed:12:27:26:f2:66:85:dd:7a:be:1a:4f:63:42:48:96:5a:7c:
12:6d:2d:b0:37:e3:e2:59:51:53:ac:85:d0:37:1c:88:5e:c5:
66:5a:67:b8:81:d0:a4:07:76:ee:8d:0b:50:4c:90:5f:7a:16:
db:94:c4:f9:4f:1f:e6:71:13:e0:8c:67:dc:f5:93:7b:7c:90:
de:45:f7:ac:c8:c1:5e:3e:7c:13:65:c4:dd:12:da:11:2d:55:
7d:ee:3e:ff:eb:1f:ea:f2:4f:fe:91:7d:09:ed:10:90:35:2f:
39:91:3e:0c:2d:2d:8e:dd:a8:61:4c:6c:83:d7:c5:0c:ca:64:
5a:ad:d5:c6:8c:6f:28:1b:d4:84:43:b4:86:a6:1b:c1:1a:f6:
3f:fe:01:ac:35:72:f4:47:88:2d:a5:c8:d9:da:2c:c7:8d:cb:
37:00:29:5c
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICH8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDIw
NTM4MzZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEFCRTE2MUZBOUUwQzYx
OEE0QkExRDAzRjJBQzM3MDBENjRBRDdGQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPcJKVzehI+lpMLbC0aHLPHsLmAk1QRu1SkGxBSRnivwzWcjk3
eoHZQB27xXn7IsBz4KDKQ1cPIbJxdnFmH1LWbwQeik28+HF8iTSJcWUfcH+XKQv0
Wtlq+bJ7R08sT8wnccgPjaVcKxZg/vP4Sd5hoFb48RMY59lqOp2k+9kppVQ1o2z3
l1uDEUyrsJu8UPIiWP7n+sQC3SUadHo6pqNhwTJPelJmkD+Fs7w1cmqTTlR7KIy3
G8m5wJ92rwLe6Vd0KhruAKe4hx3SOm7ADkPVcIw1KiEL8PMSNV66Uq/ojU1mvJtY
iUxFGL/U7AgngemA1ZbUVsTpU/S/xuqrG7VfAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUq+Fh+p4MYYpLodA/KsNwDWStf8AwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvcS1GaC1wNE1ZWXBM
b2RBX0tzTndEV1N0ZjhBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAI+PBLR0rF+fargvv4RbdtDCidYh
pMvdjIe4z+GXC/mBWs5qrEsZN1UJ1//cB2N/2k2gK58K3UuLMBZCCxUY9HDyBjYv
8fDO7QLCyL1ofswTdNtTAm9+dpeTUO0SJybyZoXder4aT2NCSJZafBJtLbA34+JZ
UVOshdA3HIhexWZaZ7iB0KQHdu6NC1BMkF96FtuUxPlPH+ZxE+CMZ9z1k3t8kN5F
96zIwV4+fBNlxN0S2hEtVX3uPv/rH+ryT/6RfQntEJA1LzmRPgwtLY7dqGFMbIPX
xQzKZFqt1caMbygb1IRDtIamG8Ea9j/+Aaw1cvRHiC2lyNnaLMeNyzcAKVw=
-----END CERTIFICATE-----
Generated at Sun Jun 22 17:37:58 2025 by rpki-client