Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/qqtyeXAobdMAL3hkwbe2eQcasec.roa
File: qqtyeXAobdMAL3hkwbe2eQcasec.roa (raw, json)
Hash identifier: ANmYO3KMIZ+TRiFdLQd1kZlAOhfHvos/LDXgSFbovYE=
Subject key identifier: AA:AB:72:79:70:28:6D:D3:00:2F:78:64:C1:B7:B6:79:07:1A:B1:E7
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 22A7
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/qqtyeXAobdMAL3hkwbe2eQcasec.roa
Signing time: Sat 07 Jun 2025 07:38:53 +0000
ROA not before: Sat 07 Jun 2025 07:38:53 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8871 (0x22a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 7 07:38:53 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=AAAB727970286DD3002F7864C1B7B679071AB1E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:db:1d:26:e0:57:74:43:b4:65:56:ad:8e:81:
c7:1a:5f:2e:d2:04:29:8c:c8:66:e1:bd:d7:30:28:
8b:9d:39:f2:4c:0e:bb:3c:b2:7f:bb:dc:65:d6:8a:
03:07:8f:d8:ef:87:1c:f1:d2:ac:2a:f0:86:a5:ff:
51:9e:6c:8a:96:b2:d5:90:00:82:0c:94:5f:7d:df:
b6:37:06:c8:21:9f:fe:25:10:34:5b:21:8f:64:4c:
da:99:f4:84:f4:91:32:b4:b6:41:52:16:4a:83:09:
9b:16:de:84:69:33:36:b2:df:d6:90:e1:e3:c5:b2:
33:a0:24:5b:44:64:b3:10:6f:b6:81:0d:d8:f6:16:
cb:2b:49:3e:f8:15:b2:6d:a2:2d:69:b8:3d:ae:d0:
6f:8e:91:be:f7:7a:8e:90:e1:71:ed:b0:cc:14:e9:
13:1d:c7:1c:98:dc:42:79:a6:43:6a:70:bc:72:35:
6b:f9:e2:49:49:e5:53:cb:96:89:47:c9:fb:45:a7:
64:d5:42:34:fb:dc:d7:54:d5:dd:12:d8:ab:54:61:
b3:c6:8a:76:b3:ef:01:04:bf:f0:8f:78:e6:f0:9a:
91:b7:94:36:92:51:ab:79:a7:b8:86:45:56:3a:d7:
d4:a2:86:9a:c6:79:d2:d5:ce:2c:9b:a2:da:aa:3f:
01:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AB:72:79:70:28:6D:D3:00:2F:78:64:C1:B7:B6:79:07:1A:B1:E7
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/qqtyeXAobdMAL3hkwbe2eQcasec.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
c2:23:11:c8:d2:2b:57:54:22:d6:dd:cc:be:9f:10:c0:fb:9e:
40:fb:8c:ec:6d:9a:6e:a5:4c:19:bf:77:7e:15:f6:96:0e:e6:
61:d3:07:4a:76:b5:d8:54:59:84:30:a0:40:89:a2:1d:3e:40:
bb:95:ab:ad:00:06:cf:2a:d2:54:a6:9d:75:0e:0f:8b:59:b1:
08:81:54:b7:7b:e4:f1:3a:c7:61:a0:48:6f:81:1a:62:9c:79:
0e:a3:de:7a:92:d1:d8:fb:ad:01:d7:2b:c1:be:93:c0:a6:f7:
a6:ef:db:96:e3:91:05:77:8d:36:c5:89:5c:f9:7e:2b:3e:49:
a2:be:5a:b8:ac:0a:ff:5c:15:d2:4b:03:47:cd:04:0e:b3:6a:
7b:6b:5d:05:03:26:2a:bb:7e:db:46:55:32:2f:35:e6:5a:b7:
c0:5b:60:7f:bc:db:41:32:ae:ae:be:e1:9a:58:79:9b:35:97:
e2:98:ab:d5:b0:ce:0a:e1:a0:51:9c:4f:a6:6c:ef:67:e1:0e:
e5:74:16:f5:ea:6e:fc:70:86:e2:bc:3b:59:ca:10:34:f7:23:
e6:8d:52:82:e5:7e:01:8f:26:5c:c0:4f:97:77:c1:5b:29:fb:
20:66:d0:bc:68:10:91:06:93:49:c9:78:da:c1:f4:63:ff:fa:
3e:3e:08:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 08:39:10 2025 by rpki-client