Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/uZZUvm1o_pRelolglCJzEIWsInU.roa
File: uZZUvm1o_pRelolglCJzEIWsInU.roa (raw, json)
Hash identifier: 2szmnmkRIywV1QZgun0ipFTozgczroe/eRRvtRqGlzw=
Subject key identifier: B9:96:54:BE:6D:68:FE:94:5E:96:89:60:94:22:73:10:85:AC:22:75
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 23C0
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/uZZUvm1o_pRelolglCJzEIWsInU.roa
Signing time: Mon 09 Jun 2025 06:38:59 +0000
ROA not before: Mon 09 Jun 2025 06:38:59 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9152 (0x23c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 9 06:38:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B99654BE6D68FE945E9689609422731085AC2275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:24:7d:e3:37:49:7b:7e:41:25:8b:28:41:28:
c9:51:77:31:26:ac:3c:43:af:0a:3f:25:17:c9:02:
dd:a9:22:7a:28:a8:d7:d3:6f:9a:1a:7c:b8:f5:12:
1e:d6:bd:4e:37:85:39:9b:77:2e:3b:27:77:a3:c4:
b9:36:3f:e2:ad:c0:79:b1:8d:83:f7:12:d0:05:ba:
f3:4b:54:84:e8:8c:68:40:36:58:f4:e0:52:3f:79:
71:ba:d5:88:e2:26:b8:77:db:6f:9e:33:4e:dd:a0:
4f:86:ca:8d:41:0a:a5:42:6c:87:8d:ee:b4:b7:89:
d5:48:ab:a1:d0:4c:c3:87:36:68:7a:e0:65:eb:5c:
f7:77:99:74:95:d3:52:30:e3:a2:59:6c:75:b0:f6:
a2:d8:34:70:6f:14:23:2f:97:55:dc:63:7d:11:f8:
7f:96:1e:ea:62:a5:22:07:a3:6c:f1:bb:3f:21:8c:
60:f7:5b:a2:f5:6f:1e:19:ac:8a:f8:e6:7e:81:09:
f3:83:6d:79:2d:7b:5c:e0:a7:a8:df:f9:3f:e5:a9:
5a:7d:b2:68:37:fc:e5:aa:2e:a4:07:71:a6:3d:22:
4f:61:90:2b:5d:4e:33:d3:58:ba:c0:d4:8c:6d:77:
25:8a:d8:41:5f:3c:26:f2:59:18:c2:4a:28:f9:de:
ac:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:96:54:BE:6D:68:FE:94:5E:96:89:60:94:22:73:10:85:AC:22:75
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/uZZUvm1o_pRelolglCJzEIWsInU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
47:3a:d6:03:a6:4c:c4:28:89:05:1c:e3:a7:75:fa:3e:f4:bf:
86:0d:79:76:6b:26:f4:21:fc:25:b3:01:c9:af:dd:cd:43:3d:
26:90:c5:e5:30:e3:cc:28:a7:bb:e3:8a:94:c2:b8:d8:50:d2:
16:50:9f:a8:4c:72:e2:ee:37:ef:3e:32:53:d4:f8:e7:a1:a7:
1b:4c:6c:76:ef:41:bf:3d:24:42:ba:1e:a5:1b:bb:62:30:6c:
94:0a:45:b4:e3:90:1c:dd:bf:7e:8f:c9:54:37:bf:66:18:b1:
d9:b2:bb:94:57:0a:74:a7:b5:97:66:1a:eb:55:9e:a4:2c:aa:
0c:5b:b4:d4:95:d2:0a:2f:d4:22:d6:69:e8:da:a3:2b:84:f7:
d3:9d:86:76:b1:22:30:27:6a:c9:22:23:72:6c:9e:60:fe:ff:
b5:15:53:32:d4:4e:f4:1d:48:73:60:b7:0a:39:e8:b1:a8:e7:
c2:e6:74:5c:06:2d:39:62:c7:57:dd:54:4d:61:be:1e:88:2c:
ab:0a:cb:ef:66:e3:53:9d:2c:82:ff:85:7b:9f:92:91:30:55:
45:42:f2:19:84:0d:24:94:79:6c:95:0e:4c:dd:d6:a3:e3:3c:
ff:dc:ee:a0:33:ee:66:bc:51:c0:a8:81:2b:8e:8f:fa:aa:07:
12:3b:f7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 14:24:20 2025 by rpki-client