Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/vucAsAkiEgVIGmX4c3WjXkyMp5A.roa
File: vucAsAkiEgVIGmX4c3WjXkyMp5A.roa (raw, json)
Hash identifier: ttESnUjce5dKXvHiB8t0+0dWkHoNJ3asHeIwVh2ue4I=
Subject key identifier: BE:E7:00:B0:09:22:12:05:48:1A:65:F8:73:75:A3:5E:4C:8C:A7:90
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2463
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/vucAsAkiEgVIGmX4c3WjXkyMp5A.roa
Signing time: Tue 10 Jun 2025 09:39:09 +0000
ROA not before: Tue 10 Jun 2025 09:39:09 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9315 (0x2463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 10 09:39:09 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BEE700B009221205481A65F87375A35E4C8CA790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:42:2e:86:a3:f2:ea:c1:1b:6f:3a:d6:12:
4e:0b:bb:94:1f:5a:7d:e4:31:a9:85:c3:f5:11:9f:
00:2b:e3:09:a5:a1:c6:02:ac:c5:08:90:df:59:52:
e5:18:5c:10:52:9f:f3:68:6c:5f:a9:c7:cd:24:3f:
cf:a9:7b:dd:40:0f:9c:f3:3b:2b:8f:cc:cb:b8:a3:
96:ed:08:87:4e:30:da:29:8c:9b:b4:b1:69:78:71:
81:21:5c:67:32:61:36:d7:33:e6:ef:f5:d6:8e:ce:
fa:cb:ef:38:52:e3:de:9d:62:2c:45:fe:ec:bd:60:
49:52:df:7a:03:77:4a:38:09:1e:2c:15:f9:6c:91:
d2:19:77:a8:5f:58:8b:00:7e:da:23:54:66:d3:14:
f3:0e:ad:11:90:87:d8:7d:40:fb:4b:a9:f1:38:a3:
eb:95:82:b9:4b:b4:0e:be:d1:57:24:3b:f3:bd:8f:
59:c5:83:5b:bd:ef:78:0d:ad:1b:bc:fd:2e:d6:b5:
9a:83:09:30:fe:22:24:1d:80:53:25:ed:42:92:23:
78:0a:ec:55:9c:f1:df:cc:39:2f:22:82:ed:50:fa:
48:e7:df:51:71:b1:a3:43:fd:18:98:e9:a5:b3:fd:
61:4e:75:f0:fe:3b:07:73:9f:4e:0e:c6:0f:1d:b0:
a0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E7:00:B0:09:22:12:05:48:1A:65:F8:73:75:A3:5E:4C:8C:A7:90
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/vucAsAkiEgVIGmX4c3WjXkyMp5A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
56:1d:26:c8:75:c3:2b:88:a6:14:5b:f7:4a:c5:22:18:8f:30:
b6:0e:fe:97:a0:0f:5f:34:ae:26:23:df:8a:34:46:60:59:2c:
82:d7:18:db:ec:65:4b:e9:33:24:f0:70:6a:7c:29:93:d3:53:
d6:3a:b8:e9:62:8c:73:3f:f6:bc:26:fe:6f:f8:eb:9b:64:00:
3d:ab:7d:e9:74:89:2a:0e:68:2a:c1:c7:91:29:ba:42:48:21:
ca:39:af:51:51:a8:df:45:df:c8:ca:e3:5f:8e:31:79:ca:0a:
19:5e:b0:35:71:99:07:bc:fa:4e:b9:03:6a:94:9b:c8:d5:ce:
db:17:68:61:8d:95:3a:d5:26:46:7c:a2:d3:7a:b1:e0:91:ed:
65:da:8c:36:37:a6:c7:c6:e6:e3:4e:c3:e5:43:4f:40:95:0a:
bf:c0:56:3e:2c:57:9f:f3:fc:25:bc:d6:04:52:71:2e:98:74:
01:6a:a8:44:02:c9:69:7e:2f:e7:9f:25:9f:0f:c4:3a:89:c2:
79:3b:70:4c:54:50:c2:c7:bd:3c:fa:58:bd:a6:78:a8:b2:9b:
8c:df:0f:d9:b7:e7:47:d3:e1:98:1c:f2:41:b7:8a:18:a1:83:
99:a9:c3:7d:24:6f:17:0e:a8:1d:0e:60:34:ee:08:58:74:57:
04:35:25:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 06:04:17 2025 by rpki-client