Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/l397_Ud-rrBqvVSdgfAB798_ZGs.roa
File: l397_Ud-rrBqvVSdgfAB798_ZGs.roa (raw, json)
Hash identifier: bIFzukbi5rtwnBKBUL+OEcmSzSH9QjLbm9eFAJVPj20=
Subject key identifier: 97:7F:7B:FD:47:7E:AE:B0:6A:BD:54:9D:81:F0:01:EF:DF:3F:64:6B
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 20B5
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/l397_Ud-rrBqvVSdgfAB798_ZGs.roa
Signing time: Tue 03 Jun 2025 20:38:39 +0000
ROA not before: Tue 03 Jun 2025 20:38:39 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8373 (0x20b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 3 20:38:39 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=977F7BFD477EAEB06ABD549D81F001EFDF3F646B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:d2:d1:0b:55:53:a1:da:d5:13:6d:a7:a6:
1c:39:e2:0f:4f:e0:4c:5d:a8:bd:45:ff:36:45:e6:
9c:eb:c3:5a:e3:92:81:b1:23:37:43:67:7d:58:26:
cf:9c:8a:3b:98:6a:e5:e9:d4:8b:b1:94:72:67:ba:
25:9d:87:5f:2a:8b:eb:60:fb:e7:fd:1a:5c:94:13:
36:ae:39:af:3e:1b:35:51:2c:ba:ff:45:ca:5d:5b:
5e:ee:f9:01:36:f1:00:12:32:87:4c:7c:3c:c2:14:
b6:76:65:78:68:ac:af:4d:ef:e8:80:fe:fb:28:98:
d9:28:3e:8e:b3:1f:d2:59:88:00:95:ba:1f:9c:d9:
9e:2d:dd:a2:eb:0c:15:46:0f:01:30:23:38:80:3a:
8b:a6:3c:dd:a2:9f:a2:76:97:18:bd:18:11:53:c1:
52:a4:fd:b5:9c:b6:d9:f4:ee:fa:c4:36:b6:17:af:
0c:19:8e:55:7d:3f:0d:ff:cc:0a:a8:83:ba:3e:86:
85:b1:8b:bb:ff:7e:18:8a:10:b0:95:2b:90:b7:35:
dd:ae:7a:44:b0:b9:1e:01:57:7a:42:43:80:99:f0:
04:35:40:c0:7f:65:4e:50:30:2a:f6:8a:63:98:47:
0a:b6:23:b7:c3:4a:c9:bd:85:bd:d8:aa:7b:df:e2:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7F:7B:FD:47:7E:AE:B0:6A:BD:54:9D:81:F0:01:EF:DF:3F:64:6B
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/l397_Ud-rrBqvVSdgfAB798_ZGs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
67:a2:7c:e5:24:a3:98:34:86:46:ee:b3:79:5a:8f:6b:8a:44:
22:60:37:53:ce:c8:dc:6d:f1:67:70:40:d1:1e:39:25:0d:9d:
e0:33:b6:13:d3:2f:53:c9:38:84:4e:76:86:ab:c1:9a:2f:44:
98:1b:ed:e9:41:07:ca:0a:a5:e0:e9:65:5a:72:b0:45:b1:e1:
b0:fe:70:fd:1c:b5:65:ce:5a:d8:c3:86:3e:af:a1:ad:82:04:
ce:1e:e7:19:79:77:4f:6b:71:b6:34:0c:68:1b:ba:b5:24:2e:
b5:e0:f3:c5:34:e3:8b:b7:4c:ad:48:7a:2a:c6:1c:bc:e3:16:
67:5a:dd:61:01:58:b5:00:19:84:74:c4:6b:bb:f9:91:02:f5:
92:9b:39:4f:63:77:8c:f8:f2:e8:f2:2b:05:72:3f:56:9e:94:
3e:89:6d:fd:dd:ee:03:1f:93:59:90:b5:0a:21:93:5f:ec:d7:
92:c8:eb:c7:3b:f9:d3:1d:17:b4:f1:f2:40:ba:6e:96:7e:ad:
2e:ee:be:8e:63:11:12:29:ea:15:01:b2:ee:e2:fd:89:e5:a7:
40:39:60:8f:2e:67:2f:56:c1:3b:14:bd:34:20:62:41:18:aa:
31:a3:e0:38:14:c3:d2:b8:ce:e0:df:45:3d:e9:3e:87:da:f9:
2e:d9:09:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:41:25 2025 by rpki-client