Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/3WJU1fwZ6S-xcSts_9grH95MUsc.roa
File: 3WJU1fwZ6S-xcSts_9grH95MUsc.roa (raw, json)
Hash identifier: hvlWbGyWZJpFSx2QOw3p4uCs4orPNoEckfeanvOJX5Q=
Subject key identifier: DD:62:54:D5:FC:19:E9:2F:B1:71:2B:6C:FF:D8:2B:1F:DE:4C:52:C7
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 22A6
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/3WJU1fwZ6S-xcSts_9grH95MUsc.roa
Signing time: Sat 07 Jun 2025 07:38:52 +0000
ROA not before: Sat 07 Jun 2025 07:38:52 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8870 (0x22a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 7 07:38:52 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DD6254D5FC19E92FB1712B6CFFD82B1FDE4C52C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:a7:af:23:7d:74:cc:26:f1:d7:70:7e:62:
00:3a:28:53:4d:e3:2d:75:6a:04:59:40:85:74:14:
9c:45:b8:fe:10:b9:0b:15:8a:d5:da:29:21:00:de:
82:74:cd:2f:22:0a:ce:d0:17:0c:40:14:32:3b:57:
75:6f:c7:53:ea:7c:50:36:19:46:11:31:14:89:15:
0d:b8:7b:07:ac:cb:5b:5c:69:10:cf:54:f7:53:66:
f7:6a:a3:0a:78:8f:59:55:df:1b:fd:3e:fb:94:ef:
59:f8:ed:1a:da:a4:83:ed:c8:e8:a2:c0:bd:c5:21:
29:a7:36:0f:98:f5:fd:dc:73:87:19:20:a2:e9:14:
2d:83:d2:7e:bf:f6:12:23:d2:02:3c:c5:eb:76:23:
22:6c:37:49:82:a3:68:9f:93:ee:65:0d:15:c8:9e:
d0:55:30:9b:80:50:5d:d3:82:6b:cd:e2:4f:26:4c:
4b:1d:93:e3:81:b2:50:0d:8b:33:30:72:f5:05:80:
49:f9:9f:72:41:e9:2c:56:cd:c4:92:cc:76:62:11:
12:1e:90:d0:7d:21:4d:e5:a2:7c:82:96:9e:f4:62:
53:b6:f4:0d:82:c3:6f:49:91:e3:29:c8:42:c0:3a:
f9:ff:11:52:a5:02:ee:71:44:0b:68:15:2a:4c:18:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:62:54:D5:FC:19:E9:2F:B1:71:2B:6C:FF:D8:2B:1F:DE:4C:52:C7
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/3WJU1fwZ6S-xcSts_9grH95MUsc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
1f:e5:44:47:91:9d:e4:57:93:4a:21:28:f9:63:eb:3a:c3:e0:
58:31:9f:3f:8d:a7:aa:8d:26:25:4b:14:a0:c4:20:54:ad:1a:
4b:4e:52:93:a0:09:b0:61:0e:1e:dd:09:66:95:60:c5:48:3e:
99:01:0a:73:64:3b:c1:ad:1f:55:11:45:b3:8a:de:ad:93:90:
de:63:39:e7:ab:39:f7:2a:fd:74:ee:c5:60:3f:59:1b:d3:aa:
32:a7:9e:6c:cb:4d:d9:2a:91:1f:6d:77:f4:f1:ca:fd:7a:d6:
70:31:26:21:68:04:ea:09:07:10:62:b9:aa:7f:a3:18:83:3d:
60:40:0a:3d:6b:0a:cd:1d:13:9f:b0:2b:53:e1:e1:aa:da:e1:
42:0a:dd:8c:39:aa:29:0c:47:f6:f7:6d:5d:9c:5d:96:90:b3:
39:a6:cb:30:d3:55:e4:51:0d:75:d7:98:5f:be:b6:dd:13:b8:
e4:87:be:a4:e8:02:74:45:79:08:74:a2:76:24:f9:08:be:3e:
9a:7d:6e:27:3e:2c:00:76:b1:6d:bf:7c:08:4b:38:cc:e9:38:
3f:30:73:a1:0c:a7:d2:87:6a:47:74:17:dc:dd:97:ed:74:48:
1c:3b:79:47:ee:61:16:e4:ec:3c:c4:ef:11:11:bb:01:fb:6f:
f0:3d:7f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:46:03 2025 by rpki-client