Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/DTnNgjJzJHFSJbKKzQlpgy-RcLk.roa
File: DTnNgjJzJHFSJbKKzQlpgy-RcLk.roa (raw, json)
Hash identifier: SSX8eECWViR2X3m8lf3cSxKsM6aVTO7Q9CcKBcTPaPA=
Subject key identifier: 0D:39:CD:82:32:73:24:71:52:25:B2:8A:CD:09:69:83:2F:91:70:B9
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 7774
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/DTnNgjJzJHFSJbKKzQlpgy-RcLk.roa
Signing time: Wed 05 Nov 2025 12:42:57 +0000
ROA not before: Wed 05 Nov 2025 12:42:57 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30580 (0x7774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Nov 5 12:42:57 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=0D39CD82327324715225B28ACD0969832F9170B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ec:21:fa:b6:af:44:24:5c:29:d2:e9:0d:20:
b8:5d:0a:e2:0b:8f:aa:81:58:a0:da:92:48:cd:67:
19:91:cd:45:fd:64:af:7e:79:2a:4a:61:91:26:f1:
47:55:5c:fe:e4:2f:50:5c:ff:ba:ba:2c:f5:ac:c2:
dd:00:bf:11:a2:df:c7:74:67:3b:78:16:67:3e:68:
41:32:66:5d:91:d2:4c:e6:03:cc:b6:c8:59:38:30:
cf:c8:2a:cd:b1:75:cb:c6:d3:64:aa:5a:43:64:28:
ca:88:e2:40:7f:9d:85:bd:99:a2:3c:15:2e:42:f7:
a8:ab:67:8d:89:c0:ed:40:92:79:7f:4c:be:7f:51:
fa:ee:e3:59:bc:e6:99:67:3b:c2:28:35:a1:f6:ac:
21:d6:77:cf:56:21:5b:05:a6:51:ee:08:e5:ba:03:
0e:26:c8:a2:d1:ba:6a:11:af:3c:b7:cc:83:43:75:
aa:4f:a2:0f:13:e4:90:a6:52:59:25:44:42:dc:c1:
02:2f:16:82:3d:4f:f3:18:52:c5:5e:e1:ad:38:8a:
38:39:71:ef:88:05:bc:48:68:69:1f:f8:89:8e:02:
16:05:e2:14:bc:c8:0a:52:bb:71:e5:6c:92:4d:b8:
2d:54:4a:e3:1c:b4:2e:4f:dd:4e:25:2e:ac:de:e9:
54:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:39:CD:82:32:73:24:71:52:25:B2:8A:CD:09:69:83:2F:91:70:B9
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/DTnNgjJzJHFSJbKKzQlpgy-RcLk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
01:71:6a:c5:be:64:37:52:80:c8:66:5b:e5:ac:81:ae:f6:4f:
5d:20:13:66:fb:8e:28:11:fa:df:3b:b1:c9:78:31:02:c9:69:
06:20:1b:8a:de:23:d9:41:2d:5d:8e:af:37:b7:26:c3:b3:54:
e7:dc:92:b1:b9:86:c3:d6:8d:1b:83:60:cb:99:f9:5d:f7:9c:
82:88:78:6b:d8:63:ed:63:c8:1e:81:ee:74:3d:04:f7:30:83:
c2:1b:b5:11:6a:57:0e:19:c5:a1:ff:f2:1d:7a:18:9e:34:6e:
8f:89:0b:24:e0:d4:97:41:61:7e:c8:95:b1:6a:2c:01:4e:17:
01:23:56:d6:b7:06:08:bb:93:f8:32:92:d3:67:24:b3:88:b3:
62:9a:a7:f0:fb:38:e4:01:69:60:3e:21:d8:a7:1c:02:c9:6f:
5d:5b:7c:2e:5e:dc:f7:d5:56:3a:ed:e0:8a:8a:82:82:cc:a0:
be:74:b7:54:ec:2c:f2:9a:86:85:d8:b8:15:4f:09:46:04:29:
76:5f:12:63:1d:c4:86:c1:7f:e0:44:a1:9d:89:88:8a:33:ea:
59:e9:95:c1:c7:f5:6e:ca:0e:aa:25:b1:a0:ed:a1:ea:33:6f:
df:23:f4:71:b1:49:d1:2c:5f:d9:a6:b2:e8:4f:cf:0f:3e:4a:
49:c0:80:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:59:45 2025 by rpki-client