Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/FW1U104xm4gSyaiwPYMl_CQH774.roa
File: FW1U104xm4gSyaiwPYMl_CQH774.roa (raw, json)
Hash identifier: uBLXckq6LrKDOty1lJby8v9WZ23T0Mc3kNgg6UhiwCw=
Subject key identifier: 15:6D:54:D7:4E:31:9B:88:12:C9:A8:B0:3D:83:25:FC:24:07:EF:BE
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2514
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/FW1U104xm4gSyaiwPYMl_CQH774.roa
Signing time: Wed 11 Jun 2025 15:09:13 +0000
ROA not before: Wed 11 Jun 2025 15:09:13 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9492 (0x2514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 11 15:09:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=156D54D74E319B8812C9A8B03D8325FC2407EFBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:e0:6f:df:8f:d7:2e:c2:bc:85:10:07:35:
07:56:7d:0e:9e:19:db:6f:d2:ca:0a:26:db:65:8c:
9c:6a:2e:35:ce:ec:39:24:ea:ba:16:51:f8:6b:23:
1a:2f:db:29:38:28:33:82:df:e0:b3:4e:16:fd:b4:
de:e9:ef:51:49:21:8b:39:3d:5e:00:93:4b:ce:db:
fc:80:de:ee:10:68:1b:de:20:00:41:74:11:01:10:
0f:56:85:7d:3b:1d:e5:a8:00:41:90:11:5e:96:dd:
eb:d8:61:88:13:80:63:be:48:f3:5c:67:c9:e7:1f:
bb:af:74:e0:d8:60:21:d9:8b:4d:39:0c:b2:d1:7e:
ce:6c:5e:19:a2:09:41:5d:d9:4b:89:5b:39:1e:66:
5a:a9:20:93:ad:e6:fc:bf:b9:7f:9a:46:5b:1b:8c:
ae:b6:52:56:8c:8e:d5:97:1a:d2:12:11:f5:97:6a:
c4:2d:39:4b:ed:47:50:cb:fb:d9:88:5f:62:b4:81:
8d:b2:b7:17:69:27:40:6a:7e:cf:23:13:ec:2d:27:
00:b5:b3:08:ae:7e:0a:f6:a2:61:c8:2b:62:e2:41:
6a:db:0d:c7:69:7a:0c:a4:6d:eb:70:ef:c3:49:6a:
05:1d:07:34:04:ee:42:48:3b:7c:36:49:de:0c:c7:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6D:54:D7:4E:31:9B:88:12:C9:A8:B0:3D:83:25:FC:24:07:EF:BE
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/FW1U104xm4gSyaiwPYMl_CQH774.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
b9:2a:e5:14:0a:b7:97:ba:4e:88:89:d1:92:66:23:fe:52:63:
ba:d7:ef:da:c4:e9:59:57:c3:ec:16:4b:a9:c9:91:68:b6:f5:
1a:b2:d5:68:1c:45:ac:54:b7:9d:ee:04:30:02:60:dd:b8:99:
6f:e0:25:16:b5:c6:5a:1a:74:c0:a2:6d:94:df:ac:69:01:8d:
6c:b9:b5:26:72:ec:f1:13:71:3b:30:ed:28:68:db:b9:f2:40:
5d:b0:75:b6:20:38:94:30:92:29:33:65:c1:0d:60:0b:29:e4:
05:fb:1a:8a:09:95:b3:bc:13:b2:47:0c:d6:50:c1:89:d6:5c:
78:6a:bf:d6:43:f7:db:e0:71:e3:b3:1c:dd:89:ea:a2:07:47:
d3:2e:16:55:b2:74:f4:59:eb:f8:6b:88:3e:bc:74:6c:35:08:
2c:52:7a:09:e1:1a:e6:ce:fd:eb:97:02:5c:58:e4:af:ae:0b:
53:19:1a:a3:44:0a:10:3a:78:6e:cf:b6:fc:6e:ca:bd:99:a5:
19:b7:f4:23:8b:a9:58:01:72:a7:db:bd:93:b1:0f:22:f4:a6:
4b:ee:b9:4d:93:37:26:bc:71:7f:c0:a1:28:db:33:52:e3:2f:
97:6b:d2:7a:17:90:ae:87:12:19:fe:92:67:93:b8:f2:07:b4:
e5:e9:b8:4f
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICJRQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTEx
NTA5MTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDE1NkQ1NEQ3NEUzMTlC
ODgxMkM5QThCMDNEODMyNUZDMjQwN0VGQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiwOBv34/XLsK8hRAHNQdWfQ6eGdtv0soKJttljJxqLjXO7Dkk
6roWUfhrIxov2yk4KDOC3+CzThb9tN7p71FJIYs5PV4Ak0vO2/yA3u4QaBveIABB
dBEBEA9WhX07HeWoAEGQEV6W3evYYYgTgGO+SPNcZ8nnH7uvdODYYCHZi005DLLR
fs5sXhmiCUFd2UuJWzkeZlqpIJOt5vy/uX+aRlsbjK62UlaMjtWXGtISEfWXasQt
OUvtR1DL+9mIX2K0gY2ytxdpJ0Bqfs8jE+wtJwC1swiufgr2omHIK2LiQWrbDcdp
egykbetw78NJagUdBzQE7kJIO3w2Sd4Mx0wlAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUFW1U104xm4gSyaiwPYMl/CQH774wHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvRlcxVTEwNHhtNGdT
eWFpd1BZTWxfQ1FINzc0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBALkq5RQKt5e6ToiJ0ZJmI/5SY7rX
79rE6VlXw+wWS6nJkWi29Rqy1WgcRaxUt53uBDACYN24mW/gJRa1xloadMCibZTf
rGkBjWy5tSZy7PETcTsw7Sho27nyQF2wdbYgOJQwkikzZcENYAsp5AX7GooJlbO8
E7JHDNZQwYnWXHhqv9ZD99vgceOzHN2J6qIHR9MuFlWydPRZ6/hriD68dGw1CCxS
egnhGubO/euXAlxY5K+uC1MZGqNEChA6eG7Ptvxuyr2ZpRm39COLqVgBcqfbvZOx
DyL0pkvuuU2TNya8cX/AoSjbM1LjL5dr0noXkK6HEhn+kmeTuPIHtOXpuE8=
-----END CERTIFICATE-----
Generated at Sat Jun 21 18:39:11 2025 by rpki-client