Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/KkcNkIAPJNrrc9b5LNlG3JXLuPk.roa
File: KkcNkIAPJNrrc9b5LNlG3JXLuPk.roa (raw, json)
Hash identifier: Eb2Zl03VCeQOZVWXetm4Nmpibl1jvly0jIy1ZuiDk8c=
Subject key identifier: 2A:47:0D:90:80:0F:24:DA:EB:73:D6:F9:2C:D9:46:DC:95:CB:B8:F9
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 23DF
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/KkcNkIAPJNrrc9b5LNlG3JXLuPk.roa
Signing time: Mon 09 Jun 2025 11:39:01 +0000
ROA not before: Mon 09 Jun 2025 11:39:01 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9183 (0x23df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 9 11:39:01 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2A470D90800F24DAEB73D6F92CD946DC95CBB8F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fe:95:e2:b1:72:ba:5b:0c:a4:90:e3:14:f5:
97:4a:70:15:94:ea:3c:d7:42:ac:e1:e6:76:ad:58:
8b:6a:46:12:34:8e:3e:8a:0a:a8:54:ba:4c:2a:f3:
64:f3:a6:ef:2c:e5:2e:b6:88:45:aa:a4:c5:ba:b9:
b1:81:79:93:f5:63:fd:9b:9d:a6:12:64:b4:8a:24:
75:4b:74:3d:e0:2e:ad:54:58:88:85:1d:38:e6:94:
32:5f:15:8e:2a:74:1c:37:35:14:09:1e:a8:5f:24:
2e:08:da:30:c0:c0:a4:35:5b:fd:e7:4d:b7:73:0f:
59:bf:61:04:9c:b2:d4:52:9a:05:13:7b:a2:d0:73:
a1:13:1d:b8:46:45:9d:60:02:71:15:67:5f:fb:79:
23:5e:34:0d:80:ff:73:0b:87:28:71:4a:7f:4a:72:
74:84:04:2f:b9:36:33:62:a1:4d:54:bc:f0:50:86:
99:b2:88:3f:a0:67:79:06:6f:56:95:82:ac:88:9d:
eb:eb:4a:7c:7b:d7:96:56:15:8a:87:1b:2a:4e:cd:
c8:ad:e3:29:8b:04:ec:60:e2:f5:5d:fb:7a:2b:c0:
3f:9c:3b:61:46:44:22:27:6f:e4:ba:43:e7:d8:03:
ba:1a:d3:3d:13:d9:09:45:01:5c:51:6e:fe:9f:04:
8a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:47:0D:90:80:0F:24:DA:EB:73:D6:F9:2C:D9:46:DC:95:CB:B8:F9
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/KkcNkIAPJNrrc9b5LNlG3JXLuPk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
44:56:e8:fc:5e:e9:75:54:b0:1d:7d:96:d4:fa:62:96:33:2b:
31:97:0f:4f:74:14:5f:96:4d:54:45:b0:0a:d5:9b:8b:b2:ae:
30:44:0e:82:98:95:56:ca:97:b8:92:94:19:51:4d:47:f6:0b:
ec:7b:18:6e:62:8b:fb:8f:97:05:33:32:d9:46:f5:00:e6:33:
f2:6f:df:d5:af:a3:bc:e3:bc:4e:00:5e:25:d8:5f:7d:4c:7e:
a2:ba:b8:6a:2d:37:7d:10:01:94:6e:2b:6d:99:16:68:6e:6e:
fd:0d:6b:6f:c8:8f:88:26:97:ac:40:8c:05:79:f0:02:37:95:
fe:52:63:fc:9d:32:f2:ff:ab:f6:e9:ec:e5:b4:4f:a1:93:6b:
84:0a:62:e0:0a:53:2b:9e:e5:71:d1:09:45:d4:19:c8:84:37:
79:4d:66:3c:b3:87:95:7d:1d:e2:a0:2f:e9:db:10:32:40:5b:
e1:11:25:d8:63:d0:3d:ea:75:af:a0:d0:9f:f4:4a:0e:a8:9b:
47:91:5a:47:b1:87:10:c1:ca:e2:80:3e:61:94:43:6a:a7:4b:
03:a3:53:6d:d6:c2:65:a5:f8:2b:0a:4e:ff:7b:e0:c4:53:41:
b0:d9:1d:8f:83:0c:01:7b:d8:ec:da:b4:a5:6a:6d:99:dc:38:
e4:e8:ad:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 14:42:10 2025 by rpki-client