Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/Nfvs559FLLilYUSNnFEJfoYeRcA.roa
File: Nfvs559FLLilYUSNnFEJfoYeRcA.roa (raw, json)
Hash identifier: UglrT/q1WkLv05PUpaikvxPJJhJqy3ekZ51S6xBzsSM=
Subject key identifier: 35:FB:EC:E7:9F:45:2C:B8:A5:61:44:8D:9C:51:09:7E:86:1E:45:C0
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1F5E
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Nfvs559FLLilYUSNnFEJfoYeRcA.roa
Signing time: Sun 01 Jun 2025 11:38:37 +0000
ROA not before: Sun 01 Jun 2025 11:38:37 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8030 (0x1f5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 1 11:38:37 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=35FBECE79F452CB8A561448D9C51097E861E45C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:cb:af:54:ab:24:fa:54:3c:98:e0:46:d3:
73:12:f4:cc:45:92:ab:e0:34:89:43:6c:e1:6d:8d:
7b:00:20:82:4a:ed:1a:1e:1e:8c:d9:2b:27:cc:1b:
ce:b7:97:0a:6d:d3:68:e7:cb:9d:c4:95:2e:8d:d2:
4f:cf:2f:bc:01:b9:16:8e:dc:1d:25:f2:c9:d2:3a:
3c:17:98:f1:c5:27:8f:40:03:72:9f:56:6e:46:55:
ab:9f:b0:a7:33:44:96:40:e0:e1:16:7b:ea:d4:32:
c8:dd:84:04:29:f5:ee:cc:6b:26:9b:64:58:e7:78:
c7:e2:5b:a6:bc:5e:8f:51:e2:80:9d:f3:ab:48:2d:
50:67:83:a3:a5:a5:96:1f:ea:61:e0:9a:ea:e4:6e:
88:fc:ea:06:7f:71:da:ed:a4:69:f3:82:d2:9b:59:
4d:70:40:aa:99:80:c4:fd:1a:97:4e:54:25:a8:af:
88:31:74:78:62:b9:66:06:ee:4b:37:da:ff:93:22:
5d:57:44:b1:f5:f4:27:14:87:2c:81:28:79:da:bb:
6f:75:0e:fb:c8:59:1c:99:6c:dc:ac:ee:a1:60:65:
9d:79:d9:f8:c3:6b:74:f3:ce:66:1a:7f:c1:06:49:
e1:8f:5f:43:9e:da:8f:a2:a0:96:64:fe:0a:7f:d5:
d2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FB:EC:E7:9F:45:2C:B8:A5:61:44:8D:9C:51:09:7E:86:1E:45:C0
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Nfvs559FLLilYUSNnFEJfoYeRcA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
27:ea:51:06:72:63:b7:ea:82:29:94:dc:88:bf:16:da:a2:5d:
5e:17:78:56:47:d0:82:9c:66:71:ec:9f:82:11:a5:15:f1:b1:
2c:e1:83:9f:51:c5:1e:00:e2:32:5b:43:e9:c4:26:78:10:92:
aa:81:2d:14:26:79:6a:f3:c6:9d:92:8c:7d:b1:06:ae:ca:f2:
fc:cf:d2:39:fb:5c:71:19:19:6e:8e:b0:28:cb:1d:5a:1e:79:
55:4f:dc:e2:2d:27:01:bd:50:fc:7b:78:54:bf:e8:f4:25:8c:
81:cd:27:81:bd:a6:1f:33:b1:d1:63:78:d6:76:61:78:10:6d:
60:57:ae:3c:dd:40:a8:2a:be:5e:91:15:43:81:ee:03:e5:07:
8d:e6:c6:69:73:86:6c:91:bf:b8:5e:c9:b2:45:5c:e5:80:96:
95:42:32:cb:d3:b1:e7:b2:cd:30:f8:8d:0a:74:90:98:b1:c7:
0f:3e:61:d9:dd:ca:08:26:7d:3e:13:5e:23:2a:f7:2a:a4:bf:
61:84:3f:58:87:77:fa:af:69:ce:41:be:3f:33:d9:85:83:96:
2d:98:7c:2b:ab:9b:10:21:c5:e0:27:5d:2d:ac:e4:3c:7a:5d:
35:69:53:17:5e:c4:58:1c:6b:2d:b8:5f:c2:1b:5a:e3:dc:78:
a3:05:d1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 08:10:10 2025 by rpki-client