Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/W_G2IoWh6tjJRDpF0-ihZIZwAo0.roa
File: W_G2IoWh6tjJRDpF0-ihZIZwAo0.roa (raw, json)
Hash identifier: apLBTNlmWBXQTJx+gqsL1g5NZfUTqXF8tnnuyQykUMk=
Subject key identifier: 5B:F1:B6:22:85:A1:EA:D8:C9:44:3A:45:D3:E8:A1:64:86:70:02:8D
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 26C3
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/W_G2IoWh6tjJRDpF0-ihZIZwAo0.roa
Signing time: Sat 14 Jun 2025 15:09:18 +0000
ROA not before: Sat 14 Jun 2025 15:09:18 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9923 (0x26c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 14 15:09:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5BF1B62285A1EAD8C9443A45D3E8A1648670028D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:31:c4:f6:d9:14:6f:14:5d:15:2e:82:74:
38:af:5e:78:9d:05:59:45:96:1e:8c:fc:04:33:1c:
9f:01:9d:38:0e:d1:81:2d:d6:2a:eb:75:7d:60:57:
7f:96:75:78:05:f0:00:21:e1:25:a7:1b:f1:6f:78:
a6:bb:c3:64:7a:e1:69:4a:0c:ad:7c:da:d7:14:ae:
a8:7c:cb:3d:6b:f5:c5:e0:a1:9e:71:14:c5:aa:7e:
ef:39:c4:84:7f:32:55:40:6e:e8:de:ec:68:a4:5c:
40:78:58:62:3d:e8:82:bc:46:68:75:37:68:e8:68:
39:c3:b1:71:20:03:58:61:9d:34:7d:05:9a:33:ac:
89:92:dc:02:a4:7e:4c:8a:f5:8c:b5:f0:bf:91:c7:
b6:83:d8:fa:32:e7:f6:08:7b:25:02:e8:a4:73:c6:
92:84:aa:c3:4d:47:52:f7:f8:6b:7c:22:8d:57:72:
ee:aa:5e:0d:73:f3:ac:ad:96:7e:70:42:f4:e9:a6:
0c:93:1f:44:64:73:83:04:fa:f1:7b:bd:64:e8:a1:
13:e9:b1:6a:e7:05:cd:00:98:ed:04:89:9c:12:3a:
e3:88:ee:72:ac:b1:2e:8d:2c:41:00:bf:b7:3b:9d:
91:12:b1:3f:dc:2e:a6:e1:28:e9:db:90:70:18:5a:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F1:B6:22:85:A1:EA:D8:C9:44:3A:45:D3:E8:A1:64:86:70:02:8D
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/W_G2IoWh6tjJRDpF0-ihZIZwAo0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
2a:af:f5:14:4d:e5:53:f2:86:61:8a:e0:2d:d0:34:08:07:94:
a7:74:98:8c:f7:c4:bd:d8:66:b9:58:f5:68:77:12:85:4f:ef:
5f:f3:90:33:3c:f3:b8:18:41:93:f7:c4:86:55:90:f7:e8:e7:
1c:c4:3a:b7:09:29:84:02:b6:2e:43:21:8b:ec:fa:07:5e:ff:
f7:2e:54:3a:d8:7b:24:94:af:00:c5:b9:d9:9d:eb:96:b5:63:
65:ae:dd:aa:15:06:07:7e:ec:08:a4:05:15:a7:ea:fd:2a:43:
36:2e:ef:fc:68:f3:50:c6:20:d6:73:ba:4b:7b:57:96:49:00:
69:30:68:f3:e2:69:1d:84:fa:ca:e7:fd:61:a7:c2:f1:7c:7b:
6d:4b:7c:9f:39:9d:b9:d9:dc:7c:a3:f6:b2:fd:c9:fd:b4:a5:
f2:b8:74:1d:e6:66:c9:36:3c:69:f0:0b:9f:02:16:d8:ee:65:
90:9b:4e:6d:80:35:ac:57:e2:23:c7:bc:ff:68:8f:d0:cf:23:
83:81:d2:d7:5f:48:0e:a0:96:3e:34:1c:91:7c:27:8a:70:d5:
b5:df:de:95:51:4e:0d:e6:13:b6:f0:fd:43:9c:20:dd:fb:2f:
e2:cb:56:d4:95:90:76:eb:8a:6f:3a:fd:43:08:19:66:c7:1d:
e3:32:0e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 03:20:47 2025 by rpki-client