Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/nXjTBe8C_u8G5FHO1Ppsgvh3SFo.roa
File: nXjTBe8C_u8G5FHO1Ppsgvh3SFo.roa (raw, json)
Hash identifier: CYoFaJ3X0ePbOuzvRE36tQ1tQiZKiK6JMXBawuZCti8=
Subject key identifier: 9D:78:D3:05:EF:02:FE:EF:06:E4:51:CE:D4:FA:6C:82:F8:77:48:5A
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 233D
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/nXjTBe8C_u8G5FHO1Ppsgvh3SFo.roa
Signing time: Sun 08 Jun 2025 08:38:56 +0000
ROA not before: Sun 08 Jun 2025 08:38:56 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9021 (0x233d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 8 08:38:56 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9D78D305EF02FEEF06E451CED4FA6C82F877485A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:69:d4:2f:c0:b5:5c:e5:dc:8c:f6:0e:bc:
fb:f5:3d:f9:01:8b:de:9f:2a:cb:00:2d:e6:49:d3:
e5:c5:4a:70:09:1e:1e:1b:6a:ce:57:32:ab:9a:05:
90:e5:05:60:10:90:1f:d3:e7:1c:95:56:0c:72:17:
e1:95:5d:77:3d:d1:f3:aa:13:9a:18:70:c9:e5:48:
8d:eb:84:79:5e:6b:45:2a:a0:3a:4e:ca:25:19:3a:
a0:5b:0b:dd:34:33:0e:37:98:b6:7d:4c:ca:2e:80:
64:71:60:a7:94:06:a2:a5:36:c3:fe:7f:2d:24:ca:
3d:6a:87:eb:1b:cd:16:cf:18:fc:6b:ee:67:20:80:
23:6e:01:8d:fd:e3:4e:d3:fb:a0:ef:b5:2b:df:f3:
6c:3a:ba:20:23:97:29:70:d8:e2:a3:3a:02:6f:e3:
89:dd:4c:7a:27:a1:b1:a0:62:64:73:dc:f2:c8:4e:
40:81:d0:5c:1f:82:cf:85:0f:f7:54:21:db:20:05:
f4:0c:d2:50:0c:b2:e1:35:55:c2:f2:00:27:49:3e:
be:4b:40:34:f4:98:6f:16:eb:a7:31:93:35:95:3a:
7c:43:d3:12:88:be:7f:0c:37:b7:0b:a1:73:d6:e8:
57:d2:c9:15:30:c1:47:6c:92:67:18:41:ee:b8:42:
47:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:78:D3:05:EF:02:FE:EF:06:E4:51:CE:D4:FA:6C:82:F8:77:48:5A
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/nXjTBe8C_u8G5FHO1Ppsgvh3SFo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
7a:2e:09:78:52:1b:b8:32:12:22:98:5d:a9:ae:16:2c:f2:ab:
b8:ef:ad:1e:e1:81:97:ee:93:82:16:d5:86:0e:ca:be:7e:b1:
4c:23:60:1d:9c:bc:84:74:6d:9f:96:77:9a:84:18:9b:db:c5:
7c:9b:c8:15:ca:ee:fc:5f:74:11:dc:9c:47:62:6d:2c:23:55:
a7:a6:a9:de:9f:17:1a:8b:d0:92:db:c3:82:f5:50:a7:d0:e7:
08:99:06:00:e2:96:2f:bf:06:a6:c6:60:f1:01:b1:3c:57:31:
20:61:20:b9:75:ed:6e:ae:58:65:de:54:ec:10:42:f5:07:2f:
7b:27:c7:f1:b5:1c:85:5a:cc:76:7f:51:81:96:5a:6d:97:e7:
e8:56:38:4f:17:bc:76:92:09:3c:aa:a6:95:92:22:b4:d3:d4:
2a:54:61:a4:05:1b:38:19:dc:f1:2e:bc:1c:13:48:95:85:6e:
52:49:fe:56:bc:45:ec:8c:f4:bd:2c:61:e4:29:27:2c:b2:76:
33:53:a1:f7:c2:be:29:63:9b:49:4f:7d:5b:76:62:f7:15:9d:
9e:06:8d:89:6e:56:97:e2:b0:03:e2:81:20:61:29:44:f0:0b:
3f:4f:7b:db:1c:2b:b7:da:be:d0:80:53:f1:ca:a0:20:be:c2:
bb:74:49:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 03:31:29 2025 by rpki-client