Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/nwInwMdL6MFNnzewQ7Ql0VqcB1c.roa
File: nwInwMdL6MFNnzewQ7Ql0VqcB1c.roa (raw, json)
Hash identifier: BK2r4QomQsbac0mjsOFsQRS0dsTZK2ded4KsdAJGR7U=
Subject key identifier: 9F:02:27:C0:C7:4B:E8:C1:4D:9F:37:B0:43:B4:25:D1:5A:9C:07:57
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2502
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/nwInwMdL6MFNnzewQ7Ql0VqcB1c.roa
Signing time: Wed 11 Jun 2025 12:09:09 +0000
ROA not before: Wed 11 Jun 2025 12:09:09 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9474 (0x2502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 11 12:09:09 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9F0227C0C74BE8C14D9F37B043B425D15A9C0757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:90:d1:6e:24:77:d2:5a:cd:82:0c:df:5c:
b6:56:5d:90:d6:a3:31:f1:71:69:57:a2:89:33:34:
78:73:82:8f:c5:2f:3d:8a:98:d5:19:29:8a:74:ca:
2c:c3:71:f0:3c:06:95:15:30:7f:a3:5f:07:41:95:
f5:70:b7:de:fc:41:f1:d6:51:2a:48:ea:59:43:df:
be:31:5b:04:34:9a:ff:a7:92:90:fc:2d:57:97:5e:
e2:37:f7:be:19:e0:da:4b:fd:76:ba:db:18:fb:37:
51:6a:16:a0:6b:93:71:2e:af:25:dd:7b:70:28:47:
2c:aa:40:7c:da:8c:ac:85:5a:43:92:74:40:07:11:
a4:60:e0:b4:78:15:61:ca:d1:d8:7b:c6:8c:ef:14:
23:58:ed:3e:62:83:a2:7c:49:44:5c:29:bd:d5:7b:
95:c8:8c:2d:a9:4f:95:4f:13:d3:6d:ae:1b:98:4b:
f6:ae:83:fd:0d:06:3d:db:33:9d:11:a4:1b:39:e8:
8f:8f:ff:af:ea:8a:3b:bb:d4:f1:52:32:db:34:e7:
36:95:b9:6b:46:63:81:d3:86:52:7f:c4:51:03:37:
14:5a:6c:2b:ee:4a:d6:7a:3d:38:dd:5d:02:d5:fe:
b2:07:80:63:0a:c1:7f:50:7f:24:69:2e:85:ec:48:
30:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:02:27:C0:C7:4B:E8:C1:4D:9F:37:B0:43:B4:25:D1:5A:9C:07:57
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/nwInwMdL6MFNnzewQ7Ql0VqcB1c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
ba:6e:df:f6:e5:aa:d1:ab:f7:81:32:a6:6e:24:ca:35:8c:84:
3c:63:de:bf:6c:73:df:a2:ca:23:92:e8:1d:d6:1c:21:1a:6c:
ce:92:3f:bc:9f:dc:99:a2:2b:c2:1d:10:fe:b5:a1:bb:31:15:
60:6f:5a:d2:d8:dc:80:6d:3b:98:a1:4b:a8:e0:40:8d:66:c8:
d5:59:f1:3d:cf:c4:34:94:e7:a6:ae:85:46:b5:b1:d1:e4:a3:
7d:b6:e0:f5:94:46:92:07:b6:a9:88:21:9c:4c:29:00:80:75:
99:82:ba:1b:3d:9f:b7:b2:29:ae:aa:9a:2e:55:2f:f0:02:90:
fb:f1:27:bb:6d:19:13:60:8d:09:c7:a1:6e:7f:02:7f:0f:e6:
f3:a6:42:10:08:42:16:71:0f:68:88:c7:c9:e4:6c:53:9e:fa:
66:bb:a4:d4:ff:ea:73:ce:8a:31:05:b4:39:b8:1b:c3:fb:17:
1e:1a:d9:6d:91:83:45:5a:92:3b:70:c1:69:ca:d2:d8:6a:e7:
44:e6:a7:29:71:7b:8f:6f:74:20:19:84:c8:55:74:ca:a1:15:
f2:c1:d8:76:ff:23:06:37:3f:51:74:1f:79:20:b4:90:08:2c:
17:cb:2c:46:7e:5b:07:a4:f0:44:63:b4:3a:8d:e8:6b:df:af:
4c:36:54:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:53:32 2025 by rpki-client