Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/w9fp23hhtAEv3Pcvn72tztAlI5w.roa
File: w9fp23hhtAEv3Pcvn72tztAlI5w.roa (raw, json)
Hash identifier: Ek038xlrZ+vPkEOz67Ddq4Uw7KhZRuo6hUj+Lrzxljg=
Subject key identifier: C3:D7:E9:DB:78:61:B4:01:2F:DC:F7:2F:9F:BD:AD:CE:D0:25:23:9C
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 219C
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/w9fp23hhtAEv3Pcvn72tztAlI5w.roa
Signing time: Thu 05 Jun 2025 11:08:44 +0000
ROA not before: Thu 05 Jun 2025 11:08:44 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8604 (0x219c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 5 11:08:44 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C3D7E9DB7861B4012FDCF72F9FBDADCED025239C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:a6:90:2d:cc:70:3b:b6:de:e6:c0:b1:57:
25:2b:b0:1d:f1:c2:bb:e8:35:b0:53:60:1a:f3:9e:
c3:be:04:7a:7a:8b:f5:2e:b5:8c:83:f0:66:51:f5:
f8:6b:8e:7f:7d:f9:82:db:38:4b:65:ef:ab:b6:13:
e7:1a:6e:94:83:68:fb:13:f8:30:f4:af:87:8b:be:
fc:f9:a3:85:d1:11:2f:77:b5:b2:7f:85:f3:2c:28:
e2:3b:c4:d2:99:7a:9c:6f:23:18:f7:60:65:33:8e:
45:8b:63:15:40:ec:3b:86:99:be:c5:d3:d8:d2:c2:
06:3d:ee:ae:86:25:27:ba:99:b5:98:7e:a5:58:5a:
8a:11:16:b4:41:d3:bf:30:94:cc:12:ad:00:86:b1:
33:f7:14:ab:c5:c0:7c:f9:aa:5f:e9:0c:e7:ab:3b:
28:e8:19:8f:7d:a1:0d:05:c3:7a:4f:4f:7c:63:20:
7e:eb:68:4b:63:14:f1:78:31:89:7d:9b:b0:eb:a4:
40:56:b3:69:a3:10:06:f5:0e:09:c8:0c:42:5b:b9:
2d:30:a3:ff:97:f3:9d:93:dd:28:f2:6f:d3:65:59:
c0:b3:4b:65:63:58:5e:cd:fd:4b:5c:3a:fd:69:f5:
fb:47:f5:67:1f:4b:09:50:f1:25:45:1d:93:fe:f9:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D7:E9:DB:78:61:B4:01:2F:DC:F7:2F:9F:BD:AD:CE:D0:25:23:9C
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/w9fp23hhtAEv3Pcvn72tztAlI5w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
42:04:f0:fb:c7:92:46:24:55:2f:42:10:ae:56:58:69:93:6d:
7b:d5:79:67:98:c9:7d:00:38:8b:91:98:81:97:8a:c6:e8:18:
2c:fe:36:98:44:cc:bc:b1:49:a7:5a:a0:73:82:20:c4:c0:79:
5a:6a:bc:22:e5:04:28:2b:de:69:2d:f1:a6:96:2e:59:61:49:
f1:a4:20:88:d8:a1:e0:24:65:54:84:8e:e0:2a:d9:ce:b5:91:
c2:aa:4e:b7:35:2c:6a:b8:81:29:cb:f8:1f:73:92:7c:f4:a7:
54:c7:3a:56:b0:0c:13:8f:2b:17:30:56:3f:6a:59:92:7f:f7:
f2:97:3f:f0:4e:06:a5:72:47:f9:68:3c:1b:21:b7:67:f9:d5:
f6:d6:fe:e9:e3:d2:9b:cd:02:2b:d1:dd:96:07:69:76:ab:1e:
f9:6b:79:4d:a3:de:da:62:a8:da:5d:e9:00:c5:c4:27:3f:fc:
c5:b1:78:f6:5e:7e:0c:5d:11:09:f6:4d:51:5d:ed:f8:e8:5b:
c5:41:bf:f7:fa:4a:29:09:2e:93:95:97:2a:b9:1f:37:1c:e2:
0f:dc:27:1c:ea:60:19:02:71:ab:d1:4c:d7:c2:91:b6:3e:4e:
3e:19:95:ae:e3:69:63:91:24:0b:d2:fc:f6:e7:e3:fc:91:98:
3e:f1:02:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 07:13:06 2025 by rpki-client