Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/qW3Tc7o84KeZrXOQJg0N180kAdA.roa
File: qW3Tc7o84KeZrXOQJg0N180kAdA.roa (raw, json)
Hash identifier: RvKhfusb6Q4f8EUwFOoz6YuQ1kibXE0glhifX/cR5Vc=
Subject key identifier: A9:6D:D3:73:BA:3C:E0:A7:99:AD:73:90:26:0D:0D:D7:CD:24:01:D0
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 5652
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/qW3Tc7o84KeZrXOQJg0N180kAdA.roa
Signing time: Sun 07 Sep 2025 16:02:36 +0000
ROA not before: Sun 07 Sep 2025 16:02:36 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22098 (0x5652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Sep 7 16:02:36 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=A96DD373BA3CE0A799AD7390260D0DD7CD2401D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:8d:a8:69:52:aa:a6:f1:81:d5:1a:9f:03:
e4:33:3f:1f:31:ea:85:d1:98:0f:a6:79:75:94:93:
4a:d4:ef:f4:cd:90:5a:c4:2c:93:a6:e6:49:48:a2:
fd:cb:cf:b9:4e:60:e5:46:27:f4:db:a2:b8:92:f2:
2f:46:66:a3:56:63:82:e0:12:59:cc:92:d3:11:05:
99:2e:09:92:01:d1:47:b3:a0:f0:38:4e:45:cc:09:
df:26:96:37:0d:84:4c:f6:90:cf:d5:0c:bf:d3:a0:
e0:bc:f4:c2:3f:6b:46:c0:e0:9e:ed:67:7e:77:29:
f7:11:76:e5:53:b2:f4:64:4c:91:07:c0:d6:fe:a2:
8c:dc:71:0b:84:b0:7b:59:8b:45:a1:3a:2b:19:44:
8a:a1:31:9e:db:93:92:0d:98:ae:71:b4:8a:26:74:
5c:98:79:82:39:4f:56:03:35:75:77:10:b8:62:e7:
b4:be:10:3a:23:f4:8f:c0:b1:e0:4b:ef:dd:98:60:
6c:15:6d:1a:64:cc:0f:a0:d5:c7:7e:c1:50:25:8c:
15:a4:42:e6:e2:72:06:00:93:ad:c4:d6:6a:83:df:
ca:3a:27:f7:69:a2:6d:e1:97:fe:95:80:c6:f7:8b:
89:10:5c:ec:38:0d:7e:5c:0d:ba:18:7d:94:17:30:
fd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6D:D3:73:BA:3C:E0:A7:99:AD:73:90:26:0D:0D:D7:CD:24:01:D0
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/qW3Tc7o84KeZrXOQJg0N180kAdA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
6b:cd:4f:62:e2:8e:11:4b:f7:ba:24:46:39:06:1d:32:aa:2b:
12:83:39:86:e3:8e:77:17:ab:39:e7:f4:87:1c:a2:40:c7:42:
10:eb:83:e5:43:93:88:00:18:d3:73:be:d7:08:b2:1b:0e:cd:
e7:b8:da:1b:af:f5:5b:fd:3f:ca:b4:06:15:35:80:d0:df:e6:
44:be:8a:b9:74:bf:78:00:95:c7:72:9d:3a:9d:72:a6:82:cb:
43:89:54:3e:d8:dc:00:68:3e:54:63:90:a5:2e:8f:bd:15:e3:
15:f0:97:0f:b1:87:c5:67:e6:11:e7:c0:c0:85:d5:e0:d4:07:
8a:4a:f3:50:ff:ab:9d:b1:25:95:2a:cb:8a:ea:67:bb:16:ca:
b1:dd:bf:20:db:90:3e:8c:f1:ab:ef:48:2b:94:94:cd:29:f3:
36:4b:76:d9:fb:52:c3:27:d5:fb:de:d2:8d:fb:93:c1:bb:4e:
af:28:21:cd:88:5a:27:d6:5c:be:b2:3d:99:dc:4d:c8:ac:9d:
c1:56:33:c7:70:d5:96:d0:cf:e8:16:54:a1:54:28:2b:79:bb:
8f:6d:c7:92:ca:69:ce:5a:df:d5:93:07:56:12:b0:b1:24:c4:
0c:0a:26:27:df:14:b6:ac:81:4b:36:6a:06:30:63:2d:2f:87:
73:74:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:11:14 2025 by rpki-client