Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/xFwgsHcwbaun-yfuafkEnIeITzU.roa
File: xFwgsHcwbaun-yfuafkEnIeITzU.roa (raw, json)
Hash identifier: aYnewd/m5SeAkHMJpfRRkBHzLTIx1fEs4OFwjg+RNKI=
Subject key identifier: C4:5C:20:B0:77:30:6D:AB:A7:FB:27:EE:69:F9:04:9C:87:88:4F:35
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 6FF5
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/xFwgsHcwbaun-yfuafkEnIeITzU.roa
Signing time: Thu 23 Oct 2025 04:35:42 +0000
ROA not before: Thu 23 Oct 2025 04:35:42 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28661 (0x6ff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Oct 23 04:35:42 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=C45C20B077306DABA7FB27EE69F9049C87884F35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:29:04:a8:19:83:72:7e:01:ef:cb:a0:54:
28:bc:60:1b:00:ca:01:de:37:13:ef:d5:4a:78:bc:
01:7f:51:81:03:d1:bc:ee:2f:85:f2:02:d5:e8:cb:
cd:f4:be:b3:f1:2d:d3:e7:fc:8f:f4:32:35:74:e0:
f8:c2:1e:7d:69:b2:9b:6a:7b:4f:90:51:27:f2:2b:
4e:eb:a8:2e:1a:85:6a:7d:49:1e:46:bb:e9:be:7c:
1b:4c:49:aa:a1:95:e1:a2:73:61:bf:25:04:19:18:
e7:1d:78:a3:cd:b9:45:8e:97:4a:5b:86:fa:ca:83:
ca:4f:21:66:1d:4e:b8:8d:78:20:e3:03:0d:c4:dc:
ed:78:4a:61:05:5d:52:2e:3c:68:41:09:e5:78:01:
c8:93:4c:97:e6:66:da:20:e9:70:0f:fc:31:5d:f3:
dc:79:1d:92:14:f4:d9:8c:4f:9a:c2:04:ed:d9:4f:
8c:72:d4:1f:20:b0:38:7a:54:c4:d8:78:e7:3c:20:
31:ff:0e:20:e3:2a:b4:2b:aa:e0:2a:5a:78:bc:a0:
33:cc:e2:38:5b:8a:fb:6f:2c:76:17:82:1e:ad:7f:
94:7b:be:d5:1d:36:98:c3:8f:d0:7d:c6:c8:2f:d5:
9a:73:ec:9f:1a:02:45:bd:5c:ee:21:89:d3:4b:bf:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5C:20:B0:77:30:6D:AB:A7:FB:27:EE:69:F9:04:9C:87:88:4F:35
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/xFwgsHcwbaun-yfuafkEnIeITzU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
76:21:d2:91:12:ac:86:21:6d:72:db:b1:31:2f:ca:47:79:e6:
04:a7:c1:d5:3b:1b:b3:fa:68:b2:4b:a5:3c:a7:fb:5c:8c:5d:
9a:e3:df:6d:81:f2:bd:67:0c:37:7c:22:08:0d:01:94:e4:4c:
8e:56:59:93:0b:ec:e1:e8:f0:f2:91:b6:dc:08:6e:79:86:6e:
92:38:e3:c5:0c:87:98:6a:e0:5c:f2:70:9e:f9:3e:b9:75:ae:
19:d1:97:4b:76:ea:cf:55:80:cf:eb:3f:db:db:b8:6b:43:68:
5b:fd:a3:70:9c:cb:7c:82:c2:5c:e3:42:15:6d:72:d4:ee:04:
dc:dc:b5:90:9a:93:72:0e:7a:84:81:36:2f:02:4f:8f:9a:0b:
3b:60:24:8a:32:5a:87:6b:8a:42:33:4b:ef:92:83:29:82:71:
ed:36:09:67:2f:dc:d5:66:c4:25:47:70:c9:d1:35:18:c2:87:
ea:fd:42:b2:ad:ad:01:ce:08:df:13:ef:64:77:0d:d0:2f:d3:
a0:76:82:2f:1e:c6:0a:73:ef:c7:50:e9:89:67:67:a8:d4:76:
c7:5d:27:d0:43:50:91:ed:05:20:a4:2c:00:25:45:9c:12:fe:
96:a8:f4:9d:75:eb:d7:4a:27:3e:47:e3:95:f3:9a:55:7f:5c:
35:6e:20:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 09:18:16 2025 by rpki-client