Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/TUJm9fk3KNzOlqJ0MAu3qL6dVvY.roa
File: TUJm9fk3KNzOlqJ0MAu3qL6dVvY.roa (raw, json)
Hash identifier: MojQPAvvKs7DXrahcHmTLKC9L0QrC4Ggqzr4/CYCVRA=
Subject key identifier: 4D:42:66:F5:F9:37:28:DC:CE:96:A2:74:30:0B:B7:A8:BE:9D:56:F6
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 55
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/TUJm9fk3KNzOlqJ0MAu3qL6dVvY.roa
Signing time: Tue 27 May 2025 08:36:32 +0000
ROA not before: Tue 27 May 2025 08:36:32 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 56046
IP address blocks: 240a:42a6::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:36:32 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=4D4266F5F93728DCCE96A274300BB7A8BE9D56F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:12:7a:2c:7e:64:e0:36:d2:d9:78:da:32:
9e:25:51:e1:fd:83:07:ac:4b:54:4e:14:78:df:dc:
8c:e8:42:43:81:6a:8f:f2:00:8c:0a:de:10:89:3b:
89:3e:21:b6:23:2b:84:3e:e2:ce:a1:db:21:47:61:
4a:cc:18:63:e6:13:22:79:1e:19:72:8e:13:5a:01:
9b:67:49:5e:2c:0f:dd:60:3f:25:fd:c0:39:15:70:
d5:71:1b:42:e4:5f:df:82:43:85:73:30:93:29:2b:
75:cd:78:10:ff:5b:a4:25:31:07:02:2c:89:7f:a1:
ab:25:79:58:c8:59:67:20:0e:9d:11:2b:ae:91:53:
4f:5d:42:f9:30:b1:49:50:4c:8a:db:e6:06:11:85:
2b:80:ee:8a:0b:aa:5f:23:ee:71:42:f7:44:9b:67:
31:8c:85:88:8d:1b:a1:31:6d:a4:1c:a4:2e:e9:a2:
5e:1f:b4:87:ed:58:f5:a3:36:02:02:76:78:02:23:
8c:50:0d:cb:df:ea:95:8f:84:90:d7:e8:c8:40:c4:
a2:7d:16:77:6b:c5:c1:89:b5:e2:9c:bd:e7:b4:d2:
7d:83:b8:b0:ed:46:c6:85:6c:88:06:7e:b3:a7:21:
4d:2b:fe:c3:df:5a:d3:a9:95:0c:81:05:1f:08:d8:
76:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:42:66:F5:F9:37:28:DC:CE:96:A2:74:30:0B:B7:A8:BE:9D:56:F6
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/TUJm9fk3KNzOlqJ0MAu3qL6dVvY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:42a6::/31
Signature Algorithm: sha256WithRSAEncryption
bb:98:4a:73:a1:69:2e:b6:08:9a:0f:57:23:dc:91:b8:e5:18:
71:1d:08:d2:32:f2:c1:8b:c7:bc:90:43:c0:3d:60:70:94:cb:
d1:29:b9:53:b8:85:ea:35:23:d1:91:6c:77:8a:8b:2b:a6:bf:
bf:9f:c4:50:49:3f:c8:20:cb:24:62:8e:02:72:bc:e2:77:03:
3b:38:1f:57:d1:a7:be:b3:69:b4:6f:74:59:3e:fd:38:7b:9b:
38:82:08:2f:f6:cd:75:30:33:b0:77:33:27:b6:2f:c5:4b:94:
4f:35:c6:dc:f2:57:61:98:f1:70:5c:0f:95:37:c6:67:d7:30:
2b:bb:63:b8:5b:bb:31:82:16:e0:12:26:b5:fc:4a:2d:ab:70:
b2:20:3e:02:fe:95:fe:9c:61:bd:6e:fa:49:28:da:75:67:29:
da:72:6e:06:97:4c:3b:97:bd:75:c6:6c:13:c0:a2:81:d3:db:
54:32:d1:7b:cc:7a:61:54:6f:90:a4:8a:cd:71:e5:63:e5:9b:
f1:e6:14:e0:63:c7:6b:12:0d:62:f8:c5:62:c9:6f:de:b2:10:
aa:75:b5:d5:cc:28:8e:19:e4:f1:c7:e1:24:23:41:23:fa:c5:
ce:73:14:7d:f7:1a:bb:b5:80:d5:a6:4b:8b:a4:80:08:1b:64:
de:78:59:4e
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG
RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4
MzYzMloXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoNEQ0MjY2RjVGOTM3MjhE
Q0NFOTZBMjc0MzAwQkI3QThCRTlENTZGNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALB1EnosfmTgNtLZeNoyniVR4f2DB6xLVE4UeN/cjOhCQ4Fqj/IA
jAreEIk7iT4htiMrhD7izqHbIUdhSswYY+YTInkeGXKOE1oBm2dJXiwP3WA/Jf3A
ORVw1XEbQuRf34JDhXMwkykrdc14EP9bpCUxBwIsiX+hqyV5WMhZZyAOnRErrpFT
T11C+TCxSVBMitvmBhGFK4DuiguqXyPucUL3RJtnMYyFiI0boTFtpBykLumiXh+0
h+1Y9aM2AgJ2eAIjjFANy9/qlY+EkNfoyEDEon0Wd2vFwYm14py957TSfYO4sO1G
xoVsiAZ+s6chTSv+w99a06mVDIEFHwjYdqUCAwEAAaOCAfQwggHwMB0GA1UdDgQW
BBRNQmb1+Tco3M6WonQwC7eovp1W9jAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP
q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy
L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9UVUptOWZrM0tOek9s
cUowTUF1M3FMNmRWdlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUBJApCpjANBgkqhkiG9w0BAQsFAAOCAQEAu5hKc6FpLrYImg9XI9yRuOUYcR0I
0jLywYvHvJBDwD1gcJTL0Sm5U7iF6jUj0ZFsd4qLK6a/v5/EUEk/yCDLJGKOAnK8
4ncDOzgfV9GnvrNptG90WT79OHubOIIIL/bNdTAzsHczJ7YvxUuUTzXG3PJXYZjx
cFwPlTfGZ9cwK7tjuFu7MYIW4BImtfxKLatwsiA+Av6V/pxhvW76SSjadWcp2nJu
BpdMO5e9dcZsE8CigdPbVDLRe8x6YVRvkKSKzXHlY+Wb8eYU4GPHaxINYvjFYslv
3rIQqnW11cwojhnk8cfhJCNBI/rFznMUffcau7WA1aZLi6SACBtk3nhZTg==
-----END CERTIFICATE-----
Generated at Sat Jun 21 19:50:06 2025 by rpki-client