Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/knNnEP7NBq1WUi_AowD2df0XCgM.roa
File: knNnEP7NBq1WUi_AowD2df0XCgM.roa (raw, json)
Hash identifier: GTzLXW7uXXlk2J6viEx+OXb2UnlcuGhyN9plVfKS/xY=
Subject key identifier: 92:73:67:10:FE:CD:06:AD:56:52:2F:C0:A3:00:F6:75:FD:17:0A:03
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: B8
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/knNnEP7NBq1WUi_AowD2df0XCgM.roa
Signing time: Fri 06 Jun 2025 02:24:56 +0000
ROA not before: Fri 06 Jun 2025 02:24:56 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 9808
IP address blocks: 240a:40c1:e000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jun 6 02:24:56 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=92736710FECD06AD56522FC0A300F675FD170A03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:84:55:59:cf:de:31:d2:cb:d0:30:98:89:
e0:26:43:fb:58:cc:2f:1b:27:3c:68:1a:80:90:7f:
d3:a9:8c:7f:34:7f:2a:bb:43:ab:87:86:0a:69:e7:
bf:b1:3a:8a:0b:63:5f:ab:6c:41:e7:58:66:2a:2f:
91:52:f2:8f:e8:20:37:14:d6:b7:0f:67:e5:60:6a:
71:36:18:38:9b:f1:da:0d:7f:d6:76:54:3c:6b:13:
8e:ec:20:42:95:4c:3b:32:0f:80:68:b2:38:a9:7e:
97:a8:9c:22:c0:58:46:7e:cd:21:1b:d5:69:c5:34:
57:85:ab:63:e5:cf:c5:2e:c9:26:d1:db:53:72:82:
e6:7b:26:b8:04:5b:71:f9:b5:1a:30:ee:8e:0c:f8:
bf:ab:16:ff:fb:59:4b:25:0e:12:fa:2e:89:d6:d4:
3d:cb:af:d7:71:e9:1a:56:72:f9:05:87:db:c1:d2:
47:77:8c:be:bf:20:2f:3d:50:27:db:f7:5e:df:cc:
ae:8b:68:92:8b:db:e8:a0:fe:2f:05:d2:5e:08:49:
84:8e:b4:00:bd:cf:25:90:fe:93:c1:8c:47:01:b4:
c2:b2:e1:bf:c6:15:df:47:08:21:06:0b:73:b6:8d:
d6:63:19:b2:69:53:84:66:22:39:2d:ab:29:d2:38:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:73:67:10:FE:CD:06:AD:56:52:2F:C0:A3:00:F6:75:FD:17:0A:03
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/knNnEP7NBq1WUi_AowD2df0XCgM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:40c1:e000::/44
Signature Algorithm: sha256WithRSAEncryption
60:a8:b4:e7:12:dc:06:01:a7:36:46:8e:a1:a6:52:63:77:33:
05:94:46:09:46:90:8d:0c:23:7a:ee:13:b3:b9:f6:c1:d1:64:
42:5a:33:54:0f:a6:d2:5e:34:2f:02:f8:24:0c:f6:ad:43:a6:
5e:5e:0d:11:d4:a8:b7:d6:64:51:f3:47:ee:68:3c:44:be:43:
2a:85:5e:7d:ed:30:0c:50:e2:bc:2b:de:e8:67:ce:3d:0f:33:
b3:44:30:f9:bd:98:78:5c:f2:6e:46:25:95:2f:e9:bc:ce:2e:
98:86:9e:f6:38:f0:31:6a:c6:a2:b6:fe:b2:ab:77:70:f2:55:
a0:c0:e0:e7:11:a7:6e:f9:5f:71:ec:d6:34:83:83:c6:84:2b:
11:20:ae:63:92:ea:a1:7f:c4:45:d0:54:36:3f:10:c8:7a:7c:
d0:00:a3:b7:41:89:9a:8d:12:99:cd:84:3e:e1:2d:49:41:89:
26:b6:79:4f:63:fc:61:d8:d1:83:5f:99:16:cc:0e:37:98:f3:
69:5a:69:1e:60:ce:14:75:c6:31:51:e9:f1:ff:15:d3:3a:a3:
87:70:3a:39:80:3d:9f:d6:0d:9a:1d:02:64:a4:82:7c:e8:5c:
f7:55:1e:b5:04:f6:da:7d:19:b5:a2:30:b6:e8:b2:f3:2b:68:
15:8a:cb:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 21 00:22:44 2025 by rpki-client