Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/l6KbWrW0rGE5he4xw9YvZxZmx-c.roa
File: l6KbWrW0rGE5he4xw9YvZxZmx-c.roa (raw, json)
Hash identifier: ybhoH35r8yt0uzV/JLEB5O7w5eNvELr3Y/wqG7v5bD4=
Subject key identifier: 97:A2:9B:5A:B5:B4:AC:61:39:85:EE:31:C3:D6:2F:67:16:66:C7:E7
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: DF
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/l6KbWrW0rGE5he4xw9YvZxZmx-c.roa
Signing time: Fri 06 Jun 2025 02:36:23 +0000
ROA not before: Fri 06 Jun 2025 02:36:23 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 9808
IP address blocks: 240a:40c3:a000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jun 6 02:36:23 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=97A29B5AB5B4AC613985EE31C3D62F671666C7E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:59:53:34:71:43:96:34:4b:30:34:0a:73:
9a:a8:a3:90:28:e6:04:e0:84:99:17:a8:c5:69:1e:
cb:b1:78:35:42:23:c1:2c:9f:fc:39:5e:ce:fb:40:
92:d9:a6:29:5d:96:aa:d9:3f:a4:29:9d:af:57:d1:
07:f4:2b:d7:a1:af:54:cb:fc:a7:81:49:e2:76:e4:
4f:1a:95:e1:68:4d:2d:c5:75:91:2a:8e:6d:97:71:
cd:74:59:51:ff:ac:f8:1c:b9:61:10:82:24:ff:16:
65:33:63:59:92:f4:a0:fa:6f:77:b1:64:3d:1e:35:
1b:bd:f8:31:08:95:4f:69:b0:a0:38:a5:73:c4:bf:
98:ab:50:e1:c7:f9:23:b0:b6:c3:00:01:f8:6d:e6:
f7:0d:53:b9:5a:d6:e2:82:7d:81:01:d6:4b:6e:7a:
be:20:22:b7:24:46:a2:50:e9:df:35:82:7d:ff:9e:
d1:f2:df:d4:14:0d:f8:96:6f:d8:e1:a8:06:36:47:
36:07:ba:34:15:4e:b4:65:96:bb:ac:4b:74:8b:cc:
0f:52:1d:5e:f5:ca:f3:eb:9c:c6:66:6d:09:49:4a:
fa:91:86:02:f4:1b:fe:9d:0d:a8:63:1e:be:8d:7a:
d0:df:54:0d:72:5c:96:fb:8d:ac:bd:77:9d:03:aa:
56:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A2:9B:5A:B5:B4:AC:61:39:85:EE:31:C3:D6:2F:67:16:66:C7:E7
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/l6KbWrW0rGE5he4xw9YvZxZmx-c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:40c3:a000::/44
Signature Algorithm: sha256WithRSAEncryption
8e:c7:1c:07:09:f3:d7:9b:93:4d:86:a2:62:b1:5e:7a:35:54:
d7:d7:e9:15:cd:2e:db:c4:89:ca:1a:a3:9b:26:fe:99:ee:f1:
9f:46:83:1f:60:36:44:36:07:68:ba:5a:64:31:21:4c:95:33:
f4:fc:51:67:9c:c8:2a:85:09:3f:b1:74:c2:95:fb:55:e4:8c:
2a:9f:ad:96:f6:2f:84:a9:90:02:80:54:d6:db:65:58:19:e8:
41:98:d1:f2:ce:f5:41:d6:2b:e5:6b:2b:a1:b0:98:ba:52:bd:
f5:64:81:c4:df:94:36:9d:2d:c4:5d:87:da:44:ef:79:3a:c5:
59:bd:73:0c:5d:56:83:de:cf:46:45:78:c1:b9:d9:ae:a0:5d:
81:c4:39:c8:dc:5b:1f:87:c7:08:a8:3b:30:6c:68:b6:4d:97:
66:b5:dd:6d:f1:e8:f7:fa:16:34:36:2a:fb:c0:d0:f3:e0:e6:
ae:e4:39:39:42:54:9e:0f:57:3b:b7:54:4e:48:33:31:7a:b2:
c5:62:c5:3d:b4:db:1e:b1:14:53:1c:ac:be:bd:46:85:99:93:
d9:fa:77:3e:ae:d7:51:67:c4:e3:2e:b2:9b:06:75:3b:ea:f4:
7b:45:65:8f:39:d1:6e:47:f8:a5:fa:88:26:21:fb:5e:01:a7:
53:32:ad:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 20 04:27:36 2025 by rpki-client