Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/tKPSyn098yyLad3VWBH7o_LOMNo.roa
File: tKPSyn098yyLad3VWBH7o_LOMNo.roa (raw, json)
Hash identifier: NHLddQ9OMPMleabtOG+dh2pBljmlW3C87twJ1u+D24k=
Subject key identifier: B4:A3:D2:CA:7D:3D:F3:2C:8B:69:DD:D5:58:11:FB:A3:F2:CE:30:DA
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: D1
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/tKPSyn098yyLad3VWBH7o_LOMNo.roa
Signing time: Fri 06 Jun 2025 02:32:43 +0000
ROA not before: Fri 06 Jun 2025 02:32:43 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 132525
IP address blocks: 240a:40c1:6010::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jun 6 02:32:43 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=B4A3D2CA7D3DF32C8B69DDD55811FBA3F2CE30DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:ff:14:03:c6:93:fa:4a:b3:dd:74:fc:3b:
52:1f:40:dd:3e:04:16:e5:0d:06:5a:e0:7d:6e:d1:
1c:1f:72:c7:28:82:8f:f3:df:90:77:ca:45:43:e5:
59:45:2a:ec:c6:13:fd:86:19:84:76:2c:8e:99:40:
9c:ee:d1:79:20:cb:30:f4:a4:2d:21:fb:5b:af:84:
1b:02:98:3f:1c:43:b0:7c:84:a5:f7:94:eb:bb:3a:
48:74:80:98:a1:58:1f:21:f6:b8:81:dd:29:3c:4b:
d3:a4:7c:ea:c6:02:ca:7d:ba:3f:8d:fc:82:65:a8:
54:5c:3f:ea:7f:ab:b5:09:67:14:13:4b:a8:04:f1:
b9:1b:cd:9a:4a:a6:77:51:28:4c:7c:cd:97:84:0f:
1c:7b:27:a9:ec:0b:33:a1:d2:88:1b:a9:28:93:24:
0a:51:9c:01:a9:a3:d5:56:78:8a:6d:6a:1a:db:74:
97:be:98:59:ea:d8:48:cb:06:36:db:3c:4a:0d:86:
b7:4e:fe:01:17:db:cd:fb:c2:4e:f4:f3:42:f2:a3:
15:a3:64:8c:48:d8:70:d5:5d:e8:e2:70:e0:41:fe:
fb:ae:41:cb:6c:6a:17:99:7c:17:9b:f3:39:61:46:
ba:fe:65:8a:1b:88:a8:06:01:8c:c2:79:a4:65:f6:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A3:D2:CA:7D:3D:F3:2C:8B:69:DD:D5:58:11:FB:A3:F2:CE:30:DA
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/tKPSyn098yyLad3VWBH7o_LOMNo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:40c1:6010::/44
Signature Algorithm: sha256WithRSAEncryption
01:70:31:d2:e6:ac:49:44:02:40:4c:10:e2:94:a9:ac:25:73:
12:19:73:ba:7c:95:b3:26:3c:a1:51:ff:e3:23:bc:7a:b2:4f:
65:2e:1b:2a:3d:bd:0f:8c:b0:e8:88:d3:1d:29:8a:bc:41:e9:
c9:d8:7d:a5:ea:ea:63:9f:92:fa:f8:92:81:22:e6:01:ee:d7:
3d:2f:a9:bd:7d:5a:b0:10:c5:ab:99:99:85:22:48:03:61:1c:
95:69:3d:59:96:36:9d:c0:7b:18:4d:1c:db:ad:4b:ba:8d:9d:
5c:09:38:1f:18:62:f6:9f:f8:b1:3f:c8:f2:b2:0f:36:79:e0:
ed:b8:35:2b:9a:8c:2f:bd:4d:81:a2:57:cf:2c:a5:ea:58:0c:
58:ea:67:35:89:34:60:9d:8f:58:e2:54:bc:22:03:f6:37:e8:
1e:98:b7:ea:64:8a:94:7b:d9:fc:74:17:46:dc:a9:79:73:73:
5b:ca:ed:7c:3f:64:90:56:46:a3:f8:6a:8c:c5:6e:c2:cb:ba:
22:c7:41:5e:93:15:21:df:b6:3e:c1:0d:92:df:37:f7:2e:f5:
39:04:45:d8:2c:2d:da:1b:dd:e5:73:68:95:b2:a7:26:7c:f2:
d5:71:d2:80:38:ff:ae:61:cf:7f:b7:1f:11:8e:93:01:37:3b:
e0:e9:ae:4b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 21 05:35:15 2025 by rpki-client