Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/18ER7ZWM_EkDpoA_R4IM2Dtk7qc.roa
File: 18ER7ZWM_EkDpoA_R4IM2Dtk7qc.roa (raw, json)
Hash identifier: 44Mb2sf8eK7Y75/6AsTrQKKsldOcIeKR1icyf3EFHOk=
Subject key identifier: D7:C1:11:ED:95:8C:FC:49:03:A6:80:3F:47:82:0C:D8:3B:64:EE:A7
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 26D3
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/18ER7ZWM_EkDpoA_R4IM2Dtk7qc.roa
Signing time: Sat 14 Jun 2025 17:39:18 +0000
ROA not before: Sat 14 Jun 2025 17:39:18 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9939 (0x26d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 14 17:39:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D7C111ED958CFC4903A6803F47820CD83B64EEA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:27:1a:b5:8f:24:ae:ce:e8:8d:82:d9:ef:2a:
d6:18:cb:ae:b0:1f:4e:9c:ee:1f:95:f3:a5:c2:07:
0c:50:c7:35:83:47:49:59:c3:9a:d6:2a:a9:be:b1:
98:c5:04:84:f1:e0:12:85:a9:be:2b:57:69:a3:f3:
95:73:3b:a0:3a:b9:fc:8b:84:db:ce:ad:96:d7:6b:
30:e0:89:0b:4d:c4:69:31:b4:aa:5b:e6:9d:ab:0f:
26:f4:c0:87:b9:dd:cf:a2:52:d9:13:56:d4:97:1e:
f7:b0:eb:ce:a3:c0:70:5d:bb:29:d3:6f:13:b4:26:
ad:a3:3c:03:ea:7e:f0:35:a4:91:6c:44:2a:9e:90:
e7:d7:88:06:f3:18:ce:13:cc:62:e7:c1:c7:db:1d:
64:a5:dc:9f:38:1e:2a:f2:a4:48:17:aa:22:ac:f5:
27:ba:7d:2f:78:c9:ce:f9:17:e0:0d:d0:7b:b3:16:
99:5b:41:5b:aa:34:de:37:c5:0e:3e:51:d4:8c:7d:
0b:72:bc:d5:fc:0e:e0:a1:af:53:2f:fa:a3:6a:19:
c0:d8:cd:54:58:e0:12:9c:21:d5:d4:01:be:cf:83:
6b:7e:29:72:91:9f:c3:7f:7c:36:9c:2a:90:1c:ca:
07:e0:56:98:45:ec:74:f5:c8:c1:12:64:f4:eb:d8:
ee:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C1:11:ED:95:8C:FC:49:03:A6:80:3F:47:82:0C:D8:3B:64:EE:A7
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/18ER7ZWM_EkDpoA_R4IM2Dtk7qc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
43:5a:a9:0a:33:81:ad:0a:73:32:3c:e1:08:79:53:1a:3c:c2:
e7:99:21:ba:69:4f:5b:e6:49:58:a9:46:d0:a4:f9:84:91:c4:
d7:45:0e:3d:05:8d:cd:4a:a0:f2:05:56:2c:d6:0a:33:d4:35:
49:bd:08:de:60:3d:a2:99:d5:35:e3:93:50:41:c2:86:9a:da:
35:4f:08:de:2b:c4:62:1e:86:d0:ce:0d:fe:1e:94:bf:78:32:
ad:37:a1:10:c7:de:1f:60:51:0d:44:df:8b:a1:1c:8b:15:3e:
0e:f3:1a:3e:39:2c:37:df:a8:0d:19:8e:c4:de:e0:c4:13:68:
85:fb:29:f6:a5:92:f6:a1:3d:3e:39:7f:64:93:db:41:84:5b:
49:d1:63:58:43:0f:21:85:65:86:37:f3:cb:87:f2:c6:57:08:
63:80:45:3c:80:11:4a:11:74:0c:b6:7c:0f:ce:6b:f4:cb:98:
b5:c9:57:79:7e:dd:5f:13:a7:7e:0b:74:a9:12:93:41:6d:dd:
ca:c3:fe:f3:45:a3:54:77:ec:76:17:31:97:ce:0b:bb:05:90:
04:af:b6:f1:42:38:f7:40:ff:97:40:de:2f:c5:96:6e:55:26:
3e:54:80:84:ea:30:08:0f:da:bc:d9:6c:89:90:d7:18:cb:3d:
2e:fa:00:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:23:58 2025 by rpki-client