Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/21-gnXM-6v1jN_iKPn8Psc0vdIQ.roa
File: 21-gnXM-6v1jN_iKPn8Psc0vdIQ.roa (raw, json)
Hash identifier: 5xV7BrknDPLWz8QPgm6SBSClWE/L8DwAg7kFVui+3YQ=
Subject key identifier: DB:5F:A0:9D:73:3E:EA:FD:63:37:F8:8A:3E:7F:0F:B1:CD:2F:74:84
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2358
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/21-gnXM-6v1jN_iKPn8Psc0vdIQ.roa
Signing time: Sun 08 Jun 2025 13:08:58 +0000
ROA not before: Sun 08 Jun 2025 13:08:58 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9048 (0x2358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 8 13:08:58 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DB5FA09D733EEAFD6337F88A3E7F0FB1CD2F7484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:09:85:44:27:1f:1d:a7:b3:04:a1:c7:69:23:
d3:da:b8:5b:08:55:5d:30:98:49:f7:4d:b7:37:ea:
2e:39:7f:15:45:a6:7f:9d:2f:ca:ba:9f:11:85:2e:
52:65:6a:33:7a:65:09:35:8f:98:9e:68:0a:67:33:
b8:1e:e8:14:2c:4e:d8:52:a7:29:97:ad:85:6f:ec:
c5:c1:7b:5f:94:fb:75:f0:4f:3c:f5:fd:57:a7:7d:
4a:9e:b7:5c:50:9e:8c:9a:c3:21:aa:db:19:be:08:
90:1c:b0:51:7c:90:98:35:19:00:d0:25:cf:af:d9:
f3:5f:bf:8a:5a:61:2b:84:8c:89:a7:31:7f:87:8b:
ae:e8:df:a5:3e:0f:cf:36:3a:2a:ab:23:16:11:3c:
78:b8:88:6b:0b:6c:a1:8b:04:66:6a:a3:e2:3d:cf:
51:8f:03:33:f6:4b:be:cc:0b:7a:3d:d6:10:f2:db:
78:67:b4:5a:e1:0f:3f:59:9b:b6:f4:38:9b:26:58:
39:45:92:ef:db:bb:d5:af:09:3d:5e:f3:92:43:be:
ed:bd:d1:01:52:ff:34:85:1f:3d:27:b7:6a:37:ce:
4e:c9:f5:c7:c7:dc:dc:05:f6:05:01:4b:72:dc:99:
a5:ea:a3:ed:38:e4:95:7c:98:5e:18:89:6a:62:76:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5F:A0:9D:73:3E:EA:FD:63:37:F8:8A:3E:7F:0F:B1:CD:2F:74:84
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/21-gnXM-6v1jN_iKPn8Psc0vdIQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
2e:9f:f8:4b:0e:be:80:08:f8:af:5e:92:f9:30:bf:d4:05:e0:
01:93:28:ed:97:3d:e2:ef:86:b9:e3:2d:56:81:b4:81:d5:1c:
a1:d1:09:64:80:70:1e:7d:cd:6f:a2:00:42:9b:85:8b:2f:ec:
42:22:69:be:87:05:91:0b:ab:d9:b9:4a:45:54:b3:4b:dc:54:
45:22:ea:d0:1e:20:ee:fa:f8:f8:84:46:01:2b:94:91:dd:cc:
a8:a9:96:b2:be:d8:96:d5:b0:f3:33:80:78:da:c6:ac:ad:9f:
1d:65:45:81:59:92:97:90:40:43:63:a7:9f:33:f8:35:34:54:
c4:8f:b6:42:3f:1d:b4:29:6c:37:21:25:9b:8d:53:f9:95:0e:
5f:49:2d:ee:8c:df:0e:d9:30:99:e9:66:d3:fa:fb:0c:4d:a5:
a4:80:4f:c2:53:0d:13:46:59:f0:e7:77:ec:d6:25:30:38:43:
60:be:09:3e:33:e4:4f:cc:e4:46:4b:de:e6:96:d4:1d:89:c8:
b6:1b:64:7b:c2:a2:0b:c1:81:21:d8:c0:31:59:dd:47:d4:9d:
e0:d9:82:9f:ae:a3:a1:1a:75:3c:71:10:09:b6:07:8e:2d:63:
23:27:e6:d3:4f:65:3d:d5:c3:36:34:62:92:44:87:e5:c4:1d:
c9:3c:b9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:09:09 2025 by rpki-client