Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/3LCVr68Grq8dkXP2ecmFiRLLwPI.roa
File: 3LCVr68Grq8dkXP2ecmFiRLLwPI.roa (raw, json)
Hash identifier: Qam4ayeuNmE7vOuAwIABNTKIaBytPnkufqShF8NDads=
Subject key identifier: DC:B0:95:AF:AF:06:AE:AF:1D:91:73:F6:79:C9:85:89:12:CB:C0:F2
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 231F
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/3LCVr68Grq8dkXP2ecmFiRLLwPI.roa
Signing time: Sun 08 Jun 2025 03:38:56 +0000
ROA not before: Sun 08 Jun 2025 03:38:56 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8991 (0x231f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 8 03:38:56 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DCB095AFAF06AEAF1D9173F679C9858912CBC0F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:e7:59:33:ad:60:f1:6a:42:d7:4e:80:21:
ed:31:df:07:de:ae:a6:c8:de:3e:e4:d5:70:67:a1:
a3:88:df:ac:6a:95:4e:a3:d5:a8:87:23:d1:95:a5:
1f:d2:4b:25:ca:d4:6e:62:b4:1c:bc:e3:d5:9b:ed:
ed:89:f1:ec:28:86:43:3c:40:e5:b5:81:10:09:cf:
b7:74:59:06:c7:8f:4b:be:f2:bc:2c:ce:94:3d:1e:
01:d9:e1:81:6c:54:3b:40:8d:4f:9d:fb:37:4d:7b:
1e:d3:4c:e6:33:54:bc:47:05:25:39:8e:c6:e8:4a:
20:7d:88:a5:87:12:b9:b3:91:59:af:25:5b:52:65:
98:3b:c2:23:b9:72:90:0d:3f:94:e4:37:8d:ce:0c:
81:b7:3d:d6:69:ee:d0:06:9e:7e:bd:9d:ff:45:6b:
46:78:43:c4:ad:16:bb:2e:e2:f8:d7:1d:e0:d1:94:
04:b7:7b:23:6e:fc:5d:5f:a9:9a:54:5c:aa:e3:8d:
86:d1:5b:c1:c5:a6:7c:f9:cb:e8:53:79:5f:52:12:
33:1d:13:70:bf:93:a0:2f:70:fb:8f:fc:c9:ee:18:
81:a9:18:d0:78:62:78:30:14:15:cd:91:e6:0c:48:
12:63:d1:12:36:61:bf:a5:1e:58:45:a2:27:b6:ba:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B0:95:AF:AF:06:AE:AF:1D:91:73:F6:79:C9:85:89:12:CB:C0:F2
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/3LCVr68Grq8dkXP2ecmFiRLLwPI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
3a:e2:e3:56:5d:6f:ef:ba:28:fb:2f:1c:f2:e7:93:dc:e2:35:
8a:64:fd:49:e3:c0:d7:48:ee:af:b1:4b:89:5c:25:a1:8b:39:
fd:84:0b:89:4d:bb:71:50:27:8f:ec:b4:63:9e:c6:10:ae:83:
7f:d5:e6:a6:84:85:f7:3e:ed:d4:19:6b:cc:9e:a8:c4:32:c1:
6d:0f:34:a6:f9:da:de:b7:d0:8f:07:23:38:8b:da:70:8d:d4:
df:0c:f6:4e:b8:ae:05:29:66:9f:7f:62:f2:98:e6:ed:f8:3e:
9a:fe:86:be:53:47:bf:d1:5e:30:7f:fb:f0:e6:5a:f9:ac:20:
66:d1:38:e8:c1:74:e6:de:e4:4d:2a:f3:b1:11:26:14:85:25:
e7:56:c6:0f:17:d3:38:9d:6c:59:52:ac:74:48:78:71:9b:ee:
c7:17:e5:9e:9c:48:20:a2:2d:09:ee:6a:15:27:4c:84:be:07:
82:79:87:e8:3c:13:75:02:0d:d0:a4:99:d5:69:7e:d6:95:6b:
5f:af:70:b8:f9:f9:41:03:d0:1f:62:94:47:21:63:f5:e6:4f:
84:4f:d5:9b:60:be:98:de:a4:3b:fd:77:1b:1a:54:95:a3:99:
2d:85:fb:0b:be:10:f3:f1:9f:fd:f0:47:ee:ad:75:c3:6b:fb:
2f:a4:37:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:54:35 2025 by rpki-client