Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/3VE40igfLfee0UbvVCOZNIzMLm0.roa
File: 3VE40igfLfee0UbvVCOZNIzMLm0.roa (raw, json)
Hash identifier: xeoZ/fVLA1EGRz6DLN9oW9mKJgn0LtySPHvhQ0NUnUc=
Subject key identifier: DD:51:38:D2:28:1F:2D:F7:9E:D1:46:EF:54:23:99:34:8C:CC:2E:6D
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1F9E
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/3VE40igfLfee0UbvVCOZNIzMLm0.roa
Signing time: Sun 01 Jun 2025 22:08:35 +0000
ROA not before: Sun 01 Jun 2025 22:08:35 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8094 (0x1f9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 1 22:08:35 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DD5138D2281F2DF79ED146EF542399348CCC2E6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:81:93:9a:7c:3b:af:b5:ad:fe:34:c3:20:
2f:d2:bd:5a:94:2b:1b:67:96:37:c8:ba:d2:24:8a:
c6:00:8e:42:60:b5:3c:66:c7:dd:df:05:ea:e4:c6:
6d:49:00:dc:08:5a:80:55:54:c8:d8:cc:6f:88:de:
fb:38:c2:36:73:77:c8:32:e0:77:c6:c9:6b:1a:12:
6c:93:a4:55:61:5c:27:ce:07:af:6d:81:b4:0d:84:
d7:f2:9b:de:ff:dd:ef:b5:06:a3:f8:85:16:92:96:
e8:73:02:56:76:57:f3:9a:31:f2:ce:7d:42:e1:e8:
6c:b3:ce:00:d7:ea:70:80:7b:97:86:86:f2:0f:69:
31:8f:a9:ae:3f:31:44:7a:b8:56:cf:be:eb:05:5e:
20:ed:6e:86:1f:17:72:ae:11:54:29:a4:d7:cf:99:
12:ab:5f:11:d2:6c:88:0c:1b:f2:5f:5d:ca:50:d1:
ff:40:b6:74:c0:be:56:0f:8e:d8:80:71:c5:2d:68:
8e:42:6f:9c:53:9a:6c:f7:a1:55:36:2c:6d:9f:1d:
f4:8c:38:e3:01:16:02:ce:45:bd:b6:19:2e:ec:2a:
b1:b7:aa:0d:ec:a6:0c:b1:a1:97:59:54:3c:8e:52:
81:fc:1f:95:a8:65:09:45:37:d8:cf:d0:ef:00:24:
5b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:51:38:D2:28:1F:2D:F7:9E:D1:46:EF:54:23:99:34:8C:CC:2E:6D
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/3VE40igfLfee0UbvVCOZNIzMLm0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
9f:21:20:98:52:60:be:34:0b:7a:4b:59:8d:3a:ab:71:d3:84:
a0:fc:51:a8:8f:58:00:8c:60:e0:1c:ea:a6:d6:80:a7:61:62:
99:66:3f:19:0f:1f:98:b4:bd:c2:a0:2c:cb:19:74:49:50:8e:
df:63:98:18:ee:0a:21:50:d9:be:79:1f:b2:84:02:ac:be:17:
2f:8f:ea:f0:b2:b3:b1:b6:d0:94:7e:86:ec:65:0d:1a:05:9b:
31:36:7d:dd:c9:d9:f2:2d:58:43:4c:6a:8e:31:d9:13:b6:ac:
e8:04:21:1a:73:f7:c1:d5:02:0a:7d:99:fa:0f:b6:fa:ea:0b:
8e:f0:da:70:19:c9:2d:e2:3c:25:81:bf:1e:e0:ad:b7:3a:ac:
4e:ad:56:3b:b6:1b:f2:a5:f1:35:45:e8:2d:d5:80:73:d2:46:
a2:41:0b:43:0b:d9:38:67:31:48:9a:93:20:9b:2a:11:c7:28:
d0:be:cd:a3:5f:a8:a0:5f:a4:50:41:cc:b7:19:b6:10:f2:6b:
7f:c3:cb:bf:81:98:88:8a:78:ad:7e:2b:24:86:f3:2a:38:7c:
04:00:9a:47:00:49:96:67:85:39:83:29:0f:65:66:0e:3d:b0:
4c:5e:9a:a4:b1:a6:52:44:11:f8:39:43:ff:a2:58:f2:7e:2b:
b3:45:34:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:08:02 2025 by rpki-client