Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/5VajqCz4xsLYkKC0hcnc-JZa4Gc.roa
File: 5VajqCz4xsLYkKC0hcnc-JZa4Gc.roa (raw, json)
Hash identifier: k7rfaxrXfD5jd41xb2QIoa6yWJoZV1zW3DvAewiuzI8=
Subject key identifier: E5:56:A3:A8:2C:F8:C6:C2:D8:90:A0:B4:85:C9:DC:F8:96:5A:E0:67
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 24C9
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/5VajqCz4xsLYkKC0hcnc-JZa4Gc.roa
Signing time: Wed 11 Jun 2025 02:39:09 +0000
ROA not before: Wed 11 Jun 2025 02:39:09 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9417 (0x24c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 11 02:39:09 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E556A3A82CF8C6C2D890A0B485C9DCF8965AE067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:a6:e7:6b:8b:a2:c0:da:5e:e5:c1:c0:e7:
61:b1:65:dc:29:ce:ab:10:d3:81:77:52:ae:3b:2f:
b6:51:50:ae:7e:2b:82:64:27:11:91:ac:8f:98:bd:
0d:e7:0f:0c:50:bf:b9:89:86:c7:92:52:7b:d2:5d:
99:c3:7a:4f:62:ad:40:d3:83:d3:fc:8a:c1:eb:eb:
d7:67:d8:21:f0:ff:cf:96:3b:80:b1:5a:34:bd:17:
5a:af:32:4f:09:98:e0:41:15:e6:11:f7:81:b9:a4:
ac:be:2f:c6:a5:d3:27:b8:79:71:70:b2:77:d8:f1:
01:2c:e1:1c:e5:97:50:cd:7d:31:52:64:9b:73:f6:
27:a3:0f:85:1e:6a:df:e9:7d:48:dc:dc:0c:82:f0:
be:b1:d3:00:e1:37:db:9d:91:63:cf:2e:66:47:1d:
0a:57:77:de:6b:0c:c8:88:2f:af:26:24:2e:45:ec:
a1:6f:ce:fa:cd:5d:27:f0:6c:37:e7:1c:0e:62:cf:
cc:59:45:b6:52:92:ce:0e:3d:50:fb:cb:d4:74:fd:
04:32:e0:55:a0:fa:dc:25:36:98:3e:f7:39:e4:fb:
05:01:ae:df:d6:49:8d:26:e5:ce:49:94:92:8e:76:
06:e0:eb:cf:35:67:6a:c4:fe:99:85:5c:8f:82:92:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:56:A3:A8:2C:F8:C6:C2:D8:90:A0:B4:85:C9:DC:F8:96:5A:E0:67
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/5VajqCz4xsLYkKC0hcnc-JZa4Gc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
c3:cb:8f:81:fe:66:e1:2f:f3:fb:cc:08:a5:a0:93:34:bc:99:
20:e2:09:bb:b5:cf:0c:6f:6e:c4:1d:41:a1:5e:d2:a0:d8:4a:
12:33:46:4d:3d:48:94:fb:f3:7b:31:f6:2f:c9:18:5f:d0:72:
0e:6c:e4:81:3a:ca:84:51:25:9f:e1:0c:a1:21:b0:3d:ce:7d:
94:e1:b3:af:89:9b:64:e6:82:78:97:af:16:a5:f6:0c:33:62:
6e:da:fe:35:0a:9a:aa:9e:30:6a:6f:c9:e3:56:a9:df:df:13:
67:c7:a1:1e:65:07:58:56:b7:67:7c:72:11:40:ed:2e:61:ad:
9a:42:8f:39:07:b7:07:12:74:dd:a6:1a:17:b6:8f:b9:f3:fc:
73:90:3b:61:ae:61:69:f7:77:76:86:e7:ea:02:c2:24:16:5d:
df:c7:94:28:fa:f8:b8:59:45:cc:a2:f0:77:80:79:fd:54:e9:
74:e3:96:d8:db:ac:13:d0:0e:a7:c5:1b:af:36:c5:24:1c:aa:
0a:43:b3:8a:76:59:a3:49:00:df:fc:40:d4:ea:e7:c8:e4:e5:
84:6d:6c:f2:e2:23:fd:a7:a7:80:ff:ff:4c:60:0b:da:78:07:
c4:5d:73:6f:ca:26:18:38:76:17:33:bc:aa:2f:cb:54:d8:d4:
47:0e:ce:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 23:56:55 2025 by rpki-client