Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/65f4A2YRtEvyDu7CesHO4pMkEkg.roa
File: 65f4A2YRtEvyDu7CesHO4pMkEkg.roa (raw, json)
Hash identifier: sPuunUsogoGv+R/T65H7u+UspnY+aMhPiCgTDdohTOw=
Subject key identifier: EB:97:F8:03:66:11:B4:4B:F2:0E:EE:C2:7A:C1:CE:E2:93:24:12:48
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 26E5
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/65f4A2YRtEvyDu7CesHO4pMkEkg.roa
Signing time: Sat 14 Jun 2025 20:39:19 +0000
ROA not before: Sat 14 Jun 2025 20:39:19 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9957 (0x26e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 14 20:39:19 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EB97F8036611B44BF20EEEC27AC1CEE293241248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:35:c3:58:26:b5:c1:fa:cf:c5:68:14:62:
b2:05:99:69:fd:e6:99:d4:4a:59:2b:71:b0:10:06:
78:e0:02:e6:81:42:f8:a5:fb:1a:fc:5c:4a:63:39:
fc:71:e8:e1:7d:7b:77:4c:35:53:2f:d8:05:f2:6d:
55:68:2f:73:be:bf:b2:94:3d:b0:7b:9b:e4:b5:c3:
de:9f:9e:e6:ad:37:f4:96:5f:b4:dc:d7:14:29:b0:
48:b1:a6:c2:fe:b0:7e:98:ec:14:32:ea:da:23:1e:
e5:ce:c2:05:e7:14:fe:b3:60:01:00:8c:50:5a:32:
b3:86:54:1a:48:13:db:77:72:c3:65:8a:33:23:3c:
50:dc:ce:5c:41:d0:56:92:86:c8:e8:fe:18:cc:ba:
99:ca:76:bc:2e:ec:11:76:cf:8a:08:bc:8f:6b:a2:
02:2d:d4:d9:ad:e9:19:b9:5d:f9:4a:01:61:b2:91:
cb:96:3f:70:3c:bd:14:08:ab:e0:b4:65:af:fb:8d:
62:4a:53:54:5f:42:37:c4:f1:00:ad:3e:7b:f4:c7:
e0:26:ca:2b:56:4a:20:54:21:ce:ec:5f:27:2f:05:
de:4f:f3:52:de:9f:b1:20:35:da:be:3e:07:d4:a5:
ba:c7:75:c6:69:29:1d:6c:8b:8c:fc:91:31:01:71:
e5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:97:F8:03:66:11:B4:4B:F2:0E:EE:C2:7A:C1:CE:E2:93:24:12:48
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/65f4A2YRtEvyDu7CesHO4pMkEkg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
0a:09:6a:ed:30:e7:95:27:c8:ff:0e:3d:d9:7f:56:3a:db:60:
9e:e7:87:10:cc:89:5d:6a:cf:17:8e:a4:df:be:95:0b:03:38:
cf:a7:0e:dd:37:5e:c3:2b:63:32:2b:44:db:0e:6d:e7:7f:2c:
b1:08:23:e8:af:57:17:3e:d6:93:3e:84:73:6e:89:0a:78:31:
8e:a8:16:dc:60:a2:52:11:14:70:51:53:a5:ed:f0:9d:ec:a1:
d4:76:91:72:a0:ce:4f:d0:a5:49:17:0d:44:3f:a8:67:24:16:
14:7e:d1:d5:6a:bb:4e:e4:4c:b1:ab:f5:0d:ad:f3:9b:d0:a6:
30:be:42:b6:93:bc:86:43:fc:7c:44:4b:b3:4c:e3:d0:c2:af:
2b:fb:82:8b:63:e3:a8:20:3b:98:99:f5:13:a1:7c:a5:fc:1d:
1a:e0:51:b3:03:3a:8b:6f:53:b8:b1:d2:c0:e8:1f:67:44:59:
75:db:4e:34:57:bd:ae:82:86:54:4f:76:61:d3:94:61:78:b0:
86:6b:91:ea:3f:a5:df:94:64:57:d6:0a:5e:62:42:26:28:ff:
d3:31:67:ac:0d:fd:68:76:34:65:f0:4c:c9:7f:fb:a2:2d:a1:
52:f7:89:6a:5a:dd:6a:e4:06:f3:3f:9e:02:dd:40:1f:8e:eb:
7e:4c:75:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:02 2025 by rpki-client