Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/6QKwJ-QQ52XvugIMr54B1_yKErY.roa
File: 6QKwJ-QQ52XvugIMr54B1_yKErY.roa (raw, json)
Hash identifier: bRpIdHlEMdAdToxSVucWzpRzTBwxSur5CyGNhno+Gmg=
Subject key identifier: E9:02:B0:27:E4:10:E7:65:EF:BA:02:0C:AF:9E:01:D7:FC:8A:12:B6
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 225B
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/6QKwJ-QQ52XvugIMr54B1_yKErY.roa
Signing time: Fri 06 Jun 2025 19:08:49 +0000
ROA not before: Fri 06 Jun 2025 19:08:49 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8795 (0x225b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 6 19:08:49 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E902B027E410E765EFBA020CAF9E01D7FC8A12B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:35:89:77:25:9f:b1:c9:4f:8e:b4:4d:1b:3a:
83:47:37:74:95:cf:fb:99:23:2f:a6:03:39:c7:c3:
38:02:04:54:ed:d2:ba:b6:1e:dd:11:aa:94:a0:48:
23:c4:c3:ec:22:80:34:a4:4d:9a:0e:23:82:47:f9:
59:ba:96:0d:bb:36:9f:f7:de:bb:55:1d:ce:4e:88:
01:ac:dd:3c:5a:bb:7f:db:f2:8b:94:fc:92:ab:91:
09:4e:28:47:c5:84:d8:ec:23:ff:df:e7:62:e1:9b:
f0:35:36:73:94:d1:ed:23:ac:1a:9b:4c:39:ed:ea:
20:89:a9:75:3c:cb:c7:be:3d:1f:3c:54:6c:ce:53:
80:69:9f:66:85:bf:82:0d:ca:da:0f:4b:ab:97:c1:
4f:f2:36:1a:57:94:53:2d:0e:5b:7a:ad:5b:b7:3c:
a6:29:08:f5:f7:52:d4:9f:3e:d2:2f:df:82:b5:ad:
24:d0:b6:3b:04:0a:69:40:51:0f:49:e6:e9:8f:2e:
d6:b9:5f:bc:7b:a4:78:ff:f8:b2:34:e0:8f:40:7e:
ed:da:2c:0f:c1:bc:37:82:5e:a8:de:59:2c:f8:d3:
e2:fc:fc:f6:17:6a:4b:cb:ef:36:16:6b:4c:d1:24:
1c:98:b2:58:0b:42:3a:47:47:4a:0d:8a:cc:f4:63:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:02:B0:27:E4:10:E7:65:EF:BA:02:0C:AF:9E:01:D7:FC:8A:12:B6
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/6QKwJ-QQ52XvugIMr54B1_yKErY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
ae:38:3d:47:fb:29:64:2d:a3:cf:7a:c0:75:f6:da:5a:0c:13:
92:94:b4:ad:e0:37:87:ed:71:4d:c8:cf:44:da:92:b2:da:d2:
70:ec:cc:ca:65:86:34:10:8f:7c:27:13:df:2f:53:12:f2:ef:
a1:28:d7:06:d7:73:89:2d:4f:60:a4:24:1c:79:4d:c2:aa:09:
6f:ea:72:fd:5d:93:86:ec:bd:ae:01:8c:56:d4:54:95:74:38:
95:01:64:a1:63:03:ea:79:a3:b2:36:49:f4:23:d7:79:72:16:
7b:36:6c:8b:5e:41:f3:19:19:e3:b4:1d:a5:c0:31:db:73:70:
3d:9b:84:d7:24:a3:07:89:a6:50:a4:a3:97:24:f9:79:af:ec:
6e:10:50:9e:78:ba:81:1b:45:c7:1d:2a:d2:70:23:4e:58:e9:
2f:96:af:a7:b3:f8:ed:cd:d2:02:70:d4:b1:01:49:77:d4:fb:
aa:f9:4f:48:5a:40:8e:0a:84:52:da:92:e7:1d:2c:c6:dc:4a:
b4:84:67:55:e3:95:a6:5f:53:39:d9:e2:c4:85:54:1e:27:a0:
82:2a:95:64:71:63:e8:a5:fa:41:c7:71:a2:35:69:41:24:fe:
57:a9:3d:70:cd:2f:09:a7:3e:72:b2:86:ea:ab:05:b8:db:ef:
bb:0b:94:9a
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICIlswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDYx
OTA4NDlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU5MDJCMDI3RTQxMEU3
NjVFRkJBMDIwQ0FGOUUwMUQ3RkM4QTEyQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUNYl3JZ+xyU+OtE0bOoNHN3SVz/uZIy+mAznHwzgCBFTt0rq2
Ht0RqpSgSCPEw+wigDSkTZoOI4JH+Vm6lg27Np/33rtVHc5OiAGs3Txau3/b8ouU
/JKrkQlOKEfFhNjsI//f52Lhm/A1NnOU0e0jrBqbTDnt6iCJqXU8y8e+PR88VGzO
U4Bpn2aFv4INytoPS6uXwU/yNhpXlFMtDlt6rVu3PKYpCPX3UtSfPtIv34K1rSTQ
tjsECmlAUQ9J5umPLta5X7x7pHj/+LI04I9Afu3aLA/BvDeCXqjeWSz40+L8/PYX
akvL7zYWa0zRJByYslgLQjpHR0oNisz0Y43BAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQU6QKwJ+QQ52XvugIMr54B1/yKErYwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvNlFLd0otUVE1Mlh2
dWdJTXI1NEIxX3lLRXJZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAK44PUf7KWQto896wHX22loME5KU
tK3gN4ftcU3Iz0TakrLa0nDszMplhjQQj3wnE98vUxLy76Eo1wbXc4ktT2CkJBx5
TcKqCW/qcv1dk4bsva4BjFbUVJV0OJUBZKFjA+p5o7I2SfQj13lyFns2bIteQfMZ
GeO0HaXAMdtzcD2bhNckoweJplCko5ck+Xmv7G4QUJ54uoEbRccdKtJwI05Y6S+W
r6ez+O3N0gJw1LEBSXfU+6r5T0haQI4KhFLakucdLMbcSrSEZ1XjlaZfUznZ4sSF
VB4noIIqlWRxY+il+kHHcaI1aUEk/lepPXDNLwmnPnKyhuqrBbjb77sLlJo=
-----END CERTIFICATE-----
Generated at Sat Jun 21 10:03:12 2025 by rpki-client