Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/6cPQhJiggm8HlpLclWvqTSen4c0.roa
File: 6cPQhJiggm8HlpLclWvqTSen4c0.roa (raw, json)
Hash identifier: z2ohLr1ju4ko+L785rV0Ffcw2kceNbVZi3YKbuYQShk=
Subject key identifier: E9:C3:D0:84:98:A0:82:6F:07:96:92:DC:95:6B:EA:4D:27:A7:E1:CD
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 25B8
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/6cPQhJiggm8HlpLclWvqTSen4c0.roa
Signing time: Thu 12 Jun 2025 18:39:13 +0000
ROA not before: Thu 12 Jun 2025 18:39:13 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9656 (0x25b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 12 18:39:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E9C3D08498A0826F079692DC956BEA4D27A7E1CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:91:c2:51:d6:af:b6:5d:21:34:cf:51:1a:06:
db:d6:68:86:08:3d:c3:0c:1e:a1:87:0b:ae:cd:a7:
87:83:f5:af:54:7d:7f:97:04:54:29:ac:83:68:56:
45:46:7a:1a:d0:5a:fd:8f:1f:60:58:8f:17:fe:91:
01:ef:63:b8:c4:6d:2a:f9:17:46:3b:12:88:b7:be:
fc:38:24:be:70:8a:79:76:5e:67:02:c4:01:8f:60:
3a:ba:e1:47:02:22:4e:42:6d:d2:69:4a:6e:6d:c9:
81:61:f2:cd:13:53:88:bb:d2:d5:9b:23:68:33:48:
af:34:da:e0:af:73:d1:81:15:b4:04:60:b0:b3:4e:
ae:4c:c2:d7:9f:d2:7f:d0:72:ce:e5:1e:a8:85:f8:
37:8c:f4:f9:49:76:69:45:f0:90:48:5e:71:93:a8:
2c:23:84:1d:3f:ba:42:c8:10:1f:ee:34:b2:3a:b4:
c7:bd:ef:d4:cf:b9:61:af:95:47:9b:6f:98:eb:66:
4c:c4:17:45:1a:67:83:35:2f:d2:b2:60:49:f1:4b:
c3:c8:d8:7b:85:50:a7:58:84:33:91:0b:0a:8a:b5:
25:53:bf:92:08:8a:ad:c9:9c:a1:4d:3a:ef:ac:86:
7b:6f:ee:a3:a0:83:e4:b7:e6:cc:75:ba:b8:f8:dc:
8c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C3:D0:84:98:A0:82:6F:07:96:92:DC:95:6B:EA:4D:27:A7:E1:CD
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/6cPQhJiggm8HlpLclWvqTSen4c0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
4c:9f:06:86:94:1c:de:ee:ab:dd:61:2b:74:79:c1:9a:2e:51:
db:58:21:a4:64:12:bf:9e:a4:60:39:49:f6:89:c2:41:50:5d:
e4:b6:c0:3f:2d:51:95:5f:d6:5b:b4:47:a1:dd:26:61:3a:5e:
b0:b0:2a:e7:e3:e4:14:52:4c:7a:04:6b:f2:73:3f:30:db:b5:
1e:9e:ea:ee:ef:52:65:e6:4e:e8:90:2d:8e:3b:37:03:e2:9a:
e6:a8:2a:0a:4a:d1:ac:fa:76:03:b8:71:f7:15:26:4e:6a:3f:
41:42:6e:0c:3c:37:cb:ea:35:5f:7c:a8:2f:cf:7d:ac:4c:48:
b5:be:25:84:6a:6d:a0:98:af:a1:83:2f:38:9d:2f:c8:2f:09:
a2:46:4d:58:15:6d:03:81:1b:13:3b:98:95:c0:2e:a9:ce:c9:
81:28:aa:bb:ae:28:07:0e:39:db:31:2b:45:1d:2e:ff:c3:27:
01:21:c1:a6:a0:6a:b7:38:a4:1e:2b:40:b4:7a:27:06:94:62:
59:9c:c6:87:a7:b7:85:d0:b4:22:e7:a5:b6:3f:f4:f2:2e:a5:
bc:c5:d1:e1:e7:1a:d6:06:f4:78:36:10:dc:63:15:82:51:be:
5a:36:31:55:c6:f6:74:e6:55:a2:b6:21:03:74:b7:ba:e3:a0:
26:2d:de:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:41:42 2025 by rpki-client