Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/74JsbGsLc-TkMLnMWI-jzzvUxEA.roa
File: 74JsbGsLc-TkMLnMWI-jzzvUxEA.roa (raw, json)
Hash identifier: 1aJFv4ijZACzs9Yht4xtoC1KfAs9fk69BQtx8KVTRDE=
Subject key identifier: EF:82:6C:6C:6B:0B:73:E4:E4:30:B9:CC:58:8F:A3:CF:3B:D4:C4:40
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 228C
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/74JsbGsLc-TkMLnMWI-jzzvUxEA.roa
Signing time: Sat 07 Jun 2025 03:08:52 +0000
ROA not before: Sat 07 Jun 2025 03:08:52 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8844 (0x228c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 7 03:08:52 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EF826C6C6B0B73E4E430B9CC588FA3CF3BD4C440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:f6:1c:4e:29:1c:68:59:ec:97:38:98:af:
92:90:69:00:16:fe:22:d0:ae:f3:89:8e:75:e5:8b:
e5:78:a4:d3:5d:1b:63:a0:94:e6:21:f0:15:e2:14:
70:0d:df:b9:6e:d5:3f:ce:b2:b2:25:73:b2:1b:3d:
65:b7:76:13:3c:67:a2:4e:47:a6:db:ea:4d:d0:4d:
50:21:04:f6:af:b3:73:89:87:ef:af:9f:67:e9:ea:
22:17:1a:64:9f:2b:bc:b7:fd:e8:fa:0f:3f:d0:f4:
c2:2b:a6:47:8d:9d:4f:d2:56:59:5d:d8:3f:77:84:
de:56:49:44:5e:ec:af:d2:1b:14:3e:84:5f:18:b5:
9e:2f:db:95:4d:9c:fc:4c:e4:e5:87:02:0b:ea:be:
f5:3a:2c:1f:17:61:f7:8e:0f:80:45:da:da:e7:a9:
90:07:f4:16:1b:8d:81:0c:42:97:99:33:ad:8d:77:
c1:09:0d:81:2a:73:71:c1:82:b7:c0:3c:d6:97:63:
3a:63:4b:a3:a3:8f:91:7f:5b:b1:77:8e:7a:fc:c9:
ba:48:d9:8c:51:ad:da:a4:73:11:16:b0:3e:06:a6:
50:85:1c:ae:c2:f6:c2:9f:61:e8:8b:79:13:3e:81:
20:41:bc:dc:e1:b2:4d:07:73:8d:5d:03:88:c8:0f:
46:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:82:6C:6C:6B:0B:73:E4:E4:30:B9:CC:58:8F:A3:CF:3B:D4:C4:40
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/74JsbGsLc-TkMLnMWI-jzzvUxEA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
2a:e6:f0:be:68:9e:37:a8:ae:e6:4b:36:58:06:fa:0d:0e:60:
b5:62:b4:a1:25:3c:a6:63:48:fb:71:2f:5a:8b:32:98:c2:c9:
9a:e9:74:8c:b7:f5:56:0e:7c:d8:fa:9b:8d:2a:a1:ed:24:5a:
4c:53:fc:fb:50:ea:61:3b:c9:53:00:6c:a4:6b:6c:17:f3:7b:
bf:b6:dd:73:2d:a1:61:dd:9c:a7:57:e3:d0:0d:ae:b4:dc:90:
2d:c4:d8:56:12:5f:1f:ba:9a:9b:eb:eb:5a:40:20:b3:7f:c2:
16:05:85:e3:d0:78:f7:47:5d:5c:4a:fa:81:e9:99:c0:5d:01:
77:81:c6:b8:9e:d7:1c:5b:87:32:3f:09:6a:8d:c3:fc:31:eb:
b0:3a:54:e9:95:d8:9b:f9:15:3d:a3:65:5a:90:b4:0f:3c:b5:
4e:8a:96:ea:75:e3:5b:9f:71:3b:6b:91:e0:44:46:dc:a2:84:
35:be:61:6c:c9:7e:7b:b4:05:77:3a:17:05:b4:31:12:2a:7b:
c1:ea:e9:25:36:dd:83:05:73:94:fb:a4:09:c4:0c:20:b3:b7:
51:b6:07:b9:aa:cd:e8:07:9b:b7:7c:a1:8e:2c:93:dd:f5:61:
88:67:09:97:42:dd:33:12:20:f2:30:02:0f:6f:4d:4f:46:d3:
fc:e3:ee:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:08 2025 by rpki-client