Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/7JSIfDkjXtbYVXy-4BvvOylMGjc.roa
File: 7JSIfDkjXtbYVXy-4BvvOylMGjc.roa (raw, json)
Hash identifier: KentViMSpR7TQKWRFgCBuJ16fsB21FNILWhA2Us94kY=
Subject key identifier: EC:94:88:7C:39:23:5E:D6:D8:55:7C:BE:E0:1B:EF:3B:29:4C:1A:37
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 23F9
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/7JSIfDkjXtbYVXy-4BvvOylMGjc.roa
Signing time: Mon 09 Jun 2025 16:08:59 +0000
ROA not before: Mon 09 Jun 2025 16:08:59 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9209 (0x23f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 9 16:08:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EC94887C39235ED6D8557CBEE01BEF3B294C1A37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0a:d3:73:47:54:79:0a:9f:54:7f:a8:84:ff:
e6:aa:46:b9:45:70:61:b6:0c:2e:2f:4c:cd:2c:04:
c5:b2:71:f7:f1:26:e7:05:65:86:37:a9:d6:72:45:
d7:69:d3:3e:b0:dd:3b:45:c9:52:7b:be:a9:0f:37:
8c:a6:02:97:2b:a6:15:18:2d:13:f9:2b:9e:82:37:
3f:6c:4c:4f:0d:b6:e1:a1:b7:88:66:c4:86:02:15:
78:28:5d:22:45:4b:4f:f4:81:cf:f9:15:3c:9b:0c:
3f:b1:09:e6:42:64:1d:59:b1:2a:a3:a7:d4:6d:76:
35:ff:c2:96:e9:11:48:d0:2a:06:0f:6e:dd:e5:7a:
d5:2a:a8:87:60:3f:40:bc:6d:e8:f7:04:ae:be:12:
cc:2a:42:21:a2:50:d0:4d:66:67:2b:3e:1e:af:7e:
e0:13:b0:54:79:06:dd:d5:33:d2:06:f5:5d:dc:35:
ef:2d:bc:41:96:39:fa:4a:0c:86:49:0e:51:aa:84:
de:c1:eb:04:14:b1:5f:d3:86:56:ab:dd:4b:00:be:
ab:64:d6:37:87:53:ba:15:30:53:52:44:13:d5:89:
bc:bc:61:fa:a5:9f:c0:4f:6d:ba:d1:c1:40:49:a8:
f6:e0:ba:50:b4:c5:14:09:c6:49:a4:f3:54:54:9b:
f6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:94:88:7C:39:23:5E:D6:D8:55:7C:BE:E0:1B:EF:3B:29:4C:1A:37
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/7JSIfDkjXtbYVXy-4BvvOylMGjc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
05:93:15:7e:33:8b:55:7d:b0:68:eb:f1:82:db:8a:ca:e9:e1:
53:11:e6:f5:03:5a:90:a3:c4:77:73:94:77:bb:41:f2:9c:60:
2d:31:9b:00:e9:51:b2:9d:1d:94:78:23:75:49:33:4c:11:46:
f7:1d:7f:6f:b9:8a:97:c0:dc:ce:6a:08:de:07:2b:45:01:73:
f4:c0:d5:02:29:a7:29:f9:15:ea:55:37:11:8b:2b:ba:cd:02:
17:11:cd:18:68:40:58:3e:b6:63:0e:ed:b0:d9:68:98:ba:23:
18:1b:16:60:86:83:14:bf:27:26:b5:d7:f6:12:e5:05:af:01:
39:58:e5:f7:fc:43:02:37:3e:f7:53:18:90:7d:19:d0:c0:f0:
65:af:52:ec:66:3c:29:a3:b3:49:6e:2e:14:3d:cf:16:50:7f:
78:95:f7:0c:4a:5f:1d:99:a8:e9:44:a3:df:98:39:cc:40:00:
91:40:96:b7:4d:87:9d:33:60:cf:cf:ea:6a:3f:ab:d2:00:b8:
65:b2:a6:86:f3:c1:6e:fa:73:be:ba:3e:43:98:03:4d:99:ec:
71:56:13:60:ef:bc:1b:f7:6d:95:9f:76:e4:74:59:60:60:47:
fd:85:ef:72:96:c1:46:c1:be:e6:23:87:17:2d:29:e3:ea:13:
0a:f0:06:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:10:59 2025 by rpki-client