Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/9-r6l_Dro6m7UIJH78ycXHJwJKs.roa
File: 9-r6l_Dro6m7UIJH78ycXHJwJKs.roa (raw, json)
Hash identifier: sMjMUFvcId6cYHPCPvrhW1d4+tQA8vcnp3rSS8CqYEg=
Subject key identifier: F7:EA:FA:97:F0:EB:A3:A9:BB:50:82:47:EF:CC:9C:5C:72:70:24:AB
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 21FE
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/9-r6l_Dro6m7UIJH78ycXHJwJKs.roa
Signing time: Fri 06 Jun 2025 03:38:47 +0000
ROA not before: Fri 06 Jun 2025 03:38:47 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8702 (0x21fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 6 03:38:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F7EAFA97F0EBA3A9BB508247EFCC9C5C727024AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:0e:18:64:e2:a6:f8:d7:4e:66:62:c9:2d:
fc:e0:aa:ee:03:ef:f7:b5:e3:95:c5:e2:f0:9a:55:
6f:48:55:b3:31:5f:45:2c:b3:86:e5:a1:dd:36:f5:
94:7f:62:16:c2:1f:57:26:4e:4d:55:a6:df:f4:ed:
44:20:73:7f:f0:18:38:52:78:47:fb:cd:dd:f7:bd:
90:03:a9:ac:8f:d8:85:17:ae:c0:ed:2a:ca:ba:67:
99:cf:59:2e:60:d3:0f:b7:e6:8a:8c:41:b5:e6:c3:
02:99:49:fb:33:fb:99:45:5d:d5:80:07:ec:85:54:
3a:d0:94:2c:d0:e9:f2:f7:4b:64:aa:27:84:66:66:
89:eb:ff:24:dc:ee:b5:02:80:b0:39:a5:58:e3:73:
ad:98:04:b6:10:43:7a:e7:d3:d5:a0:f6:c1:5f:41:
80:ca:de:f9:c5:ae:2d:10:d9:ce:35:bd:10:27:a2:
49:65:e0:f8:5e:07:09:31:28:59:ad:a7:33:c2:54:
ad:c3:cf:f2:ee:ac:a5:5b:ef:21:fc:fe:08:b7:b2:
51:10:1d:0f:31:b4:53:e8:f8:06:bc:23:f7:52:fb:
e5:b5:1b:56:c5:a1:fb:f4:a8:da:9b:b7:cf:b0:de:
45:9d:80:6b:e5:5b:37:f1:fd:d6:37:7d:82:c5:9b:
3b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EA:FA:97:F0:EB:A3:A9:BB:50:82:47:EF:CC:9C:5C:72:70:24:AB
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/9-r6l_Dro6m7UIJH78ycXHJwJKs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
b3:bf:9c:27:7c:19:9f:e3:f2:f9:09:06:d1:9b:b3:b4:f6:97:
e3:a4:27:a4:7b:bd:70:91:f9:fd:22:8d:73:ab:88:8a:d4:31:
29:80:90:a4:98:6a:99:65:b9:8e:12:1a:69:78:c2:e0:32:61:
58:44:9f:96:88:8f:88:12:73:a1:0c:92:52:a1:ef:08:85:41:
1d:5a:43:9c:63:2b:50:91:61:46:f6:42:4d:2c:74:f4:0f:12:
f6:ba:7f:c2:20:e0:13:a9:9d:13:ab:2d:15:75:bd:cc:eb:9e:
25:cb:57:63:1a:83:11:1f:ff:0d:b5:b8:87:a5:a9:13:00:ae:
e8:68:4c:09:85:2b:53:93:4b:d1:df:e7:c5:c0:53:7d:f8:e6:
f0:8c:8c:8a:da:75:86:ee:a7:19:b6:38:47:f7:76:73:45:a1:
af:03:ce:d3:b8:a0:43:22:f9:f3:69:10:d8:f5:fe:24:c1:3b:
db:e3:00:a1:3b:6b:1e:38:86:a8:eb:92:ee:ef:15:90:5e:4d:
b2:30:10:ce:94:48:61:f0:91:a0:67:3d:ba:85:e0:80:bb:22:
fe:2d:46:6d:f4:1d:54:d5:16:56:a8:3f:cf:b4:91:bd:06:cc:
67:e5:b2:4e:0e:35:b8:29:a1:88:33:f1:a7:59:79:50:63:d3:
0c:8b:30:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 09:54:00 2025 by rpki-client