Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/9lnx2RYCavL5VEpr3ZhDuEgglL4.roa
File: 9lnx2RYCavL5VEpr3ZhDuEgglL4.roa (raw, json)
Hash identifier: EHeP5jfA0k43kG4DPydyDZDSlovSQ8sF1zGqTHtkh54=
Subject key identifier: F6:59:F1:D9:16:02:6A:F2:F9:54:4A:6B:DD:98:43:B8:48:20:94:BE
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2282
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/9lnx2RYCavL5VEpr3ZhDuEgglL4.roa
Signing time: Sat 07 Jun 2025 01:38:51 +0000
ROA not before: Sat 07 Jun 2025 01:38:51 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8834 (0x2282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 7 01:38:51 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F659F1D916026AF2F9544A6BDD9843B8482094BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:91:30:09:93:88:bf:07:10:2f:32:a7:dd:
cf:69:2e:a5:b7:3c:1b:43:b5:e9:99:51:1c:2c:ca:
d1:9f:64:6e:6c:8b:62:08:1b:38:71:53:7d:dd:04:
2d:8b:0b:b6:3a:70:36:14:3b:26:a6:8d:06:ce:17:
a0:d4:fb:33:af:18:8c:72:f1:25:fc:18:35:af:d0:
8e:27:a4:45:66:fc:cf:74:4f:7f:39:d0:6e:2d:df:
bc:6a:d3:c3:60:70:fc:e9:21:d5:c3:af:7f:ae:9b:
91:5e:50:c5:df:ae:a6:76:20:da:32:37:96:bc:dc:
db:08:5f:6f:93:33:74:71:76:71:93:9e:26:6c:30:
27:11:9e:fa:61:71:bb:0a:59:d6:7a:a4:b6:55:fd:
64:a7:ed:49:5c:76:b0:44:69:55:b9:d7:0f:ad:82:
52:ec:73:fc:0d:4d:2f:00:71:e6:f1:c6:39:7f:dc:
3f:32:0c:33:03:fb:0a:46:18:95:41:90:1c:76:77:
26:f0:6e:89:2d:aa:08:79:eb:1f:26:1b:64:81:5a:
1d:23:ab:7c:c3:92:b1:af:80:4d:93:e9:03:2e:33:
c9:ed:51:fc:8e:2a:d8:b4:e3:04:c5:34:45:4a:78:
b2:a0:5b:dc:e0:2e:a5:30:7c:5c:eb:19:b4:32:82:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:59:F1:D9:16:02:6A:F2:F9:54:4A:6B:DD:98:43:B8:48:20:94:BE
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/9lnx2RYCavL5VEpr3ZhDuEgglL4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
12:51:72:20:7b:20:ac:91:ef:bf:74:36:79:93:70:e3:ee:da:
23:19:e5:b8:88:d3:c7:3e:e5:ca:73:6d:17:12:68:e8:08:f0:
0a:84:63:75:e5:64:7e:4e:85:40:96:b9:5b:cd:40:4a:f4:f5:
bf:c6:77:89:57:49:00:14:0c:da:2b:bf:58:2e:d0:bd:60:08:
6c:cb:77:15:03:23:bc:4d:b4:69:fa:b8:5a:dc:98:56:3a:88:
a5:5d:11:5c:85:d5:27:96:01:e0:83:dc:bc:b3:10:9f:e5:b8:
c1:88:7b:95:36:b4:6f:61:ca:0e:d7:cd:5c:f2:d7:b7:0a:65:
27:dc:ae:49:c1:23:5f:5c:ed:2b:cc:f7:1d:b4:26:03:66:c2:
e0:dd:74:cb:73:f9:b5:4b:58:15:8b:95:c2:e4:6f:5c:47:3f:
85:28:c9:81:3e:f0:dc:aa:44:34:3b:65:a9:1d:9b:ff:34:03:
5d:77:39:c1:26:5c:81:79:9c:03:83:32:49:a2:45:b7:34:8d:
dd:6a:30:eb:46:13:cc:f8:3e:55:80:b1:be:db:01:c8:5b:32:
99:62:1a:58:ab:e3:36:df:3d:e5:fe:de:3b:47:d5:22:8f:7d:
5c:54:44:91:0a:d9:74:45:22:fb:b7:c6:2b:ed:4d:85:33:04:
94:3c:48:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:05:03 2025 by rpki-client