Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/AR1tQF-W97Slv5DVVoeGuJS_iRQ.roa
File: AR1tQF-W97Slv5DVVoeGuJS_iRQ.roa (raw, json)
Hash identifier: 4UQhz+BdiLmOUVnYuryKPoe7Qy3tKYpoXluP86zPZLk=
Subject key identifier: 01:1D:6D:40:5F:96:F7:B4:A5:BF:90:D5:56:87:86:B8:94:BF:89:14
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1FF7
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/AR1tQF-W97Slv5DVVoeGuJS_iRQ.roa
Signing time: Mon 02 Jun 2025 13:08:36 +0000
ROA not before: Mon 02 Jun 2025 13:08:36 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8183 (0x1ff7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 2 13:08:36 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=011D6D405F96F7B4A5BF90D5568786B894BF8914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:61:48:a5:7d:c6:2c:6f:89:64:5d:c0:7c:
7c:e6:db:a0:83:2f:6e:be:6d:09:f7:9b:08:e2:06:
35:0c:7a:db:01:f8:37:ca:2f:7f:57:08:8f:c1:b2:
26:5a:5e:de:5c:80:fe:40:be:ba:57:53:85:a9:16:
56:f9:03:0f:2d:f5:18:86:17:50:e9:08:4e:46:70:
68:e4:30:16:5e:11:f5:99:9e:16:b7:e8:b0:8a:06:
b3:c5:8f:6a:c4:ef:a5:58:a1:df:62:c3:fd:33:da:
62:0c:1c:31:92:aa:59:e6:39:ef:1c:6f:6b:71:d8:
24:6e:df:96:46:eb:0a:41:dc:27:60:39:43:16:32:
53:b0:d2:3e:2a:05:11:4b:c8:14:e8:ba:d8:8a:5f:
9b:a4:39:53:d5:b3:df:d1:20:65:52:e7:2d:aa:ec:
47:d9:6d:79:a6:ad:f4:1b:d0:2e:39:d1:a3:cc:16:
1c:92:79:7f:3d:e8:0e:b1:28:46:b0:aa:c4:25:3e:
33:84:79:13:98:72:d9:00:ff:7d:75:b0:fb:f1:f3:
28:5c:a1:7e:af:84:f0:f1:30:57:30:24:18:59:1c:
0a:63:ed:bf:12:84:b9:29:fc:08:c8:0d:ca:d6:5b:
51:c5:e7:e8:bb:12:1a:1c:61:54:94:46:2e:b3:fe:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1D:6D:40:5F:96:F7:B4:A5:BF:90:D5:56:87:86:B8:94:BF:89:14
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/AR1tQF-W97Slv5DVVoeGuJS_iRQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
9d:1b:21:cd:97:c1:b5:c7:e2:bd:68:2a:20:94:52:fe:21:ff:
1e:ff:44:8b:2a:c1:9d:8e:8c:1b:51:05:24:05:08:ed:af:82:
a5:81:66:65:c3:9c:98:8e:e7:40:ff:e3:63:6e:9a:37:6f:5b:
4f:d6:c2:03:7c:8a:a7:bf:44:cf:ac:00:d9:43:25:4b:f3:78:
88:97:15:3a:39:6b:22:71:95:31:e0:fa:68:bb:e5:27:4c:2c:
ca:53:d6:55:1d:96:22:27:ca:01:ad:88:27:a4:5f:e0:e4:a6:
41:25:b2:ed:2d:47:e4:b4:61:82:ac:d5:b7:a0:c1:12:e3:77:
ed:9b:b4:19:ec:ab:69:9e:ae:76:50:3e:4a:3a:fb:40:61:c4:
a1:5b:03:a3:12:fd:6e:e3:d1:01:fb:16:57:37:25:57:32:d6:
6b:f2:ab:16:69:8b:c7:5b:c5:01:fc:6e:67:61:71:d1:2e:bd:
e7:0e:52:44:a2:b2:91:93:db:36:77:26:08:47:f6:87:fe:52:
45:9b:1d:39:bd:88:2f:b1:5f:e5:cf:8c:9e:07:f7:8d:b8:14:
7e:2f:2f:d6:0c:9e:02:16:0f:4a:8f:4f:67:1b:ca:b4:a0:cf:
17:c6:4a:25:b9:3a:4d:22:26:92:c7:07:df:ac:90:86:b0:d5:
26:a0:d8:4d
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICH/cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDIx
MzA4MzZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDAxMUQ2RDQwNUY5NkY3
QjRBNUJGOTBENTU2ODc4NkI4OTRCRjg5MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/cmFIpX3GLG+JZF3AfHzm26CDL26+bQn3mwjiBjUMetsB+DfK
L39XCI/BsiZaXt5cgP5AvrpXU4WpFlb5Aw8t9RiGF1DpCE5GcGjkMBZeEfWZnha3
6LCKBrPFj2rE76VYod9iw/0z2mIMHDGSqlnmOe8cb2tx2CRu35ZG6wpB3CdgOUMW
MlOw0j4qBRFLyBToutiKX5ukOVPVs9/RIGVS5y2q7EfZbXmmrfQb0C450aPMFhyS
eX896A6xKEawqsQlPjOEeROYctkA/311sPvx8yhcoX6vhPDxMFcwJBhZHApj7b8S
hLkp/AjIDcrWW1HF5+i7EhocYVSURi6z/qJDAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUAR1tQF+W97Slv5DVVoeGuJS/iRQwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvQVIxdFFGLVc5N1Ns
djVEVlZvZUd1SlNfaVJRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAJ0bIc2XwbXH4r1oKiCUUv4h/x7/
RIsqwZ2OjBtRBSQFCO2vgqWBZmXDnJiO50D/42NumjdvW0/WwgN8iqe/RM+sANlD
JUvzeIiXFTo5ayJxlTHg+mi75SdMLMpT1lUdliInygGtiCekX+DkpkElsu0tR+S0
YYKs1begwRLjd+2btBnsq2mernZQPko6+0BhxKFbA6MS/W7j0QH7Flc3JVcy1mvy
qxZpi8dbxQH8bmdhcdEuvecOUkSispGT2zZ3JghH9of+UkWbHTm9iC+xX+XPjJ4H
9424FH4vL9YMngIWD0qPT2cbyrSgzxfGSiW5Ok0iJpLHB9+skIaw1Sag2E0=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:50:16 2025 by rpki-client