Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/BL7LfNGCOO__wgybqDSPbofKCVE.roa
File: BL7LfNGCOO__wgybqDSPbofKCVE.roa (raw, json)
Hash identifier: w2r8vNDUC6SRKPomhPn9OOJLEPmLffSVzRnIcoJhnQI=
Subject key identifier: 04:BE:CB:7C:D1:82:38:EF:FF:C2:0C:9B:A8:34:8F:6E:87:CA:09:51
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 259A
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/BL7LfNGCOO__wgybqDSPbofKCVE.roa
Signing time: Thu 12 Jun 2025 13:39:13 +0000
ROA not before: Thu 12 Jun 2025 13:39:13 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9626 (0x259a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 12 13:39:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=04BECB7CD18238EFFFC20C9BA8348F6E87CA0951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:96:cb:a4:0b:33:e3:41:f2:d9:53:70:c0:1f:
30:95:e0:38:e1:f7:ac:60:dc:b1:16:78:f2:48:75:
74:96:ff:ba:e4:17:a0:fa:bc:f5:e0:bf:30:cf:43:
6f:8b:a6:2f:f1:ca:87:5f:41:8e:cf:59:14:ff:46:
1b:62:8a:2d:6f:7f:5c:28:e2:e1:4e:2f:7c:bf:a2:
e4:a8:ac:b0:02:f4:7d:10:33:f6:6c:68:17:18:7a:
7a:20:cd:6a:dd:d8:af:d0:ac:4c:f5:f1:52:0e:29:
47:e8:21:cf:aa:a8:14:cd:a9:b6:11:36:a5:8f:90:
07:8f:ba:c0:20:86:8c:35:84:d1:c3:b2:5a:72:61:
bd:b5:72:4e:d5:34:b5:83:76:c3:0a:ad:55:aa:eb:
7e:ec:12:67:67:d6:ed:d7:e9:a7:21:e2:90:67:4b:
47:54:1b:da:75:fb:8e:21:a1:71:44:eb:b6:5a:f6:
b7:e7:95:e7:31:a4:5e:00:9e:0a:44:50:92:48:0d:
21:08:26:a0:e4:55:e4:f4:a9:10:7a:8d:1e:a6:89:
52:14:af:7c:54:c5:d9:3b:c4:cc:e0:4e:75:bd:ed:
5f:30:39:a0:df:0f:c5:16:68:37:91:09:0c:7d:6e:
ba:7c:8b:b6:cf:a3:ef:c5:da:4c:ca:13:1c:3e:d6:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BE:CB:7C:D1:82:38:EF:FF:C2:0C:9B:A8:34:8F:6E:87:CA:09:51
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/BL7LfNGCOO__wgybqDSPbofKCVE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
3a:b8:1a:12:14:52:a2:65:22:28:36:53:90:a2:32:83:56:9f:
ab:4d:8b:22:7f:5c:7e:83:eb:d5:4f:0e:00:a7:94:d2:06:c0:
ca:b8:74:5a:1c:bb:80:c3:e9:44:95:b0:dc:33:08:12:6b:b4:
c4:08:61:ce:ea:aa:19:3f:d3:97:17:23:88:e9:8d:33:e5:d0:
8e:1e:58:a3:43:e0:fd:e9:e3:5b:07:ee:8d:07:95:d8:b3:e1:
12:95:a1:8d:75:73:9f:5f:1f:8f:cf:20:aa:ce:17:07:7d:23:
d1:d1:55:91:5b:63:de:68:c3:a4:96:30:ac:85:f8:84:1e:38:
51:76:4d:3a:73:89:b4:c3:0c:46:aa:7c:f7:72:65:30:7a:5e:
44:c9:4c:52:c0:fa:c6:73:03:62:81:04:88:e7:d2:51:39:5f:
0b:8c:32:01:54:2f:ab:c3:83:9e:31:e5:71:5e:68:3f:d3:18:
c1:41:76:47:e9:8a:e4:57:b3:ac:2b:8a:f8:9f:81:cd:61:61:
af:b3:25:11:a1:75:cb:f4:6e:df:6a:93:c9:98:3a:12:a8:75:
9a:67:5f:7b:a3:a9:a5:f7:52:81:88:fd:e0:4a:c1:02:75:8f:
35:17:fb:a3:fa:09:54:f3:1f:3b:c1:d4:ad:0e:40:5d:9e:bc:
38:82:ab:3a
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICJZowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTIx
MzM5MTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDA0QkVDQjdDRDE4MjM4
RUZGRkMyMEM5QkE4MzQ4RjZFODdDQTA5NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCVlsukCzPjQfLZU3DAHzCV4Djh96xg3LEWePJIdXSW/7rkF6D6
vPXgvzDPQ2+Lpi/xyodfQY7PWRT/Rhtiii1vf1wo4uFOL3y/ouSorLAC9H0QM/Zs
aBcYenogzWrd2K/QrEz18VIOKUfoIc+qqBTNqbYRNqWPkAePusAghow1hNHDslpy
Yb21ck7VNLWDdsMKrVWq637sEmdn1u3X6ach4pBnS0dUG9p1+44hoXFE67Za9rfn
lecxpF4AngpEUJJIDSEIJqDkVeT0qRB6jR6miVIUr3xUxdk7xMzgTnW97V8wOaDf
D8UWaDeRCQx9brp8i7bPo+/F2kzKExw+1q7LAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUBL7LfNGCOO//wgybqDSPbofKCVEwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvQkw3TGZOR0NPT19f
d2d5YnFEU1Bib2ZLQ1ZFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBADq4GhIUUqJlIig2U5CiMoNWn6tN
iyJ/XH6D69VPDgCnlNIGwMq4dFocu4DD6USVsNwzCBJrtMQIYc7qqhk/05cXI4jp
jTPl0I4eWKND4P3p41sH7o0Hldiz4RKVoY11c59fH4/PIKrOFwd9I9HRVZFbY95o
w6SWMKyF+IQeOFF2TTpzibTDDEaqfPdyZTB6XkTJTFLA+sZzA2KBBIjn0lE5XwuM
MgFUL6vDg54x5XFeaD/TGMFBdkfpiuRXs6wrivifgc1hYa+zJRGhdcv0bt9qk8mY
OhKodZpnX3ujqaX3UoGI/eBKwQJ1jzUX+6P6CVTzHzvB1K0OQF2evDiCqzo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:26:20 2025 by rpki-client