Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/CLOaRQK4WPJJgNbdRr6QL1QCrc8.roa
File: CLOaRQK4WPJJgNbdRr6QL1QCrc8.roa (raw, json)
Hash identifier: LqrevMAm16lsGEyYfr5Ers9qZwnEnQ438s2FodcsjQE=
Subject key identifier: 08:B3:9A:45:02:B8:58:F2:49:80:D6:DD:46:BE:90:2F:54:02:AD:CF
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 23E8
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/CLOaRQK4WPJJgNbdRr6QL1QCrc8.roa
Signing time: Mon 09 Jun 2025 13:09:00 +0000
ROA not before: Mon 09 Jun 2025 13:09:00 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9192 (0x23e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 9 13:09:00 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=08B39A4502B858F24980D6DD46BE902F5402ADCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:4c:88:32:3e:2f:dd:59:1f:69:08:3a:d1:
cb:58:b0:5e:03:c5:cd:fd:f9:2c:9b:a2:1d:39:7e:
73:ff:a0:b9:36:11:85:e8:b2:fd:e7:95:c2:47:aa:
4c:94:5f:60:20:48:b7:62:4b:b3:02:bc:23:49:23:
64:0d:b7:c6:80:0f:d0:25:58:56:f0:b6:e6:6a:04:
5a:72:67:fb:a2:4b:7d:67:90:54:d1:58:3d:2f:ad:
2c:b9:79:ee:6a:89:b0:4a:ed:7a:86:19:6e:ac:68:
2c:01:44:2a:ec:11:8d:ff:51:5b:e2:44:7a:19:6b:
a2:9c:52:f5:ee:33:3b:74:9b:a4:73:9d:4e:ec:30:
fe:68:11:8d:bf:e2:60:72:9b:8e:f8:a0:e5:f9:ee:
be:92:fe:d0:f3:2e:9e:e3:62:d3:80:8b:db:bc:d7:
c3:1c:53:7a:fa:30:97:08:d1:75:44:bb:ab:d1:31:
62:ce:cc:5c:a5:fe:77:ca:34:f5:75:e7:ad:ed:1c:
73:cf:26:8f:1a:f4:21:ce:df:c2:9c:eb:5c:60:8e:
af:16:90:1b:59:62:cb:8c:9f:0a:4f:14:92:13:29:
8b:10:94:ad:4f:23:fe:d0:ae:0c:3e:dd:76:e2:18:
60:a9:72:c8:92:e8:d4:4a:9d:80:7d:57:32:5f:f5:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B3:9A:45:02:B8:58:F2:49:80:D6:DD:46:BE:90:2F:54:02:AD:CF
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/CLOaRQK4WPJJgNbdRr6QL1QCrc8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
88:35:52:d6:40:8b:ff:6f:09:2b:f6:8b:0a:7b:c3:a8:9b:f3:
59:2c:1b:23:fc:fa:46:45:26:ba:9f:75:46:6e:2a:48:3e:b3:
16:2d:59:c5:8a:d9:70:77:2f:2b:93:b9:40:3d:9e:17:fa:03:
bb:95:3f:1d:f0:31:63:e2:fd:25:cb:46:98:ea:4b:1e:9e:f5:
6d:da:ca:71:60:15:05:7b:e1:ee:31:a9:7d:1c:60:66:fd:52:
17:1f:3d:70:83:a0:7b:2d:38:be:78:59:23:7e:c3:80:24:50:
cd:cc:28:59:e1:68:ee:25:68:d4:1b:54:ad:16:d9:e7:13:16:
21:07:f6:a3:88:8f:03:10:77:69:f3:8c:46:cc:13:fe:0d:15:
64:0b:3f:f1:6c:b0:9c:f0:3e:26:8f:64:f0:38:9d:db:1b:71:
a8:3a:76:d2:20:30:92:4c:1b:9a:e9:e8:1b:2c:36:b0:f6:0a:
6a:39:cc:07:88:4a:7b:4c:2d:58:52:1b:04:94:66:cd:26:2b:
d4:4d:26:60:e6:51:fe:49:17:1a:3d:03:4f:20:e2:f7:70:0c:
0f:45:57:48:76:90:0d:c4:b6:e8:18:67:7e:5c:c9:29:21:60:
01:af:cf:19:58:d8:a4:8b:6d:a1:6d:90:6e:6d:fd:54:83:9d:
0f:c6:b5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:31:28 2025 by rpki-client