Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/CmG4MZUVHwRvKdIEo_KDnxK7WYA.roa
File: CmG4MZUVHwRvKdIEo_KDnxK7WYA.roa (raw, json)
Hash identifier: nyOJ23aRdmyUn7aItgicQFbXacX7zJFMFRb8l/1fhmM=
Subject key identifier: 0A:61:B8:31:95:15:1F:04:6F:29:D2:04:A3:F2:83:9F:12:BB:59:80
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 22C2
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/CmG4MZUVHwRvKdIEo_KDnxK7WYA.roa
Signing time: Sat 07 Jun 2025 12:08:57 +0000
ROA not before: Sat 07 Jun 2025 12:08:57 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8898 (0x22c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 7 12:08:57 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0A61B83195151F046F29D204A3F2839F12BB5980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:44:6d:15:15:7e:5d:7b:48:d4:c4:16:f6:33:
13:c5:88:75:5a:43:6e:0c:05:d6:9c:79:39:d4:17:
84:0c:7d:85:65:14:da:fa:e0:32:75:cd:df:08:84:
39:7c:c1:88:ec:40:79:7a:df:4e:dc:cc:b7:31:fe:
51:53:83:dc:71:c9:93:3a:c5:cd:e4:c4:2c:e4:b2:
16:14:56:34:01:a3:c2:cc:2c:78:c9:7a:67:2e:54:
16:4e:0e:88:37:86:bd:4b:f5:9c:04:60:45:d3:33:
bf:23:85:f8:c2:7b:20:f4:39:1a:27:2d:0e:0e:00:
22:8c:cf:ad:38:b0:0a:bc:59:fa:11:01:a8:d7:7a:
99:86:d3:83:6b:78:56:cb:8d:82:89:78:6a:f4:69:
ad:4c:57:d2:39:d3:a4:da:2b:1e:2d:ba:b6:8c:f3:
8d:b6:f9:5c:74:0d:a3:e1:bb:38:04:79:fc:de:35:
03:30:8c:e9:64:c8:1d:a7:f2:ca:c8:8c:04:41:71:
58:2c:5c:d8:bb:cb:d3:32:dd:82:b7:01:9e:2a:f7:
af:ba:21:04:4d:35:77:b0:b9:b8:b3:9e:5c:08:0e:
b1:49:f0:99:fd:2d:7a:db:6e:a6:f2:b1:75:b4:b5:
d3:52:e9:19:e2:d3:84:f4:a8:21:68:fb:f0:df:fb:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:61:B8:31:95:15:1F:04:6F:29:D2:04:A3:F2:83:9F:12:BB:59:80
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/CmG4MZUVHwRvKdIEo_KDnxK7WYA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
8f:fe:14:03:3b:04:64:a6:dd:31:df:35:70:4b:a5:72:94:68:
f9:5e:54:fe:4e:73:e0:9d:6d:15:c1:a1:a0:c7:2e:ea:8f:df:
96:8c:7e:2f:2d:a6:30:fe:85:fa:3c:97:9c:79:ce:ba:4a:e5:
5e:9c:c6:09:fe:c0:5c:3e:26:1d:48:e6:c5:fa:3e:b0:25:8a:
a0:a3:85:3f:b1:64:a4:52:6d:ab:3a:e0:a2:fb:00:d6:98:9a:
07:a0:98:77:fb:61:4f:25:c0:6a:14:0a:6b:bf:73:c8:9c:cc:
27:bd:b8:5d:93:f7:9b:b1:25:35:cc:c3:25:ac:8a:41:39:29:
0f:db:e7:82:74:57:7b:08:30:81:ff:08:77:b2:72:2d:e6:d4:
cc:07:59:66:5b:33:b5:48:df:7a:06:06:be:05:5d:f1:ee:c6:
49:70:a6:b4:57:cc:a5:60:14:50:c5:1f:cb:65:0d:90:5b:73:
b6:10:d8:71:8c:c9:83:1f:45:4d:8c:eb:50:c7:17:0d:e5:7d:
99:11:85:51:58:36:f3:06:b6:2a:b5:53:d5:5a:01:06:fe:b8:
f6:b9:f0:98:4e:ce:b7:74:76:3f:26:9f:a3:9a:13:6f:7d:1e:
30:22:e4:26:53:54:98:f9:d8:05:d5:6b:d6:a4:1e:12:98:50:
c6:1c:3d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:11 2025 by rpki-client