Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/Ea_ISkZtDZ5uhZ594SIkpmbf62s.roa
File: Ea_ISkZtDZ5uhZ594SIkpmbf62s.roa (raw, json)
Hash identifier: uKtt170rEPy3hLB9puiqLN4DDzbvfBosvuZtgNj/vgA=
Subject key identifier: 11:AF:C8:4A:46:6D:0D:9E:6E:85:9E:7D:E1:22:24:A6:66:DF:EB:6B
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2238
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Ea_ISkZtDZ5uhZ594SIkpmbf62s.roa
Signing time: Fri 06 Jun 2025 13:08:48 +0000
ROA not before: Fri 06 Jun 2025 13:08:48 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8760 (0x2238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 6 13:08:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=11AFC84A466D0D9E6E859E7DE12224A666DFEB6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:44:a4:3c:90:f4:aa:df:62:1e:1b:fc:09:3c:
21:98:84:0d:df:40:e1:23:af:d7:e3:a0:b5:14:24:
94:c2:e3:c2:29:f5:73:0b:4a:a4:af:c5:b6:4a:eb:
b1:1c:8e:5d:f8:93:80:a9:9c:5b:de:57:7b:34:23:
b5:be:8d:df:e4:fa:e4:0a:33:ad:80:1c:34:e6:b6:
67:40:a9:32:2a:8c:db:82:a1:df:ec:30:4f:ba:14:
c4:2c:de:20:a8:e4:1b:cc:6e:bf:32:45:fb:36:b8:
de:ea:99:a0:c1:8b:24:ef:35:40:0c:87:77:81:f0:
75:4e:aa:3f:ca:0f:e7:cf:bb:53:44:04:25:a4:48:
71:71:b8:b6:f1:b7:08:6f:15:fa:75:a1:04:43:a0:
47:42:03:fe:d5:63:a2:4e:25:49:63:aa:ff:a4:3b:
f2:c5:00:17:2c:a8:49:70:28:d8:88:c1:24:d4:47:
fd:9f:82:51:8a:51:54:a8:f3:55:e4:52:49:55:4b:
d2:96:7f:5c:86:33:1b:27:8a:03:8d:a5:4d:e3:75:
c9:01:12:78:6a:2b:e3:89:9a:95:a7:da:5b:bc:4f:
a9:34:5b:0a:dd:45:6f:47:bc:43:23:36:cc:58:1f:
27:6f:33:81:00:9b:f3:1b:ad:54:e0:cb:07:62:81:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AF:C8:4A:46:6D:0D:9E:6E:85:9E:7D:E1:22:24:A6:66:DF:EB:6B
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Ea_ISkZtDZ5uhZ594SIkpmbf62s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
61:8f:ee:13:c8:f5:1d:27:e2:5c:bd:45:8f:36:a2:81:67:be:
4b:71:bf:bf:7a:25:ee:1c:f4:2f:04:49:d8:6f:e2:29:55:bb:
87:1d:10:e1:7a:83:fc:c2:3d:96:8f:c4:59:f3:a5:d8:6c:e7:
96:0a:0b:65:fd:82:74:82:d1:e0:2a:5c:f8:c2:df:b1:50:1c:
d1:ea:26:7b:80:95:91:04:3a:39:e1:de:c6:56:8a:fa:61:12:
cb:f5:af:f5:6f:b9:b8:04:83:67:08:af:a7:7b:be:a7:57:83:
73:16:e1:f4:b2:a5:40:50:d8:20:05:3d:ae:ff:ae:f7:b4:3c:
1d:39:d8:a8:d4:07:bb:4f:68:f7:39:cd:56:4e:aa:a4:d2:c1:
ab:2f:8c:11:f6:4d:e7:33:1e:70:a9:fd:ee:2a:59:d8:b4:e3:
87:0c:58:6b:a8:68:ae:57:76:1c:4a:26:20:1e:66:2f:54:19:
e1:ae:85:45:71:89:43:66:d7:30:07:df:a5:38:6a:39:7e:21:
65:36:f8:cd:1d:a2:0f:c9:8c:55:10:a1:e0:07:18:29:9d:64:
d6:d8:be:02:06:7e:4b:0b:bc:10:e7:d3:8e:ec:85:5a:c7:91:
2a:8f:f2:35:f8:f2:24:39:b6:0d:1b:23:18:c9:a0:d0:b4:ed:
71:98:c5:66
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICIjgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDYx
MzA4NDhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDExQUZDODRBNDY2RDBE
OUU2RTg1OUU3REUxMjIyNEE2NjZERkVCNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkRKQ8kPSq32IeG/wJPCGYhA3fQOEjr9fjoLUUJJTC48Ip9XML
SqSvxbZK67Ecjl34k4CpnFveV3s0I7W+jd/k+uQKM62AHDTmtmdAqTIqjNuCod/s
ME+6FMQs3iCo5BvMbr8yRfs2uN7qmaDBiyTvNUAMh3eB8HVOqj/KD+fPu1NEBCWk
SHFxuLbxtwhvFfp1oQRDoEdCA/7VY6JOJUljqv+kO/LFABcsqElwKNiIwSTUR/2f
glGKUVSo81XkUklVS9KWf1yGMxsnigONpU3jdckBEnhqK+OJmpWn2lu8T6k0Wwrd
RW9HvEMjNsxYHydvM4EAm/MbrVTgywdigZctAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUEa/ISkZtDZ5uhZ594SIkpmbf62swHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvRWFfSVNrWnREWjV1
aFo1OTRTSWtwbWJmNjJzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAGGP7hPI9R0n4ly9RY82ooFnvktx
v796Je4c9C8ESdhv4ilVu4cdEOF6g/zCPZaPxFnzpdhs55YKC2X9gnSC0eAqXPjC
37FQHNHqJnuAlZEEOjnh3sZWivphEsv1r/VvubgEg2cIr6d7vqdXg3MW4fSypUBQ
2CAFPa7/rve0PB052KjUB7tPaPc5zVZOqqTSwasvjBH2TeczHnCp/e4qWdi044cM
WGuoaK5XdhxKJiAeZi9UGeGuhUVxiUNm1zAH36U4ajl+IWU2+M0dog/JjFUQoeAH
GCmdZNbYvgIGfksLvBDn047shVrHkSqP8jX48iQ5tg0bIxjJoNC07XGYxWY=
-----END CERTIFICATE-----
Generated at Sat Jun 21 19:52:50 2025 by rpki-client