Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/FUeKSiJPtHoOqdP935v0Y5DCZfo.roa
File: FUeKSiJPtHoOqdP935v0Y5DCZfo.roa (raw, json)
Hash identifier: 3nAV8qVq3iHraB2V7YSgKsNrO3X/42R4xp8hrWcq2DY=
Subject key identifier: 15:47:8A:4A:22:4F:B4:7A:0E:A9:D3:FD:DF:9B:F4:63:90:C2:65:FA
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1C2E
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/FUeKSiJPtHoOqdP935v0Y5DCZfo.roa
Signing time: Mon 26 May 2025 19:38:05 +0000
ROA not before: Mon 26 May 2025 19:38:05 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7214 (0x1c2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: May 26 19:38:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=15478A4A224FB47A0EA9D3FDDF9BF46390C265FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:0f:61:26:a7:25:8f:ac:10:0b:97:20:35:
04:5b:b4:7e:b4:99:72:c9:b2:d8:f0:a6:ba:43:a4:
84:d4:dd:98:d4:aa:35:81:9e:d1:8a:0a:cd:91:c7:
0a:86:8f:4e:2b:e9:4a:fb:0e:9a:e1:b4:05:f9:06:
d2:e7:72:d5:f3:9b:83:e3:07:e6:b6:b3:45:8a:93:
fb:d3:36:e6:56:a9:f3:82:ff:b2:ec:08:cc:59:fd:
58:72:b5:8d:3e:f7:6d:2a:a8:b0:0e:74:67:c4:12:
93:62:2f:05:74:97:d2:6b:e4:0f:ec:2d:54:25:07:
cb:5c:03:7d:93:82:eb:eb:41:6e:88:6f:1c:ab:29:
91:75:19:d6:18:b7:01:5e:02:01:bf:9d:ca:33:11:
ff:db:78:80:6d:15:c8:44:8d:d3:08:d2:b7:26:17:
6c:d3:31:cf:9a:32:11:69:9c:d3:1f:36:8d:98:21:
eb:d9:ff:2d:02:c0:82:b1:e1:d2:b2:51:90:73:3c:
d0:85:73:02:9a:61:1f:e9:81:fd:01:5b:82:72:84:
a1:4a:1b:88:ea:20:6d:67:d0:42:bf:85:2c:ca:65:
3b:c5:40:87:51:c9:54:be:37:a3:c1:a7:81:0c:30:
68:4e:32:b3:3b:6b:33:42:c8:76:bc:01:c3:bf:05:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:47:8A:4A:22:4F:B4:7A:0E:A9:D3:FD:DF:9B:F4:63:90:C2:65:FA
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/FUeKSiJPtHoOqdP935v0Y5DCZfo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
ab:7b:7f:47:41:42:66:fa:1f:cc:93:d1:b0:2e:b7:92:37:b9:
35:80:72:ed:32:04:55:7a:44:3d:2a:ad:7e:34:95:58:21:57:
bd:5d:fe:2c:b6:48:e9:1d:fa:d2:c6:b2:2d:7d:89:dc:ae:0c:
c0:14:72:23:ad:10:05:6a:74:f5:05:3e:77:b2:a5:b6:f7:b7:
4d:19:22:19:66:9c:43:15:f9:11:70:b6:b6:72:51:82:bd:25:
29:8d:b8:17:5b:3d:4e:ea:3f:5a:62:c6:6c:ea:3d:44:f7:76:
f9:3a:ef:e5:27:34:d3:f8:94:4d:5d:15:87:88:51:56:12:60:
5a:14:d7:33:67:c6:31:a5:a9:8a:34:8c:83:d6:b5:12:7b:5f:
e5:ad:ce:d1:17:f7:2e:22:e8:f2:f6:db:d6:31:bc:bd:59:78:
64:5c:c6:de:10:2d:0a:13:21:c5:eb:f1:b9:82:bf:5c:03:3e:
39:6c:83:22:18:ae:9d:d7:2e:e2:72:d0:69:49:08:09:d2:69:
63:52:67:0c:ec:ae:e6:2d:78:ce:57:bf:d7:05:35:0b:aa:e7:
82:29:08:39:67:9c:fa:f3:f3:70:68:81:5e:46:a2:83:0a:4c:
c2:01:39:7b:d8:74:9f:17:eb:87:e0:ba:a9:fa:7f:60:bb:09:
68:b6:31:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:18:26 2025 by rpki-client