Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/FZNvm1H-y_T9xvks6KfLK2Iw6PY.roa
File: FZNvm1H-y_T9xvks6KfLK2Iw6PY.roa (raw, json)
Hash identifier: cB+Zhu21lsrm8i/U/fQDIrB4X/+Ku49xVVX0N8CLqBQ=
Subject key identifier: 15:93:6F:9B:51:FE:CB:F4:FD:C6:F9:2C:E8:A7:CB:2B:62:30:E8:F6
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 227A
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/FZNvm1H-y_T9xvks6KfLK2Iw6PY.roa
Signing time: Sat 07 Jun 2025 00:08:50 +0000
ROA not before: Sat 07 Jun 2025 00:08:50 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8826 (0x227a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 7 00:08:50 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=15936F9B51FECBF4FDC6F92CE8A7CB2B6230E8F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:f3:c5:2b:09:ad:ab:b5:ba:70:01:6c:d2:
8b:35:fc:78:6e:31:c6:47:ee:8a:60:04:9e:4f:31:
ed:b5:c5:e9:62:a9:ff:9c:af:8d:60:d1:75:66:68:
3e:bc:6f:d1:c5:65:00:4b:c9:1e:51:ed:ca:f9:9e:
4a:14:50:8d:dd:4e:68:ea:0d:ed:d6:23:17:b6:52:
85:6a:95:ae:79:cf:e8:65:fb:04:59:3f:46:75:ad:
7f:ae:1c:bb:ed:8b:0e:f6:a1:66:2d:69:53:2b:5d:
38:db:f9:87:4f:b1:b2:ee:72:e2:71:e8:bc:a9:e8:
d0:f8:8f:26:75:c8:06:2a:8b:69:75:9d:a1:c5:8f:
b9:00:3e:51:d2:f9:f5:f3:0e:39:0c:b5:a8:56:aa:
00:dd:f1:3f:f2:92:cc:22:5e:09:cd:f1:1e:cc:54:
a8:38:ee:f6:e1:54:0e:91:cc:2b:78:9c:5d:e7:fe:
13:13:7d:62:32:bd:9a:88:66:62:ff:03:82:29:43:
fa:9b:64:96:fb:84:c5:e3:3f:a5:b9:79:5b:a8:a8:
01:56:49:49:43:df:93:62:b3:ae:83:1c:d6:a2:ba:
82:c3:3b:72:11:a5:88:61:a1:bd:f6:e6:78:bb:e8:
05:ae:35:c1:5d:67:fe:1d:3c:5a:6f:a9:30:90:56:
76:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:93:6F:9B:51:FE:CB:F4:FD:C6:F9:2C:E8:A7:CB:2B:62:30:E8:F6
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/FZNvm1H-y_T9xvks6KfLK2Iw6PY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
0a:3b:fa:3c:b1:49:65:b5:bc:f7:39:a9:89:19:20:f9:26:f0:
68:ad:a9:d8:c3:58:d8:43:dc:3b:20:bd:52:1d:24:a9:92:0f:
16:3b:0c:d5:41:a1:9e:7e:41:94:f1:94:4e:19:b1:cc:e3:47:
cb:39:ac:13:17:77:ea:b8:52:0f:a1:24:e1:7f:23:4a:0b:7b:
44:1c:55:02:c5:5a:c4:58:0e:e6:87:7e:9c:e1:f1:97:1c:45:
28:44:70:2d:22:2c:3f:7f:57:66:95:61:f5:17:a1:5b:03:7a:
84:7d:64:d1:6f:7a:1f:dc:a7:42:b4:3e:02:67:a8:d3:1b:08:
78:6b:aa:68:0f:4c:1f:25:04:08:b6:34:7b:8c:eb:cc:d1:e6:
f8:49:6c:18:8f:ca:f6:53:a3:41:89:20:c0:84:36:7e:98:c0:
c6:47:e0:f7:b7:f6:0b:63:19:6b:63:83:1e:6c:85:9b:60:15:
45:63:34:03:89:f2:95:27:5b:a6:af:90:de:a5:0f:1b:10:f8:
05:25:52:ef:c5:ab:1b:98:c1:84:82:92:25:c7:bc:e2:58:6c:
99:17:1e:49:c9:26:7c:7d:d7:0c:70:83:d4:aa:5d:b0:22:d8:
96:ed:c8:5f:89:c4:8e:75:aa:af:5f:7e:d6:70:3f:cb:fd:04:
06:28:ab:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:52:52 2025 by rpki-client