Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/GLpIWgYlTUR2miOJ7yguTafbM_U.roa
File: GLpIWgYlTUR2miOJ7yguTafbM_U.roa (raw, json)
Hash identifier: 4P4+wzpGKgNVmvZs2WBycIfUIXC10W4+TwGGQm7IXKQ=
Subject key identifier: 18:BA:48:5A:06:25:4D:44:76:9A:23:89:EF:28:2E:4D:A7:DB:33:F5
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1F1C
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/GLpIWgYlTUR2miOJ7yguTafbM_U.roa
Signing time: Sun 01 Jun 2025 00:38:32 +0000
ROA not before: Sun 01 Jun 2025 00:38:32 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7964 (0x1f1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 1 00:38:32 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=18BA485A06254D44769A2389EF282E4DA7DB33F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ad:25:20:4f:e7:18:04:12:76:4d:00:ce:d2:
4d:17:22:b6:16:7f:a1:73:39:e7:5c:79:d5:ba:f2:
b0:40:b7:65:26:cf:a7:29:e8:8e:4c:2b:51:83:64:
90:a7:fe:84:94:ac:28:64:32:d0:c1:b2:a3:d6:e0:
06:47:0e:e6:59:4b:67:a3:69:48:c5:bc:00:94:99:
46:7f:8c:cb:49:6a:22:6d:2a:d0:d5:25:1f:b7:f9:
50:c6:30:da:ef:b9:aa:6b:0a:8a:1d:77:4a:b4:8a:
56:de:64:50:93:34:66:9f:37:b9:fc:ef:65:19:6e:
df:37:28:50:17:9f:8f:02:4d:40:34:c4:1c:bc:19:
d2:7e:51:7f:bd:ab:1e:52:7f:f3:18:65:e5:ae:7b:
5b:97:0a:bb:06:69:b4:19:dc:67:b1:96:2c:3b:ad:
7f:d7:e8:7d:57:61:13:86:b0:9e:c0:47:67:3b:32:
80:7e:a2:c4:e0:c2:e1:cf:f4:f1:d7:05:fd:fb:2e:
dd:67:5a:51:77:50:41:b8:0d:81:84:f5:8b:f8:00:
ef:14:bb:d4:e1:cb:24:9a:af:1b:56:32:db:06:33:
ca:5f:9a:05:5e:82:50:b8:cf:53:b9:b6:67:c2:63:
54:4e:ba:b9:1d:6d:a4:2a:21:b3:e6:0c:27:a2:e7:
b0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BA:48:5A:06:25:4D:44:76:9A:23:89:EF:28:2E:4D:A7:DB:33:F5
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/GLpIWgYlTUR2miOJ7yguTafbM_U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
8c:5b:77:c1:2b:ad:f8:65:f3:8c:e0:2f:1d:e1:7b:9b:d9:52:
0d:1a:43:28:88:8a:1a:24:8f:75:c6:09:8b:d2:bb:cc:83:c9:
41:ce:e8:af:a2:9f:de:fe:58:86:2d:88:03:7d:9d:c1:7d:6f:
99:58:7a:e2:d7:90:58:b7:a9:e8:46:a5:76:b3:4b:b5:9f:7a:
d2:37:1e:64:0c:ad:eb:60:15:e7:14:dd:a4:62:e2:b6:88:3e:
f6:75:cc:70:6b:65:69:a2:72:71:41:25:6f:9b:70:e3:b2:c9:
f4:ab:cb:f8:9e:43:54:0c:4d:7b:a2:51:a6:e6:1d:b7:48:46:
e2:0e:c7:0d:44:fb:13:4b:71:be:fc:f2:9a:01:93:4f:32:1e:
bf:86:c2:b4:92:cd:0d:56:cd:a8:71:28:7b:1f:63:8a:e0:b4:
6d:91:90:2e:01:e1:1f:a9:71:42:7d:44:04:9e:3a:d7:21:27:
e6:73:24:3b:e3:76:74:5d:3f:f0:1a:5d:45:79:56:67:cd:b8:
89:99:cf:24:16:2f:be:0d:64:14:dd:07:20:3e:3f:04:84:d6:
67:e3:7d:7f:37:c1:88:e4:fb:2e:61:1f:84:62:ac:d9:e3:bc:
8c:e7:d3:9f:57:08:18:03:f3:17:ed:98:ad:38:7d:ab:aa:70:
a2:e0:a8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:04:03 2025 by rpki-client