Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/GX5f-DSke_e8SwJ3nC7EWiG0mSg.roa
File: GX5f-DSke_e8SwJ3nC7EWiG0mSg.roa (raw, json)
Hash identifier: UILQ43MtzHNe8+RTbvx/1ce18CLVCCI9KnHEFqk0hZA=
Subject key identifier: 19:7E:5F:F8:34:A4:7B:F7:BC:4B:02:77:9C:2E:C4:5A:21:B4:99:28
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1C77
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/GX5f-DSke_e8SwJ3nC7EWiG0mSg.roa
Signing time: Tue 27 May 2025 07:38:09 +0000
ROA not before: Tue 27 May 2025 07:38:09 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7287 (0x1c77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: May 27 07:38:09 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=197E5FF834A47BF7BC4B02779C2EC45A21B49928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d5:15:36:d6:78:56:bd:25:7d:f4:08:06:76:
9d:2a:26:5e:39:fa:0b:e5:3e:5c:e9:c2:3e:be:bc:
9a:fa:81:81:fd:a2:f7:ed:7b:40:61:55:6c:44:b8:
b9:5c:12:d2:bf:37:e4:0a:47:99:a4:48:01:cc:97:
59:55:a5:b6:28:12:ef:0d:c2:c5:da:2d:36:23:59:
13:3a:b1:2d:55:e9:b9:2e:b4:c8:29:3f:c3:89:11:
ba:2f:d9:c3:3e:b4:59:55:46:6d:6f:51:a3:12:06:
a3:de:f7:59:44:e7:c5:3c:27:e0:32:b3:df:65:fb:
8e:50:31:70:5a:56:5b:bf:6c:74:a2:1a:8b:1c:5b:
df:33:c2:d3:bc:46:2e:0a:fb:7b:93:b3:f3:51:d3:
0e:10:a2:cd:be:19:ff:7d:e8:58:24:16:1a:59:d2:
3f:6a:e7:02:d4:0a:56:cc:6d:4d:65:b9:fd:10:89:
d2:db:e1:16:38:4a:c8:7f:46:f1:53:ca:38:de:c6:
aa:e9:4f:f4:10:16:81:df:66:66:7c:2f:7f:28:20:
b0:bd:59:2a:3c:e5:42:26:1b:7a:4a:e9:ba:8d:e1:
de:15:85:2f:01:fa:77:1f:bf:8b:c0:84:40:a4:86:
51:6d:5e:66:13:ca:94:3b:10:b1:ec:f2:99:83:a5:
5d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7E:5F:F8:34:A4:7B:F7:BC:4B:02:77:9C:2E:C4:5A:21:B4:99:28
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/GX5f-DSke_e8SwJ3nC7EWiG0mSg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
4d:59:b5:34:89:f1:ab:25:98:01:90:db:10:ae:3b:e2:23:53:
53:4e:2d:4a:e5:8d:b4:3b:39:3e:58:d9:e7:2d:84:c2:a0:f3:
d7:82:6e:b6:c1:55:f5:3b:5e:46:71:be:30:f2:a0:02:82:69:
2a:b7:9e:36:5a:de:cd:eb:de:2f:6e:9d:21:eb:64:f1:6f:1f:
9f:8a:48:a4:25:88:ce:d3:ca:4e:de:73:54:d2:31:c7:ff:2b:
35:b4:79:6c:94:a4:c7:09:90:81:9b:df:5b:c6:73:58:ab:6d:
65:35:3e:91:68:f6:66:18:f5:46:f8:65:8a:f0:be:85:eb:20:
44:be:b1:d5:10:f9:41:c4:ae:9e:3d:30:9c:24:e1:18:be:80:
cb:6b:31:d6:99:98:e0:f9:df:c1:37:74:63:f7:5c:4c:e9:06:
78:f9:7f:ef:56:a9:ae:01:30:39:02:b4:c2:b1:e7:71:f3:9b:
55:46:0f:bb:bd:24:03:f0:66:e0:d7:9c:98:30:a4:56:13:e9:
20:ca:a2:73:0e:a2:d7:5c:47:73:ff:26:59:e3:33:9a:4d:10:
cf:4b:44:93:3c:6f:65:12:5a:51:c7:d2:23:78:eb:0e:de:9f:
d8:6b:7f:69:64:97:71:e0:4d:91:4e:7e:27:b9:46:66:83:94:
2a:dd:99:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:36:42 2025 by rpki-client