Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/GftmFvrMpsH_xCHOm3Dk5uouDwo.roa
File: GftmFvrMpsH_xCHOm3Dk5uouDwo.roa (raw, json)
Hash identifier: VUXR2qgGMoqqNt6OVsJuXoY8efdaXu+Aw/cVzm+qjnw=
Subject key identifier: 19:FB:66:16:FA:CC:A6:C1:FF:C4:21:CE:9B:70:E4:E6:EA:2E:0F:0A
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1F23
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/GftmFvrMpsH_xCHOm3Dk5uouDwo.roa
Signing time: Sun 01 Jun 2025 01:38:31 +0000
ROA not before: Sun 01 Jun 2025 01:38:31 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7971 (0x1f23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 1 01:38:31 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=19FB6616FACCA6C1FFC421CE9B70E4E6EA2E0F0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:fe:63:d0:0f:c8:2d:6c:9d:c3:3b:0d:a7:
04:40:b4:16:19:09:a0:7f:3f:c9:f5:69:69:fb:02:
7d:04:70:da:49:70:57:5f:86:18:04:6f:14:21:77:
ae:34:0e:0e:0a:a1:11:70:2b:71:41:c8:25:f0:2c:
36:d8:46:0c:b4:07:09:bb:6e:65:06:ee:5f:de:2e:
c3:50:cf:f1:1f:c9:63:9f:2a:d3:af:cd:01:6d:1e:
22:94:0b:e1:56:74:58:93:6c:00:46:42:b4:55:93:
d9:83:c1:39:d7:4c:5d:6e:b0:ac:30:34:a5:ba:9e:
31:4c:bd:07:0a:ba:8c:e6:ce:9c:f9:e5:84:7e:87:
4a:09:d1:af:4c:a1:48:80:f1:cd:34:be:25:82:94:
5a:7b:97:db:bb:dd:47:90:7a:81:eb:64:0a:98:57:
23:47:54:52:42:63:56:f1:19:70:0c:b1:6e:82:5a:
6d:d0:2b:6f:1f:9a:a9:a8:14:a5:1a:74:4b:f6:eb:
46:19:ff:2d:60:f0:ae:52:c8:d9:ac:1b:6f:45:5c:
00:f1:d9:f1:04:40:b5:da:db:da:a4:b6:d0:d0:c3:
39:97:07:2d:73:bb:a0:d8:d4:77:fe:ae:ad:85:65:
12:55:13:3b:a1:ef:0f:f8:52:39:f7:ab:54:4d:9e:
6a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FB:66:16:FA:CC:A6:C1:FF:C4:21:CE:9B:70:E4:E6:EA:2E:0F:0A
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/GftmFvrMpsH_xCHOm3Dk5uouDwo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
aa:ff:6b:22:98:35:1f:aa:e7:b5:38:f4:ab:8f:ca:6d:07:0d:
8e:09:8c:02:b6:0b:68:dc:ba:d6:4e:cf:de:52:7e:da:e1:0f:
e5:c6:a0:a8:3f:30:f0:84:77:af:30:bc:05:9b:30:75:92:ad:
df:dd:39:31:e6:db:d5:ab:d5:36:dd:2f:aa:82:8d:c2:78:5d:
b9:3f:6c:cb:66:dd:91:32:06:ee:1b:00:a3:69:6e:54:75:7e:
d8:d1:7e:95:82:34:74:80:4f:e0:86:fe:7d:9f:d6:3e:fb:e4:
e2:2f:58:da:4a:f5:e8:1c:89:58:b5:7e:50:38:14:3c:30:5b:
37:6c:2d:14:07:16:a5:e3:ce:7f:63:09:c5:77:db:3e:7b:26:
ab:be:a9:87:44:bd:58:aa:26:17:66:50:08:fc:f9:6b:6b:d8:
21:41:a9:03:be:a7:c2:e0:30:3e:1d:de:d3:3a:0d:ff:d6:fd:
4a:09:1c:28:45:44:ec:6a:83:c3:b2:80:f8:0d:03:55:8a:62:
b4:51:d8:a2:4f:1e:8e:75:b2:05:75:6a:58:a6:01:f8:c8:d1:
a1:66:0c:8f:03:b2:6d:cf:ad:84:ff:60:74:8e:b2:36:92:66:
3f:a6:dd:b8:08:2a:7d:89:bc:6b:29:52:78:22:f7:8c:76:c8:
7f:a3:64:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:42:41 2025 by rpki-client