Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/GoxZn0Pm0ueyklJDSrLL0owC0tg.roa
File: GoxZn0Pm0ueyklJDSrLL0owC0tg.roa (raw, json)
Hash identifier: TM77eJAw/KiDLRtW/aQWrOnDpj9SEeB6uJYMbha2buc=
Subject key identifier: 1A:8C:59:9F:43:E6:D2:E7:B2:92:52:43:4A:B2:CB:D2:8C:02:D2:D8
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 206A
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/GoxZn0Pm0ueyklJDSrLL0owC0tg.roa
Signing time: Tue 03 Jun 2025 08:08:38 +0000
ROA not before: Tue 03 Jun 2025 08:08:38 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8298 (0x206a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 3 08:08:38 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1A8C599F43E6D2E7B29252434AB2CBD28C02D2D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:03:13:02:c7:1a:04:28:35:87:23:19:a3:
9b:58:7b:d2:3c:2e:cd:a9:26:52:ec:aa:88:a6:61:
03:6c:0e:8c:88:6c:6d:07:bc:35:5a:fa:f1:7d:16:
1d:cf:48:c5:b4:d1:12:29:e7:1f:d2:71:2e:d7:ad:
ba:6f:cd:bd:48:ab:44:d3:a3:a2:21:11:8c:fb:5a:
99:9f:ba:51:cd:ef:34:d0:99:d6:9b:fd:f6:1a:41:
16:ea:57:7b:70:5e:82:11:f6:9e:21:14:13:77:dc:
e0:bb:50:65:8d:e9:c1:ce:93:be:42:8b:a5:b5:88:
dd:d3:b2:49:5b:05:76:b8:a5:15:79:58:6b:bd:1a:
ec:ff:f0:b8:66:e2:db:65:95:6e:4f:b9:cb:81:ee:
05:27:24:ff:86:b3:a6:f8:c9:57:54:c4:14:a9:80:
42:05:e9:65:d1:d4:bc:da:0d:36:62:1d:60:85:a8:
17:1a:73:bb:8b:06:df:f9:34:45:e3:7e:45:81:17:
27:10:4c:89:5d:06:f8:8c:54:c7:bf:75:61:29:06:
a8:d0:33:14:53:24:a8:d9:b5:38:f5:60:38:18:43:
86:c7:7c:2d:c5:ca:49:6d:75:20:c0:30:67:a1:10:
4e:fe:0d:9e:c5:cb:2f:04:75:b0:0e:9c:ce:5a:8a:
25:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8C:59:9F:43:E6:D2:E7:B2:92:52:43:4A:B2:CB:D2:8C:02:D2:D8
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/GoxZn0Pm0ueyklJDSrLL0owC0tg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
41:ca:c8:d3:1e:f0:a2:80:5d:34:06:b3:96:a8:97:fa:62:06:
ac:93:ec:35:e3:8c:6c:30:af:0e:e7:2a:78:db:72:d1:12:c4:
6f:c2:7e:69:d1:9e:a2:26:98:87:65:d7:e7:87:e1:83:ac:5c:
27:ee:58:bf:bd:8e:81:5e:3a:31:ea:fc:06:c5:34:f1:89:7f:
e6:b2:9d:a4:12:fe:fa:41:cf:4c:d7:14:da:84:ba:c0:fc:e3:
33:f8:75:ac:b0:ef:b6:5f:a5:7c:44:fd:24:ad:04:6b:a3:db:
09:e3:22:de:9d:32:1f:32:22:f9:75:91:dc:5a:dc:e8:58:94:
bf:b1:44:81:0e:64:0a:b4:a9:aa:20:18:dc:50:bb:ea:a5:97:
4b:b6:e5:a9:0c:c2:8e:e4:f7:51:29:52:91:e6:45:84:2e:b4:
31:29:6f:5c:d2:48:a9:f2:eb:e7:0b:5a:e6:e4:65:ae:46:c7:
be:16:da:1e:aa:88:ad:d6:7c:6b:de:82:db:01:68:0e:fe:40:
c0:56:38:74:ef:c7:c8:61:91:c1:ea:e2:93:fd:b9:dc:f2:6b:
5a:a9:86:c6:53:d9:2e:32:8c:c9:45:9f:45:52:7f:df:e9:76:
23:e1:91:c6:e4:39:36:d3:b0:d3:4a:d7:fb:59:0f:97:0b:93:
39:9c:7b:26
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICIGowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDMw
ODA4MzhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFBOEM1OTlGNDNFNkQy
RTdCMjkyNTI0MzRBQjJDQkQyOEMwMkQyRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGpwMTAscaBCg1hyMZo5tYe9I8Ls2pJlLsqoimYQNsDoyIbG0H
vDVa+vF9Fh3PSMW00RIp5x/ScS7Xrbpvzb1Iq0TTo6IhEYz7WpmfulHN7zTQmdab
/fYaQRbqV3twXoIR9p4hFBN33OC7UGWN6cHOk75Ci6W1iN3TsklbBXa4pRV5WGu9
Guz/8Lhm4ttllW5PucuB7gUnJP+Gs6b4yVdUxBSpgEIF6WXR1LzaDTZiHWCFqBca
c7uLBt/5NEXjfkWBFycQTIldBviMVMe/dWEpBqjQMxRTJKjZtTj1YDgYQ4bHfC3F
ykltdSDAMGehEE7+DZ7Fyy8EdbAOnM5aiiUXAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUGoxZn0Pm0ueyklJDSrLL0owC0tgwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvR294Wm4wUG0wdWV5
a2xKRFNyTEwwb3dDMHRnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAEHKyNMe8KKAXTQGs5aol/piBqyT
7DXjjGwwrw7nKnjbctESxG/CfmnRnqImmIdl1+eH4YOsXCfuWL+9joFeOjHq/AbF
NPGJf+aynaQS/vpBz0zXFNqEusD84zP4dayw77ZfpXxE/SStBGuj2wnjIt6dMh8y
Ivl1kdxa3OhYlL+xRIEOZAq0qaogGNxQu+qll0u25akMwo7k91EpUpHmRYQutDEp
b1zSSKny6+cLWubkZa5Gx74W2h6qiK3WfGvegtsBaA7+QMBWOHTvx8hhkcHq4pP9
udzya1qphsZT2S4yjMlFn0VSf9/pdiPhkcbkOTbTsNNK1/tZD5cLkzmceyY=
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:09:27 2025 by rpki-client