Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/HrxdnrCyNgYFGBvuyoqP3McusZ8.roa
File: HrxdnrCyNgYFGBvuyoqP3McusZ8.roa (raw, json)
Hash identifier: PI5zdWaYKSwYT6tcp2PKPT8CmA7tVSVu2/XXr0eCOG8=
Subject key identifier: 1E:BC:5D:9E:B0:B2:36:06:05:18:1B:EE:CA:8A:8F:DC:C7:2E:B1:9F
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 25B0
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/HrxdnrCyNgYFGBvuyoqP3McusZ8.roa
Signing time: Thu 12 Jun 2025 17:09:14 +0000
ROA not before: Thu 12 Jun 2025 17:09:14 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9648 (0x25b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 12 17:09:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1EBC5D9EB0B2360605181BEECA8A8FDCC72EB19F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:df:35:72:69:56:95:f0:18:be:3b:83:d5:
a3:f1:c2:60:84:56:32:0f:14:4f:da:86:a7:e2:f8:
51:8b:59:33:b7:91:07:9c:e7:a1:e0:30:ae:1b:5a:
bf:28:d6:4b:7e:ea:31:96:f9:01:5d:0f:af:34:62:
45:95:9f:0e:b4:2d:45:e6:05:ca:96:2b:fa:d7:67:
fb:c0:18:f6:df:df:f1:50:28:cd:ed:f5:ee:58:9a:
c0:5e:58:2b:a6:c2:f0:42:ce:cd:47:4f:ed:9d:6d:
85:45:5c:c9:ed:a7:58:6a:db:6a:6a:6d:cc:b1:c3:
01:6a:06:7a:99:cc:7a:cf:c5:d1:c8:72:72:df:b1:
cd:5b:47:3d:35:ed:f8:c8:6b:11:eb:8b:ed:46:b5:
75:76:aa:72:e1:8a:02:50:c8:ed:c6:71:f5:e5:d3:
de:e5:99:32:37:f1:11:9f:59:bc:09:b0:43:cf:23:
df:f7:fb:1a:6d:e4:60:2d:ae:b9:de:06:a1:f4:ee:
3e:3a:ce:d7:08:b5:d9:0e:f6:4c:e8:fc:24:1f:17:
2c:f9:30:aa:18:a3:29:31:3c:ab:51:b1:3e:b5:58:
11:76:12:b8:2d:69:ae:6f:ef:2e:da:2e:e9:12:63:
48:4d:83:8f:64:01:24:46:30:47:73:1b:f1:c4:bc:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BC:5D:9E:B0:B2:36:06:05:18:1B:EE:CA:8A:8F:DC:C7:2E:B1:9F
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/HrxdnrCyNgYFGBvuyoqP3McusZ8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
6a:b3:03:23:b5:90:47:e2:4f:e6:54:79:7c:e3:a3:3b:b8:fd:
30:30:5f:f1:33:94:a5:af:db:71:49:72:eb:7b:1b:70:99:64:
2b:12:d1:34:56:07:8b:78:4a:fb:4d:6b:01:0f:ca:69:6e:a4:
76:05:cf:6a:5d:80:46:14:20:ec:fa:e8:b4:a9:39:dc:1d:00:
a9:c2:c8:76:93:8a:55:d8:bf:52:a0:88:55:aa:b3:1f:17:d3:
da:e7:57:f6:2e:12:f2:bd:3e:14:9d:50:e1:9f:2f:ce:c6:ef:
ed:f0:a4:1c:8f:37:ec:a2:23:13:56:fe:dd:eb:8b:63:e6:44:
d4:92:a4:b5:1f:82:d9:18:43:43:c6:1a:34:0a:6c:92:28:00:
43:11:99:1c:27:ca:27:ba:b1:81:61:8a:d0:67:f4:6a:c3:09:
a5:23:4e:83:4d:8a:93:a8:ef:97:98:9e:e6:46:b9:42:29:b5:
e2:fb:7e:ec:48:f6:78:8f:84:33:85:f1:5f:bf:ec:bb:ac:cc:
78:29:05:e1:02:8d:40:79:f2:b6:78:a7:0a:3d:cc:c4:e0:28:
e2:de:68:7f:b2:45:f0:66:c7:31:e9:4c:86:70:ee:93:e0:93:
b9:1c:7e:e6:a2:c1:f2:9b:4c:19:c5:ed:66:ca:cc:be:9f:9d:
7d:8d:92:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:06 2025 by rpki-client