Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/MTRLlQdhb8e4qMbpKFae__-ov8c.roa
File: MTRLlQdhb8e4qMbpKFae__-ov8c.roa (raw, json)
Hash identifier: GZDc2MBWLkCwg0MAiwRcuWbFXI5b5jvOpnljg3TYB+I=
Subject key identifier: 31:34:4B:95:07:61:6F:C7:B8:A8:C6:E9:28:56:9E:FF:FF:A8:BF:C7
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 243B
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/MTRLlQdhb8e4qMbpKFae__-ov8c.roa
Signing time: Tue 10 Jun 2025 03:09:03 +0000
ROA not before: Tue 10 Jun 2025 03:09:03 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9275 (0x243b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 10 03:09:03 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=31344B9507616FC7B8A8C6E928569EFFFFA8BFC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a9:da:1a:64:76:33:21:fd:51:32:1b:49:6e:
63:1b:49:12:95:e0:ef:db:d9:eb:41:69:86:93:e1:
62:95:8f:6c:9b:7a:4e:30:82:f6:d6:cd:4d:61:93:
29:c0:81:46:0e:cf:8f:a4:b9:24:ca:4b:61:2f:32:
b1:e1:32:00:61:a0:08:3e:b0:1d:97:4a:a1:df:c2:
0f:72:86:ae:31:69:1e:c6:1b:39:70:f8:07:a1:2d:
95:a8:f4:cc:b6:fc:6c:b4:4c:a5:f1:6f:55:7c:17:
3f:13:e6:44:f8:34:7a:f6:90:bc:76:e4:2b:e0:be:
0d:38:46:f2:80:fb:8c:5e:53:98:e4:ea:e8:d6:47:
5d:96:f2:93:5e:01:c9:3c:79:ee:90:51:e4:12:9e:
f1:b9:8e:ad:b7:ba:c8:ef:95:b5:69:15:f0:97:f1:
57:62:5e:23:46:2a:fb:0b:a1:10:c6:39:2a:09:04:
db:34:e6:87:17:0f:fc:bd:17:ab:0f:9e:c2:c0:d6:
4e:35:a4:94:4b:cc:9d:2b:3c:a8:4d:71:0c:cc:c2:
4c:91:f0:66:d1:7f:82:2d:74:0d:15:b6:c0:a0:33:
76:ae:fc:8f:6f:87:70:52:f3:16:fe:c6:07:ef:7d:
4f:9a:81:8e:4e:cc:c3:09:c3:56:72:d8:87:99:6b:
23:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:34:4B:95:07:61:6F:C7:B8:A8:C6:E9:28:56:9E:FF:FF:A8:BF:C7
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/MTRLlQdhb8e4qMbpKFae__-ov8c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
c0:f7:1c:13:65:97:f5:08:11:2e:42:71:e8:78:60:bf:8e:35:
63:d4:ea:d4:97:d0:f3:98:85:47:70:9f:f0:d1:5c:01:ef:a9:
23:01:d2:d1:07:38:4c:eb:f1:9d:04:77:78:a9:88:e5:b2:2e:
67:f5:15:30:6a:be:db:ab:ef:ac:0a:e5:6c:43:44:a6:86:09:
2e:f0:60:a3:49:9e:87:eb:72:ad:d4:b9:f9:d0:78:02:9b:23:
44:f9:8c:55:92:18:96:d4:5e:6d:fd:55:1d:ca:8c:e5:d5:bb:
e0:99:e3:fe:d7:21:e7:20:b5:8c:bd:79:6a:83:ed:d3:fb:b7:
d3:e0:68:07:b7:46:ef:a8:d5:a3:b9:df:10:d5:ef:21:ee:83:
4b:99:d8:4f:b3:5e:ae:46:e7:ac:5e:fb:45:d2:51:0c:68:af:
3a:d7:6f:3d:e3:8b:70:c5:18:ee:ac:ce:d7:08:88:23:75:f0:
86:a4:0f:14:0f:4e:58:a7:99:ee:aa:b9:57:1e:58:83:37:fc:
be:3c:39:36:18:15:80:3c:e6:a6:4a:4e:72:16:69:99:79:84:
df:d3:ff:01:a7:7a:1c:00:74:c4:91:40:0a:1e:1c:e5:27:1b:
ed:42:c6:cf:a8:6b:7b:dc:c1:d3:5e:15:53:74:71:db:28:e9:
b9:39:64:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:28:44 2025 by rpki-client