Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/MwDcy-cM0GeyphdM7UfSgxRbu8c.roa
File: MwDcy-cM0GeyphdM7UfSgxRbu8c.roa (raw, json)
Hash identifier: BYpomZuRRRW2d5bYMFshQpDyRb3rBmZ6XuVh9uEwwJ4=
Subject key identifier: 33:00:DC:CB:E7:0C:D0:67:B2:A6:17:4C:ED:47:D2:83:14:5B:BB:C7
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 230D
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/MwDcy-cM0GeyphdM7UfSgxRbu8c.roa
Signing time: Sun 08 Jun 2025 00:38:53 +0000
ROA not before: Sun 08 Jun 2025 00:38:53 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8973 (0x230d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 8 00:38:53 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3300DCCBE70CD067B2A6174CED47D283145BBBC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:7e:89:1d:38:c1:fd:16:87:89:47:6b:ed:
0e:76:30:72:63:9b:7f:f9:32:0a:97:e9:22:3d:67:
f5:f0:2c:9a:00:5b:08:82:7e:2a:9f:6e:df:10:f9:
88:2d:27:74:76:94:2c:f3:c4:36:4e:bb:81:4a:05:
bf:fd:16:b9:15:be:3f:48:66:8b:bc:6c:7c:8d:8c:
57:34:23:8d:13:56:00:3d:98:15:90:e0:4a:49:69:
2a:e0:5e:24:2d:44:fc:d9:f6:26:d7:17:9c:3d:68:
76:48:a2:6d:98:8c:f6:8c:0c:1d:8f:e8:7b:0b:37:
30:7d:6d:59:cd:e6:fa:f8:8d:57:bd:71:d1:ac:36:
02:89:67:c7:ce:41:7e:b0:dc:5e:a9:b7:7b:1b:02:
d8:15:d6:cf:a6:29:b9:27:1f:ae:08:e8:c8:6e:dc:
6b:6e:d1:78:75:03:bc:3a:5a:9e:5f:62:c5:fb:e0:
39:f0:bb:ea:ba:4f:d5:20:a3:bc:e6:ac:b0:3e:a2:
48:93:af:88:8e:cc:65:93:4e:be:8f:f2:27:a5:14:
69:f3:82:14:67:b9:c3:86:e2:50:64:78:a7:01:0c:
e6:15:17:5f:e4:b0:85:18:42:2c:33:eb:69:91:5c:
31:e3:31:5d:8f:69:c9:57:4a:d8:6c:31:ea:75:2f:
ed:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:00:DC:CB:E7:0C:D0:67:B2:A6:17:4C:ED:47:D2:83:14:5B:BB:C7
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/MwDcy-cM0GeyphdM7UfSgxRbu8c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
75:66:c5:bc:8d:37:8f:a5:d1:a4:8e:a4:a4:fa:2f:b1:38:a0:
86:51:84:fc:80:76:0a:6c:e5:82:a4:90:91:98:75:01:10:8e:
63:8b:2a:71:ff:1a:e3:3d:d3:43:71:5d:1a:86:ab:9e:45:5f:
b3:c8:3b:52:36:46:ac:e8:b5:90:a5:18:6a:a3:d4:88:60:3f:
2a:df:5e:88:b6:1b:18:2f:66:4a:47:89:a2:1c:30:62:d3:07:
73:7d:bc:d3:ff:75:ad:d1:66:ba:05:2b:cd:bf:4d:26:18:f7:
ae:6f:59:bc:80:23:ee:da:d6:ea:01:68:49:23:7e:ff:15:55:
88:b9:28:85:1f:95:95:bc:87:73:20:ae:c1:59:d7:e4:66:87:
19:a7:5d:9f:ad:f7:11:c4:4b:83:a1:61:3b:c7:e0:69:f6:43:
72:45:d9:97:bd:7f:e7:b1:50:c7:3f:cf:7b:46:86:f8:25:ca:
b4:c3:0f:e4:31:f5:ea:da:ac:8c:4a:1f:9d:c5:47:df:72:4c:
90:6c:ec:67:4c:09:05:1f:24:e9:c8:f9:24:a3:a7:ab:0d:08:
dc:9c:3d:24:83:d4:b2:41:49:85:22:a8:1a:ba:c3:dc:52:60:
a0:2b:65:4b:b4:81:c4:95:a7:e7:78:56:c3:67:30:37:b7:03:
43:d6:a3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:26:49 2025 by rpki-client