Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/Nx7Gu_oCf9VX-TEhGmoPFmERFaU.roa
File: Nx7Gu_oCf9VX-TEhGmoPFmERFaU.roa (raw, json)
Hash identifier: FBMG6/MLMzPuKHZmaBAYP5NNmnrl9WPzqTi7WDXHR1o=
Subject key identifier: 37:1E:C6:BB:FA:02:7F:D5:57:F9:31:21:1A:6A:0F:16:61:11:15:A5
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2544
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Nx7Gu_oCf9VX-TEhGmoPFmERFaU.roa
Signing time: Wed 11 Jun 2025 23:09:16 +0000
ROA not before: Wed 11 Jun 2025 23:09:16 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9540 (0x2544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 11 23:09:16 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=371EC6BBFA027FD557F931211A6A0F16611115A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:cf:b2:47:28:e4:ea:9b:c5:dd:50:15:93:
91:06:cd:d2:ad:7f:8a:8e:39:5c:f2:d3:56:ea:5a:
5a:59:62:79:bc:69:3a:e8:45:c0:6c:6b:e7:eb:59:
f5:d3:e9:13:ca:df:17:dc:fd:c0:bb:d9:9b:f6:71:
2a:16:35:8d:52:7e:47:40:55:2b:3c:17:59:40:ef:
30:9e:3e:2c:fe:04:3e:17:9c:54:c7:6d:c0:d5:0b:
ce:df:f7:c0:28:34:ba:82:fb:a0:13:19:0b:b9:ed:
49:0c:51:35:4d:cb:34:f5:56:f2:50:52:c2:71:b9:
4d:b0:7b:95:4c:52:98:2c:c3:c1:fc:db:57:6d:f6:
c9:3d:2f:d8:cb:bb:8c:c4:e9:ca:62:86:f4:75:e7:
30:bb:8b:f6:a4:61:29:f8:ba:87:a3:22:82:1b:82:
a5:25:6f:9a:3a:95:f0:53:1a:5a:f6:0b:df:b4:43:
be:0c:7f:42:dd:d0:e1:1a:53:b2:52:04:4e:00:cd:
59:fb:43:23:7f:40:12:6d:68:86:f0:f6:1c:7a:44:
1f:c5:a3:91:a3:13:fa:eb:45:e9:22:35:fc:2d:70:
4d:67:64:a8:ad:00:4e:6e:0e:db:6b:9f:bc:f3:5a:
fd:72:88:d5:7f:05:54:09:dd:c8:a4:d6:ce:4a:72:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1E:C6:BB:FA:02:7F:D5:57:F9:31:21:1A:6A:0F:16:61:11:15:A5
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Nx7Gu_oCf9VX-TEhGmoPFmERFaU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
01:06:53:bf:a1:3b:32:1a:93:08:cb:04:45:a2:04:8b:98:7e:
49:f6:21:22:aa:6c:9a:22:e8:26:30:00:d9:7b:7e:b6:a2:1a:
31:43:9f:7b:b4:9d:4c:8a:30:7e:1e:31:56:12:53:9f:29:ec:
3f:a3:d9:b9:71:e5:65:46:75:b0:08:4c:c4:ed:26:96:b7:c6:
0b:9a:86:96:ad:b2:63:f2:2c:c7:61:ac:36:e8:e6:9b:ed:ab:
07:48:36:fc:74:a7:3c:f5:88:41:c6:91:03:bb:27:0c:75:ac:
ff:5e:89:41:1c:79:8c:0d:e9:48:f3:51:a3:55:c0:2d:96:cf:
a7:67:34:0a:01:76:a6:e3:d4:3f:1f:bd:3b:be:9c:d8:db:ef:
3f:5e:93:9e:49:70:69:6e:9c:cf:eb:5d:15:45:6d:ce:be:6b:
02:23:23:18:3e:f4:8b:43:1b:b2:7f:46:ae:39:aa:de:aa:44:
fb:f4:e3:95:1d:3f:5b:4b:0e:93:a0:f4:ab:a5:d9:2c:9f:70:
13:81:a0:58:f2:7f:4a:c8:8b:7f:32:ce:4b:1d:c2:9d:41:93:
d9:90:92:0c:01:2c:4b:ca:2c:e8:69:25:8a:bd:14:71:7b:36:
72:95:ff:89:fa:6b:1c:4c:14:59:ea:c8:37:2f:5d:24:fd:84:
bf:fd:d6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:43:03 2025 by rpki-client