Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/Pj8IAC-QA3BBIDLDRCJ1VYIao9w.roa
File: Pj8IAC-QA3BBIDLDRCJ1VYIao9w.roa (raw, json)
Hash identifier: 8IeHKPrJpBy7AoqikhMVyl66B/YGAC75KjjeRJVqT18=
Subject key identifier: 3E:3F:08:00:2F:90:03:70:41:20:32:C3:44:22:75:55:82:1A:A3:DC
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 214D
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Pj8IAC-QA3BBIDLDRCJ1VYIao9w.roa
Signing time: Wed 04 Jun 2025 22:08:43 +0000
ROA not before: Wed 04 Jun 2025 22:08:43 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8525 (0x214d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 4 22:08:43 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3E3F08002F900370412032C344227555821AA3DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:f6:c7:c6:3a:01:ec:1a:49:67:8b:a2:f6:
2f:1d:47:95:2b:6a:5f:cf:3b:66:41:06:0c:3c:57:
e0:d9:e8:72:bc:50:96:d9:e4:6f:4b:2b:e3:88:4c:
dd:e8:ac:39:35:9b:52:a8:a4:5e:8e:8b:dd:38:62:
6c:3c:77:bd:2c:55:7e:24:60:d5:af:5b:1e:0c:c3:
35:e9:61:bd:73:a5:65:1a:ac:64:4d:21:3d:3e:89:
f3:05:c8:6d:c3:91:05:8f:25:4a:b9:b7:5d:8a:31:
30:df:d4:3c:a7:f2:07:d6:4d:42:8f:f2:87:32:c4:
55:cc:44:42:55:e4:29:23:40:bb:49:99:46:0e:ef:
37:65:6a:b9:26:03:b2:68:b5:ca:e5:32:8e:0a:b0:
36:32:14:4e:6e:e7:15:9b:21:0d:0f:48:31:f5:ef:
a6:d7:27:dd:e3:b1:07:f1:7e:07:26:a8:d5:50:f7:
39:13:4e:af:1b:9d:8f:ac:ca:4e:70:8b:b8:c8:76:
fc:64:4f:6f:b7:0a:95:78:3c:a9:91:f2:bd:ac:de:
c1:d4:99:10:ae:c0:e1:ed:62:a9:47:4c:d5:20:e5:
82:bd:e6:1a:20:24:60:66:46:65:af:63:6a:33:e0:
6a:bc:dd:ca:67:d3:80:53:61:52:5c:41:0c:22:12:
b5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3F:08:00:2F:90:03:70:41:20:32:C3:44:22:75:55:82:1A:A3:DC
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Pj8IAC-QA3BBIDLDRCJ1VYIao9w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
1f:8a:80:10:ab:2f:13:0c:d6:00:a3:48:ab:0d:db:0f:65:12:
7d:f3:02:24:ad:d8:1b:ca:53:66:59:cb:75:50:0b:3d:e9:7f:
55:a2:56:07:8a:00:59:aa:b3:d0:da:7d:6f:95:47:c9:4f:66:
65:55:8b:ce:31:6b:13:2a:82:ab:d8:be:e0:4d:ef:04:56:b4:
b4:5e:39:f0:60:a5:9e:e6:e5:67:e6:fd:ba:cb:97:96:28:8c:
63:91:7e:cb:f6:83:9e:c2:f4:50:d9:69:e3:10:c5:e5:aa:ea:
3e:6c:75:3d:d7:45:42:7b:07:98:bb:04:d3:6b:63:cf:a5:0e:
72:47:06:30:b7:9b:07:df:0f:39:10:cb:51:17:f6:01:80:64:
f7:7d:6d:11:d9:ad:81:31:b4:3e:7c:9c:6f:87:39:4a:d6:2f:
2a:e2:60:94:a0:19:ae:3e:cc:65:8b:bc:71:63:3d:27:0a:ce:
fd:6c:87:d6:2a:fc:a4:a3:84:a0:86:e9:b0:f8:a7:46:62:1b:
e2:07:df:36:b6:0c:94:cc:ce:e2:49:56:9a:ef:87:e0:00:a7:
07:00:7b:b9:a3:e9:a5:c4:2d:7b:48:3c:96:01:d7:fc:4f:5f:
71:f6:cd:14:83:05:b7:3e:f8:07:b5:81:2a:be:9d:3e:0b:29:
aa:53:16:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:04 2025 by rpki-client