Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/QoDmuCJh89lfkGbDyRe6aYXHU1c.roa
File: QoDmuCJh89lfkGbDyRe6aYXHU1c.roa (raw, json)
Hash identifier: AF9+200iS7yowmPnhPv70W2H9Kvtf7ST/XNuIJYrfXQ=
Subject key identifier: 42:80:E6:B8:22:61:F3:D9:5F:90:66:C3:C9:17:BA:69:85:C7:53:57
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 246B
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/QoDmuCJh89lfkGbDyRe6aYXHU1c.roa
Signing time: Tue 10 Jun 2025 11:09:05 +0000
ROA not before: Tue 10 Jun 2025 11:09:05 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9323 (0x246b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 10 11:09:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4280E6B82261F3D95F9066C3C917BA6985C75357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:b6:d0:58:17:89:1e:99:c3:a8:2a:f1:a6:
7d:a6:f9:37:c1:37:05:9b:98:24:93:24:70:68:f0:
ec:b6:ab:44:a0:d0:8f:10:09:ee:ec:e2:de:fa:54:
0a:a6:20:f6:3d:40:f4:e1:70:5d:2b:d7:7d:1a:c4:
2b:80:5f:34:73:94:22:d7:4a:07:b5:1e:9e:2e:c3:
cf:fa:39:14:0c:0a:f0:b4:a8:ee:62:0b:41:f4:00:
1f:4f:06:6c:3a:dd:d5:7a:74:46:76:9f:5a:f2:d6:
1e:16:48:a1:af:a5:02:c7:9d:87:4e:64:45:20:f0:
57:48:52:1e:04:18:14:d0:a9:d2:63:61:eb:46:ab:
66:b5:e9:a5:60:a7:f3:cc:e0:96:b8:e8:57:18:6a:
46:a5:90:5b:91:27:99:27:90:d7:64:11:6f:07:c2:
29:6e:65:96:3e:60:58:b9:a8:17:44:da:d7:55:34:
05:f6:0b:81:cc:8a:ec:47:2f:84:f2:d3:d4:43:c5:
de:df:99:9d:5e:f1:51:09:55:8e:94:07:94:bc:82:
fd:ea:ae:2f:47:20:08:16:24:4c:f3:65:9d:af:b4:
a2:c9:5c:28:f2:a5:8f:e1:b2:8b:bd:b4:8e:c6:ec:
d1:55:2b:45:cf:99:75:2d:2f:21:e9:14:37:b4:9a:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:80:E6:B8:22:61:F3:D9:5F:90:66:C3:C9:17:BA:69:85:C7:53:57
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/QoDmuCJh89lfkGbDyRe6aYXHU1c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
ad:c7:27:73:e8:18:3e:0e:95:aa:f5:99:df:43:fd:d9:b0:ce:
db:a0:bb:13:39:76:a9:a0:9e:ca:28:b2:5f:58:8b:eb:31:3c:
60:0f:be:36:77:4b:1d:e2:aa:e4:e7:9f:00:67:a7:d3:7f:54:
6d:8e:d1:81:9e:64:b5:33:3f:3a:6b:44:56:28:40:83:de:90:
f3:82:94:b9:4a:e3:0b:38:2e:e9:6f:d7:68:69:e5:30:e1:18:
52:27:ae:a9:78:2f:74:b4:e1:15:66:d6:a7:87:d6:94:48:f6:
7b:24:22:35:47:a7:1e:7d:8b:44:de:75:d4:43:9b:80:dd:9c:
f4:00:0e:8a:08:ae:e3:73:92:a1:9a:38:df:c2:18:fd:d4:4a:
0d:e0:b9:f6:68:40:d5:ac:15:81:30:fc:8a:3e:83:63:6a:c5:
34:a1:f4:3a:8e:70:b4:09:ef:8a:01:2b:01:55:e9:75:9c:17:
15:3b:de:2b:b9:83:2c:95:a8:58:a1:22:eb:1f:ae:94:62:a3:
4d:f8:24:5a:ee:a1:c1:58:7a:d6:5b:78:70:6f:06:b0:7d:35:
8d:8e:68:05:83:73:b0:54:86:84:96:9a:55:33:ec:4e:69:49:
c7:0e:2d:c5:be:44:4c:ef:8a:8d:89:09:f3:ef:ab:8f:0c:43:
8a:17:f3:a0
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICJGswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTAx
MTA5MDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQyODBFNkI4MjI2MUYz
RDk1RjkwNjZDM0M5MTdCQTY5ODVDNzUzNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2G7bQWBeJHpnDqCrxpn2m+TfBNwWbmCSTJHBo8Oy2q0Sg0I8Q
Ce7s4t76VAqmIPY9QPThcF0r130axCuAXzRzlCLXSge1Hp4uw8/6ORQMCvC0qO5i
C0H0AB9PBmw63dV6dEZ2n1ry1h4WSKGvpQLHnYdOZEUg8FdIUh4EGBTQqdJjYetG
q2a16aVgp/PM4Ja46FcYakalkFuRJ5knkNdkEW8HwiluZZY+YFi5qBdE2tdVNAX2
C4HMiuxHL4Ty09RDxd7fmZ1e8VEJVY6UB5S8gv3qri9HIAgWJEzzZZ2vtKLJXCjy
pY/hsou9tI7G7NFVK0XPmXUtLyHpFDe0mtO3AgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUQoDmuCJh89lfkGbDyRe6aYXHU1cwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvUW9EbXVDSmg4OWxm
a0diRHlSZTZhWVhIVTFjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAK3HJ3PoGD4Olar1md9D/dmwztug
uxM5dqmgnsoosl9Yi+sxPGAPvjZ3Sx3iquTnnwBnp9N/VG2O0YGeZLUzPzprRFYo
QIPekPOClLlK4ws4Lulv12hp5TDhGFInrql4L3S04RVm1qeH1pRI9nskIjVHpx59
i0TeddRDm4DdnPQADooIruNzkqGaON/CGP3USg3gufZoQNWsFYEw/Io+g2NqxTSh
9DqOcLQJ74oBKwFV6XWcFxU73iu5gyyVqFihIusfrpRio034JFruocFYetZbeHBv
BrB9NY2OaAWDc7BUhoSWmlUz7E5pSccOLcW+REzvio2JCfPvq48MQ4oX86A=
-----END CERTIFICATE-----
Generated at Sat Jun 21 00:23:59 2025 by rpki-client