Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/RISXT4AtnHmoYONHfehPVIFcFwU.roa
File: RISXT4AtnHmoYONHfehPVIFcFwU.roa (raw, json)
Hash identifier: OpOfBRa/HfcQn9ZRA53GtZcXiaVDq1/7RoIq7/et9dA=
Subject key identifier: 44:84:97:4F:80:2D:9C:79:A8:60:E3:47:7D:E8:4F:54:81:5C:17:05
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 20FC
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/RISXT4AtnHmoYONHfehPVIFcFwU.roa
Signing time: Wed 04 Jun 2025 08:38:39 +0000
ROA not before: Wed 04 Jun 2025 08:38:39 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8444 (0x20fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 4 08:38:39 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4484974F802D9C79A860E3477DE84F54815C1705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0e:46:15:90:a1:d3:ec:1c:19:35:0c:17:b7:
53:bd:79:6f:d0:54:6e:a2:c5:9f:3c:20:d4:b3:ef:
86:eb:aa:88:d6:44:1c:4a:2f:d8:3a:18:27:c0:eb:
39:91:c1:95:e7:7a:f6:99:ce:52:8f:5b:b4:73:2c:
36:ca:7a:da:f3:76:fc:aa:82:1a:9d:ca:80:12:1d:
25:5b:9a:48:9d:5f:b9:b6:eb:bc:b1:4d:ac:59:e3:
3b:8a:90:2b:b2:41:56:b1:09:58:5a:04:9f:07:2e:
20:1e:8a:3e:de:c1:0d:1f:40:4d:be:c3:98:8e:0d:
ca:ee:23:72:a4:28:ea:65:de:99:31:79:0f:3a:e9:
d8:6e:38:2b:21:ec:f4:01:db:3a:45:96:d1:30:c7:
1b:ab:de:ac:0e:a7:ad:be:3d:eb:d1:99:2b:2b:03:
eb:f2:e1:7a:05:52:7f:7f:b0:b9:c2:17:82:22:3b:
62:5d:23:a8:a0:60:88:71:d7:e6:45:77:65:41:5a:
47:d8:d1:2b:24:79:d7:54:9b:ae:cc:0b:17:da:e6:
6a:a6:e3:d1:ac:8d:12:b0:e1:d1:fd:3b:e8:33:d1:
12:e6:72:45:da:2d:e3:cc:a6:e7:71:ca:dd:e3:61:
87:b1:7a:33:56:06:2c:ce:63:fc:19:2f:96:aa:ec:
03:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:84:97:4F:80:2D:9C:79:A8:60:E3:47:7D:E8:4F:54:81:5C:17:05
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/RISXT4AtnHmoYONHfehPVIFcFwU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
0a:5b:b9:79:9e:e3:3f:fb:2c:48:9c:8a:61:ae:37:7d:11:b2:
e6:77:40:18:f1:0a:4c:63:fb:7f:a5:11:75:b8:75:87:e2:05:
e3:2f:aa:ec:78:85:d2:96:bb:ca:5a:de:b6:3e:f4:46:44:11:
59:4a:01:b1:69:37:33:d3:b4:84:64:0e:3e:00:15:98:30:92:
81:80:10:79:3d:19:1c:b0:37:d5:51:2b:9d:fe:05:86:17:e9:
8e:a2:fb:e5:0f:f3:33:b1:5a:ca:b3:31:be:e3:83:1f:bc:a7:
88:a5:db:4f:6b:0c:80:51:a9:2d:c4:20:2c:3c:a3:d7:c6:56:
77:6c:ac:47:27:31:6c:f7:67:79:88:a3:87:e5:2f:6f:36:8f:
8d:25:2e:3c:b6:3c:6b:a7:db:e5:6e:06:ee:8a:0e:7f:91:8c:
5e:0f:1c:63:4d:e4:cb:d0:96:9d:b7:8d:ec:a3:2c:83:6b:24:
5a:7c:50:b5:04:36:a2:9f:5a:c9:b3:9e:d5:de:2c:95:92:e3:
3c:81:3d:6a:16:19:9e:b3:73:35:b3:e5:e0:d9:13:9e:7b:e1:
0e:32:0d:6c:87:66:ee:44:d6:82:5a:31:a3:1f:5e:7a:ca:cf:
13:5d:2f:1c:3c:3f:e4:71:ac:45:4f:5f:92:14:86:c8:ba:2d:
68:e9:3c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:51:40 2025 by rpki-client