Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/RkQJWCZnc_tBO_SMGpmxXy9sFWM.roa
File: RkQJWCZnc_tBO_SMGpmxXy9sFWM.roa (raw, json)
Hash identifier: FZsw0hmaFXb9h5wYgfxUTcsdb961HWzxvza1HezGxDU=
Subject key identifier: 46:44:09:58:26:67:73:FB:41:3B:F4:8C:1A:99:B1:5F:2F:6C:15:63
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2592
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/RkQJWCZnc_tBO_SMGpmxXy9sFWM.roa
Signing time: Thu 12 Jun 2025 12:09:14 +0000
ROA not before: Thu 12 Jun 2025 12:09:14 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9618 (0x2592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 12 12:09:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=46440958266773FB413BF48C1A99B15F2F6C1563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:9c:13:cf:6d:3a:dc:56:55:22:8a:99:56:
ab:da:0e:6c:f0:d3:74:20:e9:32:80:70:52:f1:ed:
22:ce:a2:f3:8a:54:46:bd:a4:61:d2:45:a7:4b:24:
d9:6d:ab:df:d0:ab:19:5b:85:fa:b8:79:bc:9a:7a:
8d:8e:7a:07:08:47:31:07:cf:34:16:ce:be:e3:01:
f4:63:2b:6a:b3:4b:ee:39:2e:08:63:e8:6d:2e:98:
c3:0a:dd:23:6f:9f:6d:00:c4:65:5a:92:35:ec:93:
08:bc:67:46:b3:4e:e0:f6:72:19:0c:31:40:71:1c:
cd:c1:60:3f:8d:7c:ee:99:7c:88:63:4a:09:d8:26:
0a:82:0c:db:4a:40:15:4e:86:78:36:a5:a4:14:64:
52:a5:ba:04:f1:6d:fc:2a:a4:b3:e1:9f:ed:05:8c:
8e:cf:51:41:8d:bc:13:ad:98:21:26:05:2b:2b:8e:
fe:92:ce:79:07:d9:10:98:06:1a:51:59:9c:10:91:
cd:cb:c3:de:b9:eb:62:4d:ce:b8:20:2b:fd:2a:f2:
37:75:35:0c:e3:bc:f9:20:48:ed:29:c7:50:27:cc:
19:f6:8c:9d:3f:cc:60:fc:fd:59:6a:f0:12:cd:6d:
8e:3a:d8:48:5f:d7:93:3d:7b:02:0c:b7:10:82:27:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:44:09:58:26:67:73:FB:41:3B:F4:8C:1A:99:B1:5F:2F:6C:15:63
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/RkQJWCZnc_tBO_SMGpmxXy9sFWM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
89:12:77:cd:96:c2:95:ad:f5:e1:03:0c:09:6d:fd:01:b8:24:
2c:da:14:38:23:a8:31:66:e4:b0:df:9e:2a:f9:9d:24:e9:1a:
59:fe:e5:1f:0a:9a:e4:23:8b:6b:b3:ad:fc:bb:e9:f8:ac:76:
53:9e:86:60:06:47:c8:76:76:53:a7:1b:6f:b1:f4:a7:74:ba:
3b:3c:05:99:b3:f5:ac:38:e6:5d:5e:97:09:37:88:9f:4c:68:
c5:cd:5d:09:60:4b:19:5a:14:20:cb:49:49:87:3d:c3:83:16:
f7:e4:86:a8:ee:6e:34:70:65:d9:f7:09:1d:4c:a0:d6:d3:78:
df:ae:85:4f:56:a0:41:82:54:31:1c:98:87:5f:14:79:d4:6b:
1d:07:35:ae:df:27:3e:a3:a5:7e:ce:3c:1f:73:47:ed:68:61:
fb:78:4c:eb:00:32:7b:af:e0:20:bc:59:b4:70:17:09:18:62:
7d:bb:d2:e6:85:2a:16:40:35:6b:0d:af:ae:f9:8e:ca:cf:94:
85:18:67:11:27:be:7e:14:7f:e3:11:99:f3:d0:80:dc:b6:64:
36:94:1c:1f:67:99:fc:64:aa:11:d2:1a:cf:55:c9:63:67:89:
80:a4:5c:31:d1:6d:92:0e:ba:9f:51:b1:78:1c:9e:91:97:51:
64:09:b9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 09:53:14 2025 by rpki-client