Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/Sz2NywL6GqgiFG0k2DBjz0byEGk.roa
File: Sz2NywL6GqgiFG0k2DBjz0byEGk.roa (raw, json)
Hash identifier: BcyFyKOdhUtuo4Jg6FIacYUe0FUJxRzD5BkenWMlFTM=
Subject key identifier: 4B:3D:8D:CB:02:FA:1A:A8:22:14:6D:24:D8:30:63:CF:46:F2:10:69
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2039
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Sz2NywL6GqgiFG0k2DBjz0byEGk.roa
Signing time: Tue 03 Jun 2025 00:08:46 +0000
ROA not before: Tue 03 Jun 2025 00:08:46 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8249 (0x2039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 3 00:08:46 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4B3D8DCB02FA1AA822146D24D83063CF46F21069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:b8:a2:26:1c:13:73:e2:9f:58:36:97:7d:
d5:36:e5:d7:64:94:f7:c6:70:3f:f3:6b:4f:08:ef:
6a:bb:ce:aa:ac:c0:bf:9f:9f:8f:05:5c:b7:0f:50:
c8:6c:5a:0f:ff:38:36:7f:19:91:93:34:28:cf:b5:
6b:67:ac:45:39:2e:25:3c:e9:70:df:91:6d:25:77:
95:1d:00:46:e3:b5:ca:cc:f1:44:c8:b0:3c:16:42:
0a:41:1d:f5:74:41:1c:be:56:7a:f3:8e:6c:08:a6:
c0:94:90:c8:ca:eb:ec:41:3f:c3:99:71:ea:a7:d3:
89:71:b7:85:76:4b:e0:86:b5:21:64:ba:c7:bb:be:
9e:9d:7b:35:c2:a4:c5:7d:7b:d2:3d:34:8b:63:99:
5a:fe:87:a6:ef:04:52:10:12:c6:94:2e:8b:4f:a5:
10:7a:b5:82:d0:90:c0:d2:26:e9:3a:de:4e:06:56:
53:49:0f:0a:28:47:17:45:ee:71:30:6b:84:42:d5:
88:1d:a3:3f:77:00:4f:2d:c4:f4:8f:00:95:ee:50:
1f:49:2c:4f:0f:f8:98:18:b1:33:52:2a:c5:7d:73:
ba:e0:51:71:09:ac:69:83:da:51:1c:f7:f5:11:8e:
14:ec:77:42:de:f5:5c:ed:e0:1d:e0:bb:f7:06:44:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3D:8D:CB:02:FA:1A:A8:22:14:6D:24:D8:30:63:CF:46:F2:10:69
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Sz2NywL6GqgiFG0k2DBjz0byEGk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
8e:ba:f0:22:e3:09:17:d9:18:f8:39:7e:6c:29:c3:47:43:78:
35:95:29:f8:cc:42:7e:8f:49:f1:c9:4a:39:d5:5d:34:b0:01:
0e:3e:fd:b8:ac:dd:29:a0:73:28:e3:09:96:e9:22:1e:15:5f:
63:a2:03:8d:45:c1:8f:61:eb:1d:59:6a:8f:01:a3:78:83:96:
6c:a7:73:cf:23:37:23:01:b6:52:36:49:43:bc:d8:16:2c:bc:
44:04:de:04:9f:4f:dc:3f:a0:cd:75:04:af:ff:9e:1b:a1:5a:
f0:03:7d:19:2e:16:33:45:8b:09:b3:90:49:93:e0:ea:ca:b3:
98:3d:7e:a9:52:9f:6f:c6:63:a1:78:d0:4b:3f:41:bf:31:20:
28:0a:ad:56:a5:9a:1a:3d:54:a5:30:68:60:52:a9:5a:e5:97:
b6:30:7b:df:ac:3b:4b:4b:ee:3e:d7:28:1a:59:18:59:15:2c:
2c:44:a2:ca:ba:40:a9:61:1f:cc:f4:77:86:20:a0:9d:77:2a:
5f:05:bd:9c:01:eb:30:89:68:21:36:af:1c:19:0b:0a:b5:f7:
3f:78:92:66:83:be:65:b6:64:63:8f:72:5e:8c:e9:f5:70:68:
86:7d:e6:fe:aa:d1:dd:3c:0c:4e:2c:82:9e:36:72:65:28:7b:
3b:a9:51:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:56:28 2025 by rpki-client