Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/Tpcop_Axc-h_e_I8-HgJOBjJlMQ.roa
File: Tpcop_Axc-h_e_I8-HgJOBjJlMQ.roa (raw, json)
Hash identifier: zVpiwBXwgHLRq2b+hcO0FM79Lo37v7hmEWDn7UYqAKQ=
Subject key identifier: 4E:97:28:A7:F0:31:73:E8:7F:7B:F2:3C:F8:78:09:38:18:C9:94:C4
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1C23
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Tpcop_Axc-h_e_I8-HgJOBjJlMQ.roa
Signing time: Mon 26 May 2025 17:38:06 +0000
ROA not before: Mon 26 May 2025 17:38:06 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7203 (0x1c23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: May 26 17:38:06 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4E9728A7F03173E87F7BF23CF878093818C994C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9c:6b:a5:c9:64:b2:8a:42:09:06:19:e1:00:
05:c7:d3:c5:63:c4:f1:4c:94:57:9e:e2:4c:c0:b4:
d1:ae:eb:20:9f:31:3b:12:de:e0:16:90:cd:dc:95:
bd:4e:b5:ac:ca:a1:a4:2e:0d:50:ad:25:cd:26:68:
13:4a:2c:32:bf:7d:35:55:31:7d:a2:15:47:3b:6b:
1d:a9:f7:0b:37:2d:6d:c1:b4:e9:eb:c3:e7:c6:c8:
e0:3f:d1:e8:09:d1:b3:05:a8:5e:a1:a0:2f:8e:13:
11:a7:f2:59:cd:b2:1a:98:2f:dd:7c:e0:eb:6e:49:
42:11:9b:cf:96:01:b9:38:35:b8:13:83:af:4b:20:
51:80:f8:9e:31:cb:10:2d:1e:db:a5:fd:f3:71:7f:
31:dd:dd:59:68:cc:19:da:85:93:42:cb:84:2e:3f:
46:1f:b6:94:e3:22:c9:06:51:57:2f:92:51:01:4c:
88:37:c5:fa:3c:93:e8:3c:e1:d7:e1:95:8f:33:1a:
41:57:6a:75:4b:f7:3e:09:cd:02:a3:24:e6:ff:27:
01:48:12:aa:b7:be:d7:75:ce:5b:56:61:e4:10:2c:
58:12:6c:65:3a:67:b2:54:37:a1:9c:17:5a:4d:04:
eb:a4:72:e8:19:ab:cf:dd:2c:f5:b8:d7:8b:3b:59:
ee:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:97:28:A7:F0:31:73:E8:7F:7B:F2:3C:F8:78:09:38:18:C9:94:C4
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Tpcop_Axc-h_e_I8-HgJOBjJlMQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
9e:fd:a1:66:43:7f:34:a7:6b:e4:22:7a:fc:8e:45:e9:13:e8:
e8:85:3d:d8:34:e5:d4:19:c8:f4:af:81:84:79:b9:7d:82:cf:
a7:17:a5:f4:3d:73:28:46:bf:ed:e6:14:92:81:98:b3:72:f2:
fb:c5:24:38:63:c2:91:28:62:bc:84:12:7f:b2:94:c7:73:3c:
f5:c9:72:65:ed:59:52:0d:40:35:17:66:c6:3d:bb:26:24:00:
67:16:91:63:c0:f7:a4:d1:08:e9:b3:c7:6c:d8:a7:8f:8c:a7:
e5:9c:72:17:15:45:3d:ba:79:7b:18:17:3a:98:24:76:8a:b1:
16:d6:e6:c3:33:fb:85:23:b6:ef:8c:27:e1:82:22:7c:69:2b:
5a:a4:74:98:83:f6:29:fa:b0:76:a0:03:55:b0:57:80:3a:23:
52:b2:66:ac:cc:ca:22:2d:75:d1:8d:55:50:6d:b9:56:57:09:
fa:20:3f:39:7d:7a:b1:12:3f:ec:df:4c:c3:21:2f:b8:22:de:
8c:ca:a3:11:d1:a3:47:f7:23:b7:19:e8:52:e1:34:f0:7f:19:
d4:64:94:87:36:50:14:30:31:34:c5:82:f8:26:20:76:22:30:
75:6b:87:cc:b4:23:d5:a2:24:1f:c5:00:14:c5:83:ba:25:f2:
c8:28:ca:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 19:45:32 2025 by rpki-client