Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/Ul9T0ZASxKRYIto1LL1wM4QyZ48.roa
File: Ul9T0ZASxKRYIto1LL1wM4QyZ48.roa (raw, json)
Hash identifier: lPzxbUDWpjzwDbIXix/Gqe3Y5QnXKCBdYP3ui8kyuoI=
Subject key identifier: 52:5F:53:D1:90:12:C4:A4:58:22:DA:35:2C:BD:70:33:84:32:67:8F
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1F59
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Ul9T0ZASxKRYIto1LL1wM4QyZ48.roa
Signing time: Sun 01 Jun 2025 10:38:34 +0000
ROA not before: Sun 01 Jun 2025 10:38:34 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8025 (0x1f59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 1 10:38:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=525F53D19012C4A45822DA352CBD70338432678F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:ff:4a:ec:9a:db:fe:3c:a2:44:66:54:08:
58:ff:94:6c:dc:fa:00:ef:48:7c:01:23:64:21:27:
1d:60:f0:fb:41:45:19:8c:d7:7c:ac:40:84:78:f3:
4d:79:b7:00:01:c9:2b:a3:05:4e:7f:ed:85:50:82:
fb:5e:c6:08:9f:bb:7a:44:f3:79:9a:a4:1b:9a:81:
b0:39:e5:fc:0d:66:31:98:b8:84:29:0a:2c:a1:b9:
37:bb:c5:bd:eb:46:4c:7d:f0:c2:7a:1b:d6:63:17:
20:dc:2f:e7:ee:3d:ca:11:24:da:7f:13:c1:13:d8:
62:1b:4c:55:ef:37:e9:50:fc:fc:8c:5c:cd:23:3f:
96:51:06:55:17:86:83:dc:14:50:21:5d:dc:af:e9:
6c:32:79:59:5a:95:4d:93:5e:f1:f5:97:77:32:84:
10:1a:ab:57:9d:c6:36:6a:a8:61:0b:a1:cb:37:08:
68:05:ac:2d:6b:e8:f6:ce:5f:b7:56:1e:3a:51:b8:
05:f8:5d:76:8c:74:a8:92:2a:14:3e:6d:66:f5:2d:
7b:81:3c:02:5e:a8:be:b5:80:19:37:23:29:8f:49:
b5:1f:f7:ea:d8:49:0f:71:b4:be:6d:81:20:b3:69:
ea:36:9f:45:6d:33:36:11:7e:9d:be:c1:9a:12:ae:
ef:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5F:53:D1:90:12:C4:A4:58:22:DA:35:2C:BD:70:33:84:32:67:8F
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Ul9T0ZASxKRYIto1LL1wM4QyZ48.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
8d:16:1f:2c:bf:d5:c5:4b:2a:a4:82:80:66:19:7b:8e:84:58:
f6:d2:54:a4:bb:cb:dc:88:10:e1:70:71:5f:f2:d3:2b:9e:76:
c0:9b:e9:63:b8:10:b7:b5:42:e0:af:42:a3:11:df:dd:a6:1b:
95:ee:fb:87:a6:bd:9e:ec:32:66:68:61:4f:f3:1e:79:e6:af:
0b:f3:d5:eb:43:00:e4:23:93:09:b7:fa:da:11:88:ac:b8:08:
1c:58:74:27:46:f3:31:cf:b7:d9:a8:ad:ac:64:92:45:63:04:
3e:0e:8f:af:6c:b8:30:52:d0:06:10:12:06:df:44:bb:cb:37:
85:d6:d2:40:7f:ec:9b:de:f0:9b:57:7c:11:50:a9:49:49:f3:
60:dd:50:ed:6d:b9:4c:bf:f3:7a:f7:11:3e:e7:b0:49:2b:f4:
19:59:83:4d:9c:f9:73:0f:2c:d9:26:45:c7:e7:64:2d:ec:dd:
89:75:b7:0c:a3:20:5a:02:bb:3f:9c:fd:6c:db:af:35:00:bf:
ec:24:91:32:5f:ed:3d:64:ba:fd:af:0a:82:aa:0f:af:c6:7e:
dd:59:c9:70:51:55:dc:13:57:c5:aa:5f:03:75:7d:0d:65:c9:
b9:cf:d0:81:68:ec:6c:00:cc:dc:4f:63:ce:73:13:8e:4b:3a:
b0:0d:c3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:08:48 2025 by rpki-client