Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/Va9-jzOiGmjZDo8TxW2d4rrRi1k.roa
File: Va9-jzOiGmjZDo8TxW2d4rrRi1k.roa (raw, json)
Hash identifier: v6ttgR7O1N2jZCizLQFNa9Irg1QhnnZfktzeQjYctHk=
Subject key identifier: 55:AF:7E:8F:33:A2:1A:68:D9:0E:8F:13:C5:6D:9D:E2:BA:D1:8B:59
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2283
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Va9-jzOiGmjZDo8TxW2d4rrRi1k.roa
Signing time: Sat 07 Jun 2025 01:38:51 +0000
ROA not before: Sat 07 Jun 2025 01:38:51 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8835 (0x2283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 7 01:38:51 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=55AF7E8F33A21A68D90E8F13C56D9DE2BAD18B59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:f9:73:2c:2b:b3:c2:08:99:8f:29:59:35:
ff:fc:16:53:84:ec:d6:00:5b:01:1a:77:df:cf:50:
4b:73:fc:3a:a1:7e:fd:74:b6:88:9d:0a:74:5a:10:
52:45:74:f9:f8:4f:2d:87:30:7d:9e:ba:d4:18:11:
f9:22:3a:bb:cc:67:39:d8:28:94:f3:65:90:3e:89:
c5:3d:c7:55:8a:68:15:5e:57:8d:21:39:63:f5:ad:
d5:4c:43:a6:06:ea:1b:aa:d6:f2:3f:a2:c8:8d:ac:
25:7e:27:68:13:0d:24:81:ad:88:af:52:aa:3d:1a:
cf:d5:0e:36:48:71:08:d7:da:47:1a:a2:f1:bf:4e:
79:f8:fb:8a:d4:fa:a1:bf:f4:b2:4a:cc:e9:e7:64:
16:76:42:98:9b:ff:78:9c:c0:d6:05:8b:81:43:cc:
04:04:c6:0d:f0:2b:32:e7:ba:bd:cb:c1:cd:35:4c:
bf:1c:50:23:f2:80:ae:34:a9:9d:95:8e:3b:66:dc:
4c:47:1e:7d:8d:36:8b:22:6e:1c:c1:f9:b9:d2:62:
9b:d7:5b:e7:4e:7f:0b:fa:00:1e:3a:44:e0:da:02:
18:21:68:99:18:a1:61:50:e3:35:18:3f:c6:09:a5:
7f:44:4d:55:09:41:36:c6:07:5b:81:77:26:d7:e2:
8b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AF:7E:8F:33:A2:1A:68:D9:0E:8F:13:C5:6D:9D:E2:BA:D1:8B:59
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Va9-jzOiGmjZDo8TxW2d4rrRi1k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
7a:f0:55:bf:9b:b9:fa:f9:64:9d:79:28:d0:5e:c7:2c:f3:be:
44:6b:71:90:3c:08:e3:60:2a:54:fe:cd:ac:a8:97:c5:77:aa:
86:5b:68:88:2c:16:84:7c:3f:57:25:98:45:8c:1b:af:86:71:
61:87:fa:65:8c:f8:bc:bc:5c:04:e0:7f:60:ff:63:33:43:05:
a6:f3:33:ae:24:7c:b8:12:9c:e5:bf:6a:98:0e:a7:b3:99:6c:
c7:e2:e4:c2:cf:a6:d1:32:5e:14:e8:85:60:c4:76:ae:0a:95:
be:e5:02:ce:54:57:dd:20:42:62:f7:75:aa:84:3a:67:af:9f:
b1:89:c5:c1:95:93:3b:e1:b9:ed:1c:fe:27:2f:40:5b:bd:5d:
ed:bb:d3:66:7b:9a:39:19:69:81:54:70:58:8c:da:23:82:e9:
3a:16:38:08:08:03:ea:c5:dd:06:1d:ce:d1:13:8c:d9:dd:85:
43:4f:ef:8c:2b:71:b1:2d:e7:47:b8:96:03:8e:62:5b:2e:2b:
b8:45:7d:93:ca:23:36:5e:92:e5:1b:9d:35:97:b8:52:fd:32:
56:09:92:97:da:ab:43:cc:a2:85:77:bd:8d:27:cb:e4:09:c1:
71:cb:d1:74:40:42:3e:a7:89:2f:8c:14:27:25:a8:10:63:e2:
97:39:a3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:26:48 2025 by rpki-client