Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/VgGG320o_Cf6Y9WHe3VYrjAB540.roa
File: VgGG320o_Cf6Y9WHe3VYrjAB540.roa (raw, json)
Hash identifier: fx/srlg9qmVXvbAord/Hte0fR/USciSfkoVfyWXpoWg=
Subject key identifier: 56:01:86:DF:6D:28:FC:27:FA:63:D5:87:7B:75:58:AE:30:01:E7:8D
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 25F7
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/VgGG320o_Cf6Y9WHe3VYrjAB540.roa
Signing time: Fri 13 Jun 2025 05:20:21 +0000
ROA not before: Fri 13 Jun 2025 05:20:21 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9719 (0x25f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 13 05:20:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=560186DF6D28FC27FA63D5877B7558AE3001E78D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:bc:41:c6:8c:6d:90:d4:60:c0:ff:a5:dc:
3b:9f:28:9d:9c:3e:b6:91:f1:d4:75:17:2b:91:2d:
8a:93:de:5e:2f:9c:f1:d3:67:95:bf:90:dd:9b:89:
08:2b:a1:52:99:12:f7:df:5c:81:01:c2:47:a1:8b:
58:53:61:96:5b:f5:10:ce:d2:78:8b:4d:cc:1b:c5:
0a:be:6f:36:2f:17:95:18:bd:e4:60:2d:e5:3f:91:
63:14:b4:49:2b:68:57:02:91:01:9e:f2:52:01:27:
90:93:83:1b:24:09:d8:c7:95:38:31:04:e8:3a:4c:
03:23:a5:01:71:7e:6e:58:5d:14:74:ba:10:e0:1b:
93:fd:dd:1a:81:59:f0:cb:c6:17:44:a4:d9:8d:b7:
80:d5:16:09:d8:95:15:85:91:26:ed:6f:c8:e8:c7:
0c:0b:b9:ff:d1:75:29:fe:c9:2f:d6:6b:fb:a3:ca:
04:50:4c:a9:d4:14:01:64:f3:35:d3:65:06:52:50:
2f:37:a8:41:d4:59:f1:ea:66:83:9b:26:26:d8:3e:
ac:8b:43:00:93:27:28:00:0b:a9:ce:ff:47:41:b3:
6e:5f:db:d7:bd:e3:b8:0a:4f:38:75:b0:92:19:00:
f7:86:52:96:a2:4a:66:f2:9d:da:9a:ed:6d:85:66:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:01:86:DF:6D:28:FC:27:FA:63:D5:87:7B:75:58:AE:30:01:E7:8D
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/VgGG320o_Cf6Y9WHe3VYrjAB540.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
4e:3e:0f:90:66:61:e0:c1:56:b9:bd:c4:e3:2a:10:71:fe:1f:
ec:b3:ff:61:4b:8a:11:10:8c:11:52:3d:f5:8b:cf:8b:37:6f:
11:8b:20:24:6f:2d:81:a3:6a:14:df:14:f5:08:1a:df:f3:8e:
19:e1:7b:6d:be:8a:84:79:b2:c3:3c:0d:ce:44:fb:33:a5:77:
a0:94:e9:35:38:cc:75:d6:32:b6:25:b9:48:c3:e8:5b:13:5f:
51:6e:59:7a:3e:c0:61:eb:0b:14:f5:80:6f:7a:87:f9:38:55:
f5:e9:38:5a:e9:99:b1:7c:5a:e7:f9:f0:a4:93:bf:69:3c:64:
8e:a9:9f:55:d7:16:66:9c:c8:17:67:38:56:54:ff:2b:74:90:
a3:74:21:91:60:a6:c8:dc:36:eb:66:e5:c9:66:14:5b:3c:3b:
50:f4:7a:3f:01:8e:6a:3b:83:40:28:94:b2:24:44:60:6c:02:
d5:30:41:41:c9:0d:59:f5:a8:e7:15:10:1c:f4:53:bb:2c:a3:
cd:09:e9:f5:c8:ed:73:ab:19:3a:9f:29:b8:76:6a:db:82:8a:
bc:bb:b6:48:e4:58:47:74:28:08:94:81:fb:77:c3:a1:21:7b:
02:94:de:d3:3d:ce:54:52:ae:e3:9c:ca:87:ad:8a:b5:0f:e3:
b1:6b:d0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 09:53:28 2025 by rpki-client