Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/Wy3-lFB2DtyRvrevBRd1cmbo1D4.roa
File: Wy3-lFB2DtyRvrevBRd1cmbo1D4.roa (raw, json)
Hash identifier: /ei0XWpbq+6AqTdyDHQ0c0b1QHazxMpH2Lj6eDDMlEw=
Subject key identifier: 5B:2D:FE:94:50:76:0E:DC:91:BE:B7:AF:05:17:75:72:66:E8:D4:3E
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 23DE
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Wy3-lFB2DtyRvrevBRd1cmbo1D4.roa
Signing time: Mon 09 Jun 2025 11:39:01 +0000
ROA not before: Mon 09 Jun 2025 11:39:01 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9182 (0x23de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 9 11:39:01 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5B2DFE9450760EDC91BEB7AF0517757266E8D43E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:71:c7:fa:75:e9:64:e0:2e:e2:c3:b9:bd:c8:
73:ce:8c:0c:92:27:d3:ca:46:d6:1f:fc:ed:ec:10:
d2:73:57:2e:c6:3f:1b:3f:5e:5f:ad:dc:0a:85:b8:
7f:93:4f:4c:04:b0:37:bb:d9:58:88:38:2f:22:ce:
33:5b:e1:b3:0f:40:06:bd:ca:f7:3d:d8:ae:53:7b:
8c:22:a5:95:1d:5e:c5:c0:21:b4:d9:56:7d:71:4b:
18:5a:67:51:a9:f6:3c:4c:a8:8d:45:41:5d:e8:07:
52:77:1a:71:d2:2e:12:36:34:c0:98:21:af:16:a6:
18:c5:e8:77:57:b4:8b:47:05:14:a9:9b:f1:e8:40:
ce:9d:5f:d5:b5:f7:bf:e1:3e:7b:91:8a:21:99:2f:
a5:4b:c3:14:2f:5d:6e:26:91:1c:32:1f:57:8f:28:
4b:ec:23:12:39:00:93:f2:71:29:0e:39:f2:af:98:
ef:54:c5:ab:17:33:5c:45:15:c2:44:34:d1:f9:fc:
a8:8c:ce:ff:92:95:51:5b:50:d9:f6:4d:a7:dc:c2:
6b:5b:44:a5:b1:68:72:d1:ce:ba:e5:42:f0:78:7a:
aa:88:d5:f3:bc:55:22:ec:bb:85:80:29:de:1f:41:
3a:d2:de:e3:4f:54:1d:f0:cd:46:65:23:54:15:eb:
c7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2D:FE:94:50:76:0E:DC:91:BE:B7:AF:05:17:75:72:66:E8:D4:3E
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Wy3-lFB2DtyRvrevBRd1cmbo1D4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
86:45:a8:6e:e2:98:f7:74:ac:44:fa:29:de:89:ae:8e:98:93:
ed:dd:d7:25:76:ad:1e:4f:67:29:cc:a1:fb:e7:61:ed:1f:a9:
e1:d9:0e:8d:80:e9:f8:ed:08:85:66:ef:26:c2:80:d9:f3:e9:
a0:ac:67:3e:d9:d9:f2:72:90:c5:87:38:76:ba:7b:6a:da:a5:
ab:1e:c5:4d:22:cb:21:62:4b:dd:19:18:0c:39:4b:04:75:40:
b2:8c:26:b5:88:3f:9b:65:a7:2f:39:6c:35:b8:10:18:31:9a:
ba:b1:94:c2:56:c2:f5:a6:92:3b:31:95:33:42:85:e8:e2:6b:
0a:b0:d3:c1:f2:45:75:62:0e:10:1e:5c:d8:7c:b7:ed:d2:f8:
86:9b:b8:57:0b:ed:5b:40:e4:70:a1:e4:82:bd:62:78:cd:03:
c3:f4:3c:bb:01:e1:70:ff:d9:d0:57:c4:b6:47:0d:f1:bf:a1:
30:f1:bf:98:b4:5c:bf:ee:95:88:f3:b0:76:f0:e7:3c:17:e6:
18:2d:f6:3e:bf:4f:bc:45:82:f3:ba:2e:40:b5:8a:c2:1e:4e:
31:5a:d1:36:c7:24:42:94:aa:6a:b7:16:0f:6e:c6:cc:fd:97:
0c:c1:c2:f2:be:af:26:fe:1d:de:4e:f8:a7:e9:64:fd:3f:a6:
84:46:d5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:52:06 2025 by rpki-client