Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/X8P-1cS4lnuYWjkdtPiuFv_WwsU.roa
File: X8P-1cS4lnuYWjkdtPiuFv_WwsU.roa (raw, json)
Hash identifier: EH7zF5tpeLaXqk1IZGE1TMqQAOQtyA/ojJyIK9gEIk0=
Subject key identifier: 5F:C3:FE:D5:C4:B8:96:7B:98:5A:39:1D:B4:F8:AE:16:FF:D6:C2:C5
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2591
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/X8P-1cS4lnuYWjkdtPiuFv_WwsU.roa
Signing time: Thu 12 Jun 2025 12:09:14 +0000
ROA not before: Thu 12 Jun 2025 12:09:14 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9617 (0x2591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 12 12:09:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5FC3FED5C4B8967B985A391DB4F8AE16FFD6C2C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:c9:b5:e8:cb:9a:44:31:0c:d7:d1:75:14:
d5:27:bb:cd:2a:9a:51:ae:42:55:58:04:d7:46:37:
d5:76:e7:af:ed:20:d7:04:01:0e:64:04:10:78:51:
5a:5e:8a:b6:e2:50:96:ca:e7:86:34:15:01:33:19:
4c:ad:ad:13:90:95:46:e3:b3:0b:de:5d:9f:45:8d:
4e:ec:6e:01:bf:59:52:d1:06:d1:18:d1:23:40:97:
3a:a1:23:aa:42:a6:79:0d:a8:0e:31:23:bc:cd:5e:
f4:8c:66:99:45:4e:82:df:d1:85:e3:2e:d5:4a:7e:
cb:86:97:61:00:93:3b:85:48:92:ec:ff:62:ff:1b:
91:81:11:e8:f0:88:19:13:0a:62:f2:d3:f0:ff:72:
8c:44:dc:46:c5:4e:93:57:13:85:d3:6f:33:21:4b:
03:5d:43:f4:f4:65:f1:ba:90:94:60:b8:9e:ec:72:
c8:98:7e:77:c5:10:e5:28:31:24:75:ea:0b:e6:4a:
de:20:a6:c5:f7:a5:36:16:64:35:04:db:2c:98:fc:
04:67:15:39:97:91:60:4b:80:cd:6d:67:4c:87:03:
2f:ba:98:ea:62:fb:17:cc:69:b4:90:8f:b9:25:9c:
c5:f9:40:12:98:ac:d5:77:a6:02:94:35:37:33:fd:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C3:FE:D5:C4:B8:96:7B:98:5A:39:1D:B4:F8:AE:16:FF:D6:C2:C5
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/X8P-1cS4lnuYWjkdtPiuFv_WwsU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
92:8a:3f:98:28:bf:46:31:0c:f4:17:f6:d9:82:86:da:04:34:
dd:16:bd:07:49:8d:d9:e9:f9:e5:cc:49:33:68:a2:6a:ef:11:
cd:74:03:49:54:b9:e9:66:bb:a5:ac:c0:75:61:22:52:d9:19:
eb:ca:77:d5:00:e6:97:aa:36:35:86:a0:c3:0b:38:ef:d6:01:
1a:73:37:cf:4e:78:32:50:c6:f2:17:ec:1a:24:80:a3:45:10:
5b:a4:5a:a3:77:d6:dd:bc:47:1e:3d:1b:d6:b2:a9:18:4a:2d:
89:8a:7c:8f:44:52:58:c7:c4:19:fc:31:aa:70:a3:d9:e8:d9:
5e:f7:75:28:cb:e9:7b:d3:e6:26:d4:6c:d6:79:29:c0:bf:f9:
72:75:99:af:cc:91:1b:79:88:b9:8e:8d:da:77:85:b0:12:14:
e6:a2:66:13:0e:f7:dd:85:58:d1:3a:d2:82:9b:05:16:ea:f4:
5e:e0:29:80:cb:f7:3d:b0:20:14:d6:3f:26:2b:7a:56:ae:e2:
ff:0d:e9:63:92:e4:2c:ef:b5:d8:e5:18:f9:73:9c:ec:62:dd:
93:d6:e9:f3:7f:5e:52:96:58:10:9c:83:df:ff:63:93:1c:f7:
51:02:75:de:14:07:45:c1:80:94:d9:4d:dd:0b:d1:f8:33:b8:
b8:11:83:5b
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICJZEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTIx
MjA5MTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDVGQzNGRUQ1QzRCODk2
N0I5ODVBMzkxREI0RjhBRTE2RkZENkMyQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3Ecm16MuaRDEM19F1FNUnu80qmlGuQlVYBNdGN9V256/tINcE
AQ5kBBB4UVpeirbiUJbK54Y0FQEzGUytrROQlUbjswveXZ9FjU7sbgG/WVLRBtEY
0SNAlzqhI6pCpnkNqA4xI7zNXvSMZplFToLf0YXjLtVKfsuGl2EAkzuFSJLs/2L/
G5GBEejwiBkTCmLy0/D/coxE3EbFTpNXE4XTbzMhSwNdQ/T0ZfG6kJRguJ7scsiY
fnfFEOUoMSR16gvmSt4gpsX3pTYWZDUE2yyY/ARnFTmXkWBLgM1tZ0yHAy+6mOpi
+xfMabSQj7klnMX5QBKYrNV3pgKUNTcz/SItAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUX8P+1cS4lnuYWjkdtPiuFv/WwsUwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvWDhQLTFjUzRsbnVZ
V2prZHRQaXVGdl9Xd3NVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAJKKP5gov0YxDPQX9tmChtoENN0W
vQdJjdnp+eXMSTNoomrvEc10A0lUuelmu6WswHVhIlLZGevKd9UA5peqNjWGoMML
OO/WARpzN89OeDJQxvIX7BokgKNFEFukWqN31t28Rx49G9ayqRhKLYmKfI9EUljH
xBn8Mapwo9no2V73dSjL6XvT5ibUbNZ5KcC/+XJ1ma/MkRt5iLmOjdp3hbASFOai
ZhMO992FWNE60oKbBRbq9F7gKYDL9z2wIBTWPyYrelau4v8N6WOS5CzvtdjlGPlz
nOxi3ZPW6fN/XlKWWBCcg9//Y5Mc91ECdd4UB0XBgJTZTd0L0fgzuLgRg1s=
-----END CERTIFICATE-----
Generated at Sat Jun 21 05:37:31 2025 by rpki-client