Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/YaOKsijKUWuTz9koaMleGb0djUg.roa
File: YaOKsijKUWuTz9koaMleGb0djUg.roa (raw, json)
Hash identifier: 6Nzz/Zli9UTdecCFPgErkllQWWXhUt1peK/pP3CnLhY=
Subject key identifier: 61:A3:8A:B2:28:CA:51:6B:93:CF:D9:28:68:C9:5E:19:BD:1D:8D:48
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2345
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/YaOKsijKUWuTz9koaMleGb0djUg.roa
Signing time: Sun 08 Jun 2025 10:08:57 +0000
ROA not before: Sun 08 Jun 2025 10:08:57 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9029 (0x2345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 8 10:08:57 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=61A38AB228CA516B93CFD92868C95E19BD1D8D48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:90:03:88:ce:a3:f5:8a:fb:b2:28:83:f6:
4a:19:2b:36:62:46:53:b9:73:55:5c:86:34:4c:12:
2a:4d:c7:56:88:6b:aa:84:15:52:54:34:b7:4e:8c:
59:c0:24:ff:4e:a7:79:7f:0b:1e:8c:2e:2a:16:5a:
7b:03:df:fd:c1:35:8c:c0:7f:81:2d:25:fe:7d:de:
49:f5:97:c8:c3:2b:3c:61:16:79:70:b7:61:71:0d:
28:9e:6a:05:fb:80:54:5f:9b:e0:da:66:8f:86:3b:
a2:7c:2b:19:66:9a:bb:2b:a8:e3:c7:25:12:c8:62:
19:69:11:29:eb:5b:87:26:dd:1e:3e:75:28:93:19:
3d:3d:3e:f4:75:49:23:4d:47:9f:3f:92:c1:2c:3f:
d8:84:d6:e0:31:56:e8:b2:45:cc:34:82:f3:41:5e:
43:7d:6d:20:97:ed:a5:83:b6:c1:d7:05:02:f5:cd:
e2:d2:a6:10:80:91:2b:47:02:66:f8:d8:23:2a:5c:
b1:52:0c:02:64:0a:d6:9c:7c:0e:67:94:be:6e:e5:
64:76:51:e9:17:c2:51:de:83:a3:f0:21:5c:73:76:
1a:31:4a:97:aa:a3:7d:06:b3:91:49:b4:f9:1c:80:
52:d2:a0:2d:68:63:49:78:4f:b7:8a:84:df:31:a9:
67:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A3:8A:B2:28:CA:51:6B:93:CF:D9:28:68:C9:5E:19:BD:1D:8D:48
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/YaOKsijKUWuTz9koaMleGb0djUg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
66:a8:f3:16:37:03:19:14:d5:34:60:6f:08:b4:07:2e:c7:4c:
40:86:b3:75:e5:c0:49:80:65:d1:be:05:24:01:40:3c:a8:16:
8c:b7:41:75:1b:c0:3e:16:d3:a6:f4:87:3c:46:79:13:54:36:
63:df:50:49:3c:35:7d:1f:55:cb:76:a9:42:96:8a:2e:49:70:
f9:81:6e:ea:39:3f:65:fc:24:df:21:c7:66:15:18:c7:cd:32:
84:69:7e:94:bd:b8:b7:ae:44:f4:97:2a:28:34:30:9e:35:6e:
93:d3:5c:0a:5d:39:b4:56:a1:88:41:3a:94:2b:3e:b5:2c:08:
0a:5b:6c:13:97:92:d8:03:17:8a:5b:2d:a2:ed:5b:97:55:ff:
c6:1c:89:f5:60:e5:57:9d:b4:ef:b0:29:f9:fe:a5:20:04:91:
1e:a8:a8:f7:30:51:49:89:33:8a:47:50:95:1c:1c:3d:f3:16:
76:d0:60:e9:c6:4a:19:0f:a1:44:e5:6f:18:e6:6f:43:6d:89:
80:0c:47:00:03:3e:98:97:58:95:7b:ae:55:38:80:7d:07:ef:
aa:9c:97:89:cd:34:05:f0:a7:54:88:10:81:1c:98:fc:1c:32:
c7:1b:48:3a:ea:33:08:3d:22:a2:90:70:49:38:42:83:02:7c:
e7:d2:5c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:06 2025 by rpki-client