Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/Yv1UwRpw6E--xkPms-GLSrDJA7s.roa
File: Yv1UwRpw6E--xkPms-GLSrDJA7s.roa (raw, json)
Hash identifier: LnU/ndR5pO0P4cAg/x68XPMO3ZsNksOrH8hpOYkKrwc=
Subject key identifier: 62:FD:54:C1:1A:70:E8:4F:BE:C6:43:E6:B3:E1:8B:4A:B0:C9:03:BB
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 24D2
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Yv1UwRpw6E--xkPms-GLSrDJA7s.roa
Signing time: Wed 11 Jun 2025 04:09:11 +0000
ROA not before: Wed 11 Jun 2025 04:09:11 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9426 (0x24d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 11 04:09:11 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=62FD54C11A70E84FBEC643E6B3E18B4AB0C903BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0f:e9:00:bf:1c:02:ba:54:77:af:fe:36:0d:
15:1f:69:38:a1:cc:97:69:74:19:61:36:6c:ce:a3:
62:71:7f:ee:c7:b8:29:21:a7:49:84:29:21:37:e9:
ec:19:f5:11:88:40:de:15:32:02:77:8d:1e:59:56:
74:5a:fb:43:4d:d9:b6:3e:67:7c:07:ed:f9:d1:67:
72:0b:31:0c:a1:90:63:e4:0d:27:cf:d8:8a:7e:e7:
c9:1e:35:9f:70:47:e8:74:0d:d3:f0:28:99:c6:7f:
ce:92:3a:76:f8:85:87:5a:35:21:c8:97:13:3b:31:
62:49:1c:13:fa:50:22:ce:4e:69:28:a6:b4:58:ef:
b6:bc:12:8b:32:54:7b:5d:5a:4a:14:6f:8b:53:ef:
fc:5e:a8:9d:61:9d:64:3c:07:9e:c3:16:6d:82:18:
7f:f9:af:36:42:ca:ae:f4:a9:59:0b:97:da:13:0b:
00:fa:fa:da:c4:a7:43:94:4c:54:03:e1:5b:0d:28:
56:0b:3d:77:47:5c:e8:e0:ff:3d:18:ab:ea:cc:c0:
2d:f6:c2:5a:e9:25:80:e7:cd:8c:4a:15:29:7d:b1:
9e:58:f7:da:88:94:24:05:45:4e:8a:15:4b:98:c2:
ec:76:00:0d:09:ca:de:f1:7f:8e:fd:1e:52:04:f2:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FD:54:C1:1A:70:E8:4F:BE:C6:43:E6:B3:E1:8B:4A:B0:C9:03:BB
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/Yv1UwRpw6E--xkPms-GLSrDJA7s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
80:04:50:1b:66:f8:38:e7:39:b4:23:02:ec:2e:b8:c9:96:e2:
3f:f2:fa:6e:2e:10:fa:5d:f8:cd:ae:70:a6:ae:e5:87:ef:72:
0d:5f:c6:cb:2c:fe:65:8e:cd:5c:39:49:9e:39:b4:2c:22:69:
81:4f:52:04:9a:d4:03:cc:53:aa:2c:7a:9c:ea:14:69:6c:f5:
1c:78:97:0d:d5:50:f8:94:24:56:d6:1d:f5:69:12:45:13:1c:
7c:b1:55:69:ca:83:5f:08:94:d8:69:1f:82:16:7b:27:a2:f2:
d1:a8:1c:5b:37:4c:4f:4c:71:38:eb:61:3c:c0:0f:33:ff:a7:
cc:b3:35:48:8d:1c:9d:78:44:fb:5f:a9:94:09:55:95:15:7a:
83:87:07:fa:7d:a1:e9:58:62:69:34:ab:02:7c:4e:45:a5:ad:
6d:b9:b4:8d:83:c1:16:9c:9e:ab:ae:5c:60:82:ce:60:2a:4d:
37:df:d3:f2:50:d8:c4:e0:1b:64:ad:5f:fb:bf:6f:98:fc:c9:
9e:da:f8:3b:bf:55:0c:e0:58:4c:94:d2:e0:fc:47:29:46:1f:
ff:12:59:9f:8e:29:90:37:28:d3:ed:21:28:dc:0f:17:61:e8:
01:1a:80:c1:24:7c:a8:80:b0:50:be:75:41:31:75:19:69:eb:
cf:7a:2f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:22:13 2025 by rpki-client