Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/ZDsIMglH5UQjRT8C_bhhhq2Vh0g.roa
File: ZDsIMglH5UQjRT8C_bhhhq2Vh0g.roa (raw, json)
Hash identifier: 2u2ke8+v/lGadeZCAmB2PsNlodlvuZkaQgvUV/1L+0w=
Subject key identifier: 64:3B:08:32:09:47:E5:44:23:45:3F:02:FD:B8:61:86:AD:95:87:48
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 26DC
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/ZDsIMglH5UQjRT8C_bhhhq2Vh0g.roa
Signing time: Sat 14 Jun 2025 19:09:21 +0000
ROA not before: Sat 14 Jun 2025 19:09:21 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9948 (0x26dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 14 19:09:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=643B08320947E54423453F02FDB86186AD958748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:0c:4c:02:70:9d:4b:eb:68:7f:05:e6:fa:
b2:65:9c:43:d1:ce:1e:3c:f2:70:3f:d6:f3:8c:9a:
32:a4:65:b0:d9:0c:3c:e7:46:7d:4e:60:0a:f0:e8:
bf:0a:71:f5:16:7f:cc:60:c6:ea:6e:55:9b:bb:e7:
24:54:39:13:81:57:94:f9:98:27:7e:91:87:6c:7f:
83:d3:c5:2d:6b:55:2c:bd:2e:dd:b5:b5:21:7d:24:
8f:03:a4:72:49:39:94:df:7c:e9:6a:e8:75:50:59:
13:f3:28:03:83:05:bd:31:bc:2d:04:45:84:36:d2:
f6:81:c0:51:38:20:76:15:58:cc:94:7b:d5:fe:a9:
40:83:10:13:7d:77:e8:e4:2f:3e:03:4a:51:ce:de:
58:d4:c4:00:c9:87:a7:7e:89:b6:69:64:f2:fc:98:
fb:ad:d1:62:4e:a3:82:75:fc:f8:17:a0:79:c2:80:
d7:95:94:24:bb:3f:0f:19:6b:e5:4f:89:6b:1d:d5:
c8:61:d3:6d:85:c9:68:5d:c4:04:b9:99:91:1f:d1:
11:e2:9d:64:f5:f0:9c:ed:7d:24:1b:c8:50:49:de:
ed:bc:70:cb:3a:08:12:a8:b8:a2:77:38:b9:42:5d:
b5:8f:72:c3:11:ff:1d:32:30:b4:a1:d3:38:b1:90:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3B:08:32:09:47:E5:44:23:45:3F:02:FD:B8:61:86:AD:95:87:48
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/ZDsIMglH5UQjRT8C_bhhhq2Vh0g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
4c:36:39:61:06:1c:f9:36:32:27:9b:b9:df:b2:3f:c8:42:62:
a4:38:86:af:67:98:7d:84:7f:b6:e9:9c:d2:8b:88:0f:14:5f:
3a:d2:9e:2b:2a:2e:88:e7:06:16:c4:c2:97:89:6f:b5:39:20:
d7:de:b3:0e:5e:b8:c4:8b:e4:c7:47:58:b8:27:d5:0a:c6:d0:
b2:67:c5:f4:66:1b:fb:60:36:1a:a1:0e:ca:71:2c:f5:81:82:
a8:54:7c:bc:61:96:e0:ec:73:70:6d:5b:dd:36:39:dd:ff:12:
4a:ad:f6:d8:c0:53:50:be:e4:4c:d1:96:40:56:7f:e8:fc:81:
d6:da:46:83:04:c4:41:18:ac:d3:b4:db:0a:54:ed:fe:bd:ad:
da:2a:16:a1:26:98:2b:d7:c6:d7:0f:09:86:e5:cc:f1:b5:0c:
98:55:a0:b6:f8:7b:c5:1e:85:dc:b1:91:79:e5:9f:8a:52:45:
41:8f:f1:a0:cd:b3:35:de:96:a1:d1:5f:ad:7b:7a:aa:23:40:
9b:7b:ed:0d:72:91:1c:68:c6:6e:8b:93:ce:59:32:56:15:7d:
7f:b4:8f:a1:36:a0:a6:bf:1a:54:53:68:f2:eb:e5:03:c4:f7:
1c:69:77:9b:42:ed:f1:37:a6:00:74:4c:9f:69:ad:63:17:70:
be:7b:b0:64
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICJtwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTQx
OTA5MjFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDY0M0IwODMyMDk0N0U1
NDQyMzQ1M0YwMkZEQjg2MTg2QUQ5NTg3NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC20QxMAnCdS+tofwXm+rJlnEPRzh488nA/1vOMmjKkZbDZDDzn
Rn1OYArw6L8KcfUWf8xgxupuVZu75yRUOROBV5T5mCd+kYdsf4PTxS1rVSy9Lt21
tSF9JI8DpHJJOZTffOlq6HVQWRPzKAODBb0xvC0ERYQ20vaBwFE4IHYVWMyUe9X+
qUCDEBN9d+jkLz4DSlHO3ljUxADJh6d+ibZpZPL8mPut0WJOo4J1/PgXoHnCgNeV
lCS7Pw8Za+VPiWsd1chh022FyWhdxAS5mZEf0RHinWT18JztfSQbyFBJ3u28cMs6
CBKouKJ3OLlCXbWPcsMR/x0yMLSh0zixkBTHAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUZDsIMglH5UQjRT8C/bhhhq2Vh0gwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvWkRzSU1nbEg1VVFq
UlQ4Q19iaGhocTJWaDBnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAEw2OWEGHPk2Miebud+yP8hCYqQ4
hq9nmH2Ef7bpnNKLiA8UXzrSnisqLojnBhbEwpeJb7U5INfesw5euMSL5MdHWLgn
1QrG0LJnxfRmG/tgNhqhDspxLPWBgqhUfLxhluDsc3BtW902Od3/Ekqt9tjAU1C+
5EzRlkBWf+j8gdbaRoMExEEYrNO02wpU7f69rdoqFqEmmCvXxtcPCYblzPG1DJhV
oLb4e8UehdyxkXnln4pSRUGP8aDNszXelqHRX617eqojQJt77Q1ykRxoxm6Lk85Z
MlYVfX+0j6E2oKa/GlRTaPLr5QPE9xxpd5tC7fE3pgB0TJ9prWMXcL57sGQ=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:28:48 2025 by rpki-client