Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/bVTmbDFwdSYbPAoFNTFpKte_xCw.roa
File: bVTmbDFwdSYbPAoFNTFpKte_xCw.roa (raw, json)
Hash identifier: TAPXucw2PZ6s0ab+dXdjINgt1ms+fo6mjgvnbMlcR30=
Subject key identifier: 6D:54:E6:6C:31:70:75:26:1B:3C:0A:05:35:31:69:2A:D7:BF:C4:2C
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1FB8
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/bVTmbDFwdSYbPAoFNTFpKte_xCw.roa
Signing time: Mon 02 Jun 2025 02:38:34 +0000
ROA not before: Mon 02 Jun 2025 02:38:34 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8120 (0x1fb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 2 02:38:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6D54E66C317075261B3C0A053531692AD7BFC42C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:b2:87:25:7f:2c:c2:37:1c:b6:d6:5e:be:
07:c0:c4:da:16:91:11:99:f5:62:46:87:ac:05:65:
c8:99:ac:a4:ed:1c:7b:0f:00:30:1a:fc:19:50:ae:
69:0b:59:e4:2b:0e:92:2b:19:06:02:f7:a6:b8:f0:
83:ff:59:e8:0a:5d:92:d0:53:76:0f:b0:61:5c:4c:
a3:c9:77:d8:b9:67:95:70:d7:a0:2a:1a:dc:20:a7:
48:35:79:13:a7:85:cf:8f:11:21:3b:7a:a9:03:d6:
10:c5:31:d8:7c:03:4b:c1:2a:c4:dc:ea:02:04:41:
98:0e:0f:d5:bc:02:53:23:b7:e4:15:0e:b7:b9:ec:
c9:fe:8d:0d:2f:af:be:26:06:15:2e:6f:15:86:cd:
3d:85:bf:20:1c:59:69:1f:55:ef:ca:fd:43:87:4b:
2f:50:71:ea:13:73:23:86:28:d9:c3:56:b3:54:9d:
5b:ca:d2:ed:3e:73:d3:bc:5e:5c:7f:02:d2:27:b1:
06:b2:35:d4:1b:92:17:ab:48:4e:76:da:a6:c1:c4:
dd:7f:20:87:66:33:c6:13:19:90:0d:75:34:58:bb:
6e:ba:d2:79:19:ce:4f:a9:81:6e:a4:65:74:e8:a6:
60:e5:3d:04:70:e3:0b:c3:b6:88:aa:ab:33:6b:09:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:54:E6:6C:31:70:75:26:1B:3C:0A:05:35:31:69:2A:D7:BF:C4:2C
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/bVTmbDFwdSYbPAoFNTFpKte_xCw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
79:08:f5:49:e9:3c:9c:51:79:cf:67:2d:67:61:f4:77:5e:17:
c8:48:17:71:59:42:88:44:66:1c:20:f0:0e:dd:9a:54:b1:53:
b9:08:bd:d5:11:3f:f3:31:4e:47:aa:08:2f:e0:33:44:23:78:
fd:84:a1:19:22:9a:14:89:db:56:83:68:f1:92:4f:e7:90:fe:
22:31:4a:d1:e4:19:5b:b6:39:0a:92:c6:b1:e0:60:6b:ae:f8:
99:9d:44:a9:b1:96:21:78:fd:e2:64:24:8b:07:30:87:88:eb:
ec:31:32:28:66:59:39:d0:79:bd:2c:12:0c:54:da:7a:0a:31:
5b:f0:ad:94:c5:88:10:3d:ce:23:22:c1:75:f2:9a:60:be:ab:
7d:61:50:61:73:57:00:34:48:ca:12:87:75:d5:2b:b0:02:5d:
fe:6b:9d:d3:73:e2:e4:f1:29:4f:37:37:55:82:3b:af:16:b8:
4a:d4:d2:6c:f2:12:1d:c2:19:6a:85:7e:50:ce:cd:63:02:55:
19:4b:92:8d:64:e9:1e:dd:37:57:fd:45:68:e2:05:5a:dd:ae:
b8:71:49:25:c5:fd:82:ae:44:fd:a7:89:bf:6a:41:37:30:9a:
5f:78:da:72:49:e7:16:bc:f4:25:6a:ff:ff:49:e8:29:64:6b:
ac:bb:4b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:33:41 2025 by rpki-client