Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/bvqL48gtMnYWFRVhs5RpB-gSeRM.roa
File: bvqL48gtMnYWFRVhs5RpB-gSeRM.roa (raw, json)
Hash identifier: pi0gnhp0zCGNGwgtgNvc0NmpeBDdKTjdBJtbtBum9tY=
Subject key identifier: 6E:FA:8B:E3:C8:2D:32:76:16:15:15:61:B3:94:69:07:E8:12:79:13
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 251A
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/bvqL48gtMnYWFRVhs5RpB-gSeRM.roa
Signing time: Wed 11 Jun 2025 16:09:10 +0000
ROA not before: Wed 11 Jun 2025 16:09:10 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9498 (0x251a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 11 16:09:10 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6EFA8BE3C82D327616151561B3946907E8127913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:91:79:f9:b8:f0:02:85:13:50:a9:39:ab:06:
42:0f:44:41:6b:dd:68:3c:d1:b1:f2:9c:64:b7:4a:
35:a2:fe:01:c0:64:5a:af:da:a0:96:97:1b:b0:7d:
b8:e1:c5:10:e1:38:44:46:3c:f7:79:dd:ab:54:5e:
d9:a7:16:64:2f:54:e1:24:ab:84:2d:9f:e7:27:e7:
82:3f:42:80:7a:57:b7:86:0e:c4:dc:0e:34:7c:ae:
f2:b8:ab:3b:12:41:50:cd:03:a7:82:39:5d:eb:05:
fa:5f:eb:7f:19:e4:e1:b8:c0:6f:b4:0e:6d:f8:10:
17:12:9f:24:6c:e4:ce:41:3b:c8:94:ae:20:49:15:
5d:04:22:21:01:87:9e:9c:87:97:ae:86:83:68:ab:
6c:ae:2e:13:ec:bb:81:98:ca:76:bd:9b:61:f2:47:
13:9b:24:10:02:06:ad:32:ca:b8:a7:cc:ab:24:07:
56:d7:0d:34:53:0e:47:ac:ed:77:65:4f:d9:f7:50:
c4:48:59:69:ca:0a:9c:88:20:6f:5c:50:d9:6e:a6:
16:30:62:eb:34:52:65:c0:39:f8:7f:0d:ed:82:ef:
f1:e5:23:e2:9c:cc:b6:a4:54:f9:dd:bc:33:e4:04:
6b:12:72:e6:81:5a:c5:ae:d5:b2:66:91:38:1d:16:
d8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FA:8B:E3:C8:2D:32:76:16:15:15:61:B3:94:69:07:E8:12:79:13
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/bvqL48gtMnYWFRVhs5RpB-gSeRM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
3e:27:6c:ec:c1:55:7a:3b:9e:50:92:fc:58:09:4c:8e:fd:b4:
19:e0:b6:64:62:46:22:25:ca:39:ec:3f:d5:76:3a:76:a8:1e:
f7:64:67:b0:92:23:a4:9f:24:ed:b8:f1:7b:80:e2:00:30:10:
6d:2c:87:cd:f6:c3:19:40:fc:41:38:75:8e:49:c7:d9:0f:f8:
0a:b1:06:b5:a5:50:45:31:00:e2:e6:96:c3:39:77:01:df:24:
dd:05:12:97:c8:fd:dc:82:fc:46:13:1d:88:bb:da:80:5d:da:
1c:23:39:fb:ce:ad:80:1d:55:22:7c:ac:74:59:0a:fa:b2:88:
01:14:e7:be:dc:8e:8d:76:22:96:3d:ce:c0:f5:71:1c:8c:ff:
3a:8b:44:b4:25:e1:db:13:ae:cf:23:41:83:dc:66:c4:75:22:
a3:dc:90:f0:e4:3e:05:c8:c9:0c:d1:c0:4f:85:1c:a0:96:da:
98:ad:71:43:cd:f5:28:87:df:4f:64:6a:71:84:80:47:1e:94:
1c:fe:95:aa:78:25:23:95:51:cc:70:39:0d:a2:35:cd:9e:ba:
04:d4:71:09:60:e0:c4:b5:27:94:f4:14:44:4a:16:3c:c3:79:
9e:46:f8:d8:c8:d2:76:13:27:1c:e9:09:43:72:1a:58:d1:7a:
51:26:a3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:21:33 2025 by rpki-client