Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/c5Ei6gyRdX3yLGiZ3LzNnAOdK8g.roa
File: c5Ei6gyRdX3yLGiZ3LzNnAOdK8g.roa (raw, json)
Hash identifier: 5DokuPlqUMJ7C+KdHIKlAKfMqvdZqZ6alV39nAWHFXM=
Subject key identifier: 73:91:22:EA:0C:91:75:7D:F2:2C:68:99:DC:BC:CD:9C:03:9D:2B:C8
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 26A3
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/c5Ei6gyRdX3yLGiZ3LzNnAOdK8g.roa
Signing time: Sat 14 Jun 2025 09:39:20 +0000
ROA not before: Sat 14 Jun 2025 09:39:20 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9891 (0x26a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 14 09:39:20 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=739122EA0C91757DF22C6899DCBCCD9C039D2BC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:8f:d0:b3:22:c7:83:5d:b7:16:c3:06:f2:
1d:a7:dc:2c:0c:e6:72:e0:58:a4:ed:9f:eb:b7:10:
50:08:37:d2:ba:22:62:e5:cb:d3:02:92:73:3c:4a:
6b:bb:c7:98:f4:e6:e0:0f:7a:0d:fa:1c:9a:e8:d1:
2a:e2:42:8e:8b:8e:da:29:85:6e:b2:2e:e1:fc:cd:
ed:5f:7b:a3:ea:a4:b2:dd:f0:95:03:be:df:86:52:
ff:72:16:47:89:e2:dc:20:00:53:f0:99:b4:c4:a3:
cb:21:a9:cf:26:2b:19:f9:8d:1d:1f:19:e8:ee:96:
ab:a4:88:16:90:cd:2a:37:9f:da:77:b4:0c:ab:db:
15:86:c8:17:94:2f:67:38:d3:a6:02:fb:29:69:8b:
59:67:77:b4:82:38:3c:f2:93:c6:e2:e2:f2:d3:ab:
6b:e0:04:63:ea:59:5d:88:f2:df:c4:d2:b3:a0:d0:
4a:1f:43:de:c1:6f:b2:9a:2b:66:58:b3:bc:00:5c:
c6:c3:e8:f3:b6:c1:60:a0:c9:69:aa:30:43:d4:41:
b5:5f:23:84:e3:3f:46:2f:02:98:26:b1:85:43:f4:
86:d2:be:d8:56:8b:9d:ac:2b:bd:e8:15:a5:12:fe:
95:08:66:8d:7c:54:55:53:f0:b8:a3:0b:a1:e1:be:
0e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:91:22:EA:0C:91:75:7D:F2:2C:68:99:DC:BC:CD:9C:03:9D:2B:C8
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/c5Ei6gyRdX3yLGiZ3LzNnAOdK8g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
05:a3:35:a0:57:c0:fb:0d:24:b5:b8:9c:11:d2:d4:30:75:d6:
ae:55:6e:7c:ef:75:5b:71:ae:fb:ea:11:6b:91:87:22:ff:95:
5f:21:b4:56:0e:90:24:18:a2:1a:66:81:58:4e:15:7d:b4:e9:
da:50:22:74:d5:8e:ca:40:62:50:67:c2:0c:42:68:89:1b:c7:
65:c3:88:46:af:7f:19:25:c3:03:86:8c:2f:3e:6d:9d:4d:44:
b1:e8:03:76:54:bc:8d:79:65:16:fb:fc:c7:ea:66:59:29:cf:
47:2e:32:1a:8e:a6:0b:38:72:aa:02:bd:9e:b1:71:04:7e:19:
17:c1:63:6a:3e:d2:a6:21:82:51:96:ba:d1:e2:d2:e1:28:b8:
1e:82:de:cd:09:49:01:12:65:cc:d1:b8:e6:67:bb:15:09:c6:
b4:b3:5a:a8:ac:6a:38:d7:8f:14:27:34:4e:c2:85:a7:d4:42:
fe:63:de:42:d4:d0:8f:10:70:23:cd:43:91:be:f9:20:63:c6:
ae:e4:45:b9:1b:a2:f3:34:02:f1:0f:cc:fb:00:11:0a:ff:ce:
d4:e5:38:cc:31:0f:31:b2:c6:8b:de:cd:d6:c2:c1:e9:23:c2:
78:82:66:12:1e:1f:8a:fe:50:e8:fe:e1:60:33:c9:d3:a0:8c:
cf:fe:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:30:59 2025 by rpki-client