Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/dALroHanKpu7jM_W-z7wyZLiVLs.roa
File: dALroHanKpu7jM_W-z7wyZLiVLs.roa (raw, json)
Hash identifier: Y87PS4bALcsS7JzmyWv8svPFyi61I9naXrcoxShul8M=
Subject key identifier: 74:02:EB:A0:76:A7:2A:9B:BB:8C:CF:D6:FB:3E:F0:C9:92:E2:54:BB
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1EEF
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/dALroHanKpu7jM_W-z7wyZLiVLs.roa
Signing time: Sat 31 May 2025 17:08:29 +0000
ROA not before: Sat 31 May 2025 17:08:29 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7919 (0x1eef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: May 31 17:08:29 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7402EBA076A72A9BBB8CCFD6FB3EF0C992E254BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:9f:3a:cb:71:44:03:5b:31:dd:d4:47:a8:
6e:d2:8c:0c:84:0c:83:94:c3:33:37:c2:15:c1:86:
4e:6b:81:64:46:77:29:d1:c0:77:a1:e8:0e:8e:a7:
f8:b1:6a:fc:75:fd:8d:48:e1:cd:e3:16:00:54:4f:
2a:3e:bd:fa:f6:ed:5e:b2:f4:97:d8:4e:4b:d5:22:
36:10:92:2b:af:d3:19:f3:d1:41:74:89:bf:d0:6d:
9b:b8:54:7f:a4:40:db:68:4e:86:ff:9b:c4:8a:49:
64:c7:6c:9f:0c:6e:e9:88:56:84:b2:19:be:be:b5:
71:34:f3:d2:ac:54:38:7e:38:be:f6:24:0f:2a:5e:
92:ac:ae:d1:85:5b:da:ea:96:47:c8:24:17:8b:b1:
d5:76:8e:31:5e:ac:51:f8:d1:24:5a:7e:49:84:08:
78:84:90:10:7a:e2:01:c5:f2:2a:45:bd:88:cf:f6:
1c:05:fe:64:7a:03:3f:75:13:45:74:80:d6:a9:94:
17:4f:68:ae:e8:f4:68:a7:8c:63:39:19:01:b6:ea:
da:bd:f8:dc:bb:f2:80:18:75:d4:de:75:dd:dd:03:
a7:d4:1c:1e:d1:6e:3e:44:e0:ba:08:81:01:13:9a:
3c:bc:0a:66:17:b3:5f:7c:ba:a8:da:a6:3b:73:72:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:02:EB:A0:76:A7:2A:9B:BB:8C:CF:D6:FB:3E:F0:C9:92:E2:54:BB
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/dALroHanKpu7jM_W-z7wyZLiVLs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
8a:d2:b8:a4:f6:34:5a:e5:84:ae:c1:dc:ad:d9:06:4c:9c:6f:
90:a6:f4:96:9b:7f:f8:5f:fa:21:18:20:30:f4:89:af:01:7c:
b5:35:a4:06:7e:12:c6:ee:14:02:6b:13:cf:af:4e:c2:eb:cb:
94:2a:f3:c2:24:a3:fe:c8:15:d7:43:f6:e0:65:3a:79:0e:3d:
34:75:82:53:e1:83:f0:73:62:c6:bc:82:57:f9:e6:a0:b0:56:
ff:06:13:d3:54:b0:13:6c:10:7e:87:49:26:2b:59:40:60:d7:
bb:e4:17:8e:3b:87:68:db:bb:b0:f7:2b:da:2c:24:f4:a8:20:
74:3e:ef:ef:e0:0d:ae:2a:77:55:55:42:1f:4d:f7:d8:53:b2:
63:d6:2c:b0:14:18:37:50:9e:d4:49:b8:c9:31:9c:93:87:4d:
ac:76:11:f3:dc:17:8b:05:ff:28:86:97:a3:0d:1b:ed:d8:67:
4e:82:ef:c6:2f:c1:c9:21:46:73:1a:06:10:6a:36:c0:e1:65:
7d:0f:2d:d3:97:7d:8a:76:27:e3:1a:b7:13:e6:fa:0f:e6:79:
e3:89:ae:90:2d:a5:1f:56:bd:48:e5:72:25:6e:f6:46:91:94:
09:58:f6:6f:36:af:7e:4b:d9:a7:bf:86:87:fe:66:66:85:d8:
3b:2e:f4:84
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICHu8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA1MzEx
NzA4MjlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc0MDJFQkEwNzZBNzJB
OUJCQjhDQ0ZENkZCM0VGMEM5OTJFMjU0QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxPp86y3FEA1sx3dRHqG7SjAyEDIOUwzM3whXBhk5rgWRGdynR
wHeh6A6Op/ixavx1/Y1I4c3jFgBUTyo+vfr27V6y9JfYTkvVIjYQkiuv0xnz0UF0
ib/QbZu4VH+kQNtoTob/m8SKSWTHbJ8MbumIVoSyGb6+tXE089KsVDh+OL72JA8q
XpKsrtGFW9rqlkfIJBeLsdV2jjFerFH40SRafkmECHiEkBB64gHF8ipFvYjP9hwF
/mR6Az91E0V0gNaplBdPaK7o9GinjGM5GQG26tq9+Ny78oAYddTedd3dA6fUHB7R
bj5E4LoIgQETmjy8CmYXs198uqjapjtzchunAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUdALroHanKpu7jM/W+z7wyZLiVLswHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvZEFMcm9IYW5LcHU3
ak1fVy16N3d5WkxpVkxzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAIrSuKT2NFrlhK7B3K3ZBkycb5Cm
9Jabf/hf+iEYIDD0ia8BfLU1pAZ+EsbuFAJrE8+vTsLry5Qq88Iko/7IFddD9uBl
OnkOPTR1glPhg/BzYsa8glf55qCwVv8GE9NUsBNsEH6HSSYrWUBg17vkF447h2jb
u7D3K9osJPSoIHQ+7+/gDa4qd1VVQh9N99hTsmPWLLAUGDdQntRJuMkxnJOHTax2
EfPcF4sF/yiGl6MNG+3YZ06C78YvwckhRnMaBhBqNsDhZX0PLdOXfYp2J+MatxPm
+g/meeOJrpAtpR9WvUjlciVu9kaRlAlY9m82r35L2ae/hof+ZmaF2Dsu9IQ=
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:12:29 2025 by rpki-client