Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/eC7_IHiV41xN7HPp26SWQWCpUSM.roa
File: eC7_IHiV41xN7HPp26SWQWCpUSM.roa (raw, json)
Hash identifier: EFfa3l2TgLlaNlAweU79U4DLyJ4vNKMp2QBUkzTe6LI=
Subject key identifier: 78:2E:FF:20:78:95:E3:5C:4D:EC:73:E9:DB:A4:96:41:60:A9:51:23
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 20A3
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/eC7_IHiV41xN7HPp26SWQWCpUSM.roa
Signing time: Tue 03 Jun 2025 17:38:40 +0000
ROA not before: Tue 03 Jun 2025 17:38:40 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8355 (0x20a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 3 17:38:40 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=782EFF207895E35C4DEC73E9DBA4964160A95123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:70:4e:be:61:00:52:c5:e6:7d:cc:4a:29:
ce:b4:53:cc:d0:59:8f:ef:16:7a:5b:ff:37:45:0d:
77:f5:96:ca:35:a9:25:55:1f:47:1f:19:2c:dd:0f:
fb:b9:6f:4a:12:0e:eb:a2:5a:1c:81:da:47:f8:57:
66:08:9c:2b:24:0e:e7:1a:3b:ae:8f:d0:7d:9d:b7:
41:42:93:58:2f:17:92:7c:b3:33:c4:44:7b:1e:88:
24:59:40:4d:de:26:fd:4c:f5:57:31:6b:ab:44:f1:
c4:7a:9f:3a:42:23:ac:e9:93:8d:3e:2c:ae:9b:56:
90:bc:60:0a:9a:5f:d0:b4:44:5c:d8:d5:57:3d:95:
a2:52:67:db:2c:dd:a3:e9:b5:d5:84:e0:0d:09:84:
81:de:39:28:58:d9:91:56:2c:5f:0e:e5:5b:30:29:
0e:65:38:24:24:23:f9:8c:c1:31:44:4d:db:35:2d:
cf:af:36:54:7b:14:a8:5c:ce:82:9b:df:d0:59:e8:
71:53:d3:36:d6:7a:9d:a5:a6:28:96:e8:7c:b3:c7:
bf:c7:01:9a:15:7b:5a:91:e7:5e:78:7c:55:98:70:
a6:c3:c6:c7:f0:32:37:1a:c6:ce:b7:e3:91:83:e7:
18:93:94:f6:64:66:82:b9:99:7c:e7:c7:7b:31:c4:
f4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2E:FF:20:78:95:E3:5C:4D:EC:73:E9:DB:A4:96:41:60:A9:51:23
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/eC7_IHiV41xN7HPp26SWQWCpUSM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
87:61:29:2f:fe:16:b8:ed:bd:1b:9a:c9:49:34:45:9b:2b:01:
c4:00:91:82:9a:3a:4e:ac:26:42:05:13:32:7d:2d:4b:16:29:
76:31:9b:e8:d0:84:77:15:13:cd:a1:f7:b7:ca:a4:90:97:98:
78:5f:3c:41:d0:60:5b:4f:bf:4c:48:63:a4:65:d3:a1:89:6c:
d3:0d:09:e1:8d:a4:eb:7e:25:fb:fe:14:ac:72:f0:7e:89:60:
99:ff:89:ee:2f:62:ff:62:74:69:f5:8e:14:f7:8a:49:6f:60:
ed:0a:8c:da:ba:0a:3a:96:4f:39:7c:ad:da:a1:cf:7d:df:1e:
cc:0a:41:a2:5b:e2:3c:d2:9d:31:35:41:99:f7:0b:55:11:f5:
1b:7e:06:fa:f7:71:d3:63:30:40:03:7c:7f:7a:60:56:fa:3b:
a4:4b:64:81:31:e3:7b:93:19:7e:b0:18:e8:78:15:a6:aa:3b:
b1:ba:d8:59:b5:50:94:ce:af:b3:e8:0b:1b:eb:8c:bf:a3:ec:
fa:e9:60:d5:6e:49:48:dd:1d:17:ac:47:8d:76:55:36:d5:cb:
d5:69:82:33:75:ae:45:c7:23:54:ee:54:33:a8:81:e5:49:d1:
8f:75:a6:97:1c:17:17:af:2c:80:59:34:75:c2:db:0b:b6:46:
f7:ef:82:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:54:42 2025 by rpki-client