Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/ePsnYW4dtP6gJm4Z_9QJX4zJdTA.roa
File: ePsnYW4dtP6gJm4Z_9QJX4zJdTA.roa (raw, json)
Hash identifier: UgGWqNGASoMtRau6kISRICgO0my6/O/nXah8DCz3nsU=
Subject key identifier: 78:FB:27:61:6E:1D:B4:FE:A0:26:6E:19:FF:D4:09:5F:8C:C9:75:30
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2615
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/ePsnYW4dtP6gJm4Z_9QJX4zJdTA.roa
Signing time: Fri 13 Jun 2025 10:09:15 +0000
ROA not before: Fri 13 Jun 2025 10:09:15 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9749 (0x2615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 13 10:09:15 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=78FB27616E1DB4FEA0266E19FFD4095F8CC97530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:3e:be:3e:8e:24:88:fc:ec:21:52:5e:d1:
b8:c9:34:6b:9d:47:8c:50:ce:65:05:66:39:e3:67:
27:5a:a0:75:2e:1a:65:10:d6:be:c3:d6:ec:fa:55:
ca:61:f7:3e:46:0c:9e:83:e3:44:6f:23:92:93:30:
5c:2a:61:80:bc:84:da:9c:ba:b8:50:3b:ca:a0:c0:
c0:dd:ab:c1:83:d6:ca:d9:ca:40:d5:96:9e:27:5c:
15:4b:e6:43:4d:c9:de:74:6d:b1:53:e1:84:65:a0:
29:29:b9:b4:fa:c5:3b:1c:86:46:e5:a1:2b:62:f7:
83:9b:50:9b:34:ba:bf:f9:0e:f5:a5:d3:aa:cb:07:
2c:7d:1c:50:c8:74:a0:e4:d3:fe:90:e9:ee:1d:d8:
f2:b9:3b:3f:04:de:01:70:57:28:67:37:69:21:e5:
fd:00:be:5f:bb:87:8a:61:ea:d7:42:28:95:f2:62:
4b:00:a0:12:82:37:f0:f6:da:88:c8:a3:97:09:12:
04:c3:00:73:ef:c2:80:61:f0:2f:90:7b:a5:a6:ba:
ee:d1:f8:13:65:b2:ec:b6:b4:65:86:39:6e:17:42:
08:c1:a5:a2:06:5b:d5:6d:e1:d9:9f:ec:cc:e1:4c:
19:ab:5d:b2:78:82:fc:69:af:ef:f2:6c:3f:b7:2e:
9d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FB:27:61:6E:1D:B4:FE:A0:26:6E:19:FF:D4:09:5F:8C:C9:75:30
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/ePsnYW4dtP6gJm4Z_9QJX4zJdTA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
7e:dc:c5:de:fb:50:be:f7:53:a2:2c:02:55:f6:a6:21:14:28:
36:19:4c:23:33:94:f0:7a:c3:04:86:e1:e6:9e:41:ed:a9:6f:
1e:bf:71:f7:75:59:87:7c:3e:a4:eb:10:35:3c:e4:e4:4b:09:
22:91:a5:44:ae:5d:d4:e9:65:ae:db:6d:90:de:06:42:55:25:
49:74:da:3d:90:d5:8b:b7:1f:fc:ec:c0:46:36:a7:c0:a4:5d:
b9:e3:50:94:f5:fb:18:60:2b:f9:fa:59:53:3a:f7:a0:41:e6:
74:95:f0:0f:60:43:ae:79:27:97:8d:67:1a:f6:c3:07:7c:20:
43:8a:3f:96:84:83:15:69:c8:a1:8d:04:95:07:0f:89:f3:c4:
14:bf:2b:8c:fb:bf:14:1e:5e:13:ad:cd:9e:fb:6e:10:93:5a:
6f:0b:ad:a2:9a:62:12:67:d4:4a:41:14:74:81:b1:6d:5c:e1:
ed:8c:80:91:78:d0:7a:56:78:f8:9d:5f:97:04:22:0f:a5:26:
e2:cf:f0:ec:5a:2e:d1:8d:02:4d:05:1b:3c:84:97:23:17:91:
a0:4f:1b:ce:d6:08:08:82:17:bf:48:a7:61:d1:22:74:53:69:
35:5b:f3:22:8c:90:65:1a:7f:64:08:14:94:3c:5b:4b:9a:78:
c3:b1:a4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:35:31 2025 by rpki-client