Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/fZSA-vKyuJCaym0BNlWwDyU_pmc.roa
File: fZSA-vKyuJCaym0BNlWwDyU_pmc.roa (raw, json)
Hash identifier: Roi/zo9+v37UM125ebkiUD4lwfpuAKk0ECJBA/1CZpI=
Subject key identifier: 7D:94:80:FA:F2:B2:B8:90:9A:CA:6D:01:36:55:B0:0F:25:3F:A6:67
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2582
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/fZSA-vKyuJCaym0BNlWwDyU_pmc.roa
Signing time: Thu 12 Jun 2025 09:39:12 +0000
ROA not before: Thu 12 Jun 2025 09:39:12 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9602 (0x2582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 12 09:39:12 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7D9480FAF2B2B8909ACA6D013655B00F253FA667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ac:a5:1c:e9:8d:da:02:ca:80:2a:74:99:4d:
af:c7:5e:92:dd:32:da:af:8d:6a:6c:b0:3c:52:68:
13:6c:88:f5:48:27:03:60:eb:de:5e:83:64:c8:dd:
75:41:92:20:3e:50:dd:8e:35:66:87:e9:73:30:05:
9d:a6:ef:42:ed:ee:d0:01:ce:2f:ad:17:c8:74:3d:
f6:10:b7:69:4f:5c:5d:b5:b4:a5:0c:36:02:a1:ef:
5d:47:51:93:5c:aa:4e:9b:54:0c:43:b6:91:89:40:
82:84:bd:d2:45:37:0c:39:9d:25:67:a0:48:3d:20:
98:26:06:71:cd:c5:42:46:dc:9e:5a:bc:fe:dc:33:
07:8c:af:80:51:c5:5a:00:02:a2:2c:29:53:eb:2a:
1c:45:d4:be:ef:43:83:6a:5d:1f:01:0e:af:00:7d:
97:05:ee:e8:cf:9d:ea:b2:64:28:31:13:4d:fa:43:
7e:85:80:85:d6:ba:4a:84:31:a9:aa:08:77:53:89:
27:9f:f6:a9:e4:92:db:34:8f:24:2e:0f:39:58:e3:
20:2b:39:30:08:22:89:47:26:3e:f7:5c:4b:a3:d0:
55:66:e3:2a:42:66:ca:21:75:7d:34:2e:29:5c:99:
24:dc:7e:15:6c:c0:24:19:6e:e1:39:fd:e2:38:f3:
0a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:94:80:FA:F2:B2:B8:90:9A:CA:6D:01:36:55:B0:0F:25:3F:A6:67
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/fZSA-vKyuJCaym0BNlWwDyU_pmc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
88:cf:90:bc:68:e8:f6:bd:5c:54:e0:82:24:17:65:d6:98:1d:
c9:d2:02:20:3c:e3:18:4f:08:03:ea:0d:31:36:4b:6e:c7:21:
ef:cc:ae:82:d4:15:74:d4:41:19:b7:1e:2c:3a:c2:2d:84:14:
b9:e4:b8:22:1f:d1:a1:ce:5f:c3:28:97:23:de:ca:3c:8d:3e:
2a:3c:3e:b0:ab:43:12:28:ce:b6:0c:de:a8:b2:af:a6:19:6b:
d4:00:76:f8:7c:da:d0:06:88:c2:39:57:ee:0e:28:90:ad:c7:
15:fe:b7:86:44:10:5c:59:4b:66:69:6f:35:a0:1f:d4:f8:32:
e6:88:2d:53:21:ff:ef:0b:6b:e9:0f:a1:48:04:da:04:20:0b:
f0:c7:d7:25:cf:11:1f:6d:9a:21:b2:e1:5a:4d:90:4c:4f:d7:
84:95:fc:1c:80:15:eb:fc:bf:a3:fd:d8:4c:b1:85:9b:0f:4d:
17:6c:87:9b:30:7a:68:f4:2d:6e:d6:3c:6a:81:fb:82:a7:ee:
0d:b0:f6:c9:63:26:43:e5:46:04:6c:38:46:4e:85:00:c4:73:
fd:03:84:bd:29:ae:5b:22:85:f2:d2:19:a0:11:df:76:c9:60:
2c:24:4b:31:33:69:91:5c:f6:10:ee:3a:db:71:5a:dd:41:9b:
f9:d4:04:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:28:19 2025 by rpki-client