Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/hcWwsNKPH3aZCkV_qHfG9ZzWqSM.roa
File: hcWwsNKPH3aZCkV_qHfG9ZzWqSM.roa (raw, json)
Hash identifier: RS+g0XJXWlkmXlfE/YiNVAgUOm5ObRd/l7C0eLzdu4Q=
Subject key identifier: 85:C5:B0:B0:D2:8F:1F:76:99:0A:45:7F:A8:77:C6:F5:9C:D6:A9:23
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 21EC
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/hcWwsNKPH3aZCkV_qHfG9ZzWqSM.roa
Signing time: Fri 06 Jun 2025 00:38:47 +0000
ROA not before: Fri 06 Jun 2025 00:38:47 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8684 (0x21ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 6 00:38:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=85C5B0B0D28F1F76990A457FA877C6F59CD6A923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:bc:2a:f7:a4:1c:1b:71:ec:a0:06:b6:06:
60:b3:2a:a7:5f:fc:87:c8:df:4c:8e:c1:2f:f4:f1:
de:70:af:26:fc:e3:62:a6:c8:61:d1:bc:7e:0d:0f:
9b:f2:cc:3b:a5:5b:f1:9f:6b:4b:77:9c:5c:29:a7:
54:8a:f1:76:57:7e:fe:13:9c:15:96:2d:63:dc:44:
50:e9:b8:67:f3:16:88:00:51:d4:ed:e4:e4:ed:9f:
74:f5:ec:0e:76:63:51:d1:e9:34:16:10:53:6f:02:
eb:52:0d:d8:31:33:fe:b0:6d:10:1b:cf:4d:13:9f:
e0:95:da:72:8a:a9:38:b8:fa:71:7c:79:e2:ac:e3:
45:af:a7:62:33:62:84:ca:37:46:04:9d:1d:a4:d9:
68:ad:e0:af:00:50:ef:0f:ff:8e:28:8f:35:6c:c5:
fb:34:ef:7e:12:e9:1c:87:5a:0d:23:32:d4:fc:71:
fe:83:71:2a:74:62:d1:20:bd:69:fd:48:6c:d5:e8:
72:71:c3:f8:c9:90:6b:72:f0:cb:12:23:4d:4c:70:
ec:4e:66:c9:77:93:ce:b9:2b:3f:91:f1:c7:9c:80:
46:f1:c1:6f:ec:f5:fb:30:d4:4f:86:c3:99:f5:3d:
3d:fe:7e:d1:90:e5:aa:6d:72:3d:c5:8b:62:35:4c:
ee:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C5:B0:B0:D2:8F:1F:76:99:0A:45:7F:A8:77:C6:F5:9C:D6:A9:23
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/hcWwsNKPH3aZCkV_qHfG9ZzWqSM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
a1:e4:06:74:ed:41:45:76:83:11:6e:0e:81:18:08:ab:cd:e4:
97:3c:90:fc:2e:22:8f:6b:7e:f9:57:0b:46:19:c8:79:ca:b1:
65:db:b6:26:dc:bf:b3:4e:f3:84:6f:5e:60:86:08:1e:ec:f0:
48:f9:64:71:fd:cd:a7:c7:b6:13:12:13:65:3c:fb:c0:99:e8:
85:ee:b7:5a:82:fc:98:e0:bc:e3:04:10:5d:81:ad:fa:26:be:
5c:8b:08:76:f5:61:94:3a:d9:07:1a:3e:bd:40:1c:04:b0:0a:
49:6e:81:79:4d:74:3e:bf:fb:0c:f2:57:59:14:97:71:a6:e5:
60:8b:c3:ed:32:47:4f:89:d2:d1:e4:3b:72:96:3a:a4:1f:a8:
f4:66:a4:67:f9:86:ee:cd:7b:27:cd:a1:70:2d:f9:9e:8a:c4:
69:38:12:7a:41:7c:79:a4:fd:1e:35:a1:62:25:ff:50:ea:27:
9b:4d:7e:9c:09:b4:ed:24:3d:6a:91:12:85:c5:4b:78:76:3e:
d3:19:7a:ba:08:5b:fb:c6:97:7e:9a:c1:4c:54:b8:4a:56:c9:
6b:f5:b7:8e:73:d4:96:e1:9e:3d:f2:2c:d5:1d:32:64:9a:8f:
a4:c9:c2:31:f8:1c:d0:07:51:9e:af:c9:5a:37:37:5e:36:cf:
e5:16:36:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:10:38 2025 by rpki-client