Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/k_O6DunRKaxW2bJueUOVh2t1CsQ.roa
File: k_O6DunRKaxW2bJueUOVh2t1CsQ.roa (raw, json)
Hash identifier: OUh2zuzjjUhvgN7Tiq2LVooDRJ1ABLFuvWF1Nks8KSM=
Subject key identifier: 93:F3:BA:0E:E9:D1:29:AC:56:D9:B2:6E:79:43:95:87:6B:75:0A:C4
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 24DD
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/k_O6DunRKaxW2bJueUOVh2t1CsQ.roa
Signing time: Wed 11 Jun 2025 06:09:08 +0000
ROA not before: Wed 11 Jun 2025 06:09:08 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9437 (0x24dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 11 06:09:08 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=93F3BA0EE9D129AC56D9B26E794395876B750AC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:2d:b6:43:02:ea:34:ac:01:10:ce:22:14:
7f:7c:61:a1:91:b4:f2:94:6a:47:02:44:42:02:1e:
b0:56:19:0e:f7:48:9d:77:c6:4d:d5:8a:0e:2b:c8:
16:8c:28:e5:a1:ba:b9:ea:6b:38:0c:06:63:72:3c:
bf:c1:ba:16:b3:45:53:fc:e0:e4:a7:4f:65:b1:53:
c2:ba:63:ca:b7:8b:85:6c:d2:8f:3f:2d:1e:48:fb:
a6:6b:59:6c:41:19:5f:f6:47:c0:5a:a9:22:f0:39:
a4:db:a2:ee:ec:89:84:f0:02:f9:3c:8b:57:a5:92:
ec:b5:fa:8e:31:1e:59:ad:94:2e:af:f5:1a:08:60:
17:f2:c0:8c:34:af:08:89:30:8c:1b:c4:19:1f:53:
06:73:ca:2f:64:c5:91:28:4f:95:da:66:62:ea:83:
29:35:3b:06:4e:da:f7:a8:6a:e0:0e:17:64:a5:14:
c8:94:4d:a5:9c:2c:32:1b:39:74:8b:19:0b:d1:93:
b3:03:12:dc:f3:e6:f8:94:8f:b3:d5:79:f3:fb:27:
1f:fe:d1:14:3c:b9:58:a3:53:69:7a:80:fe:cc:95:
93:f7:77:4a:c2:0f:98:91:b6:98:3e:90:5f:3e:25:
b7:d9:d7:cd:61:db:67:71:65:08:69:ac:b7:e0:57:
15:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F3:BA:0E:E9:D1:29:AC:56:D9:B2:6E:79:43:95:87:6B:75:0A:C4
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/k_O6DunRKaxW2bJueUOVh2t1CsQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
9e:0b:53:94:0c:75:49:e1:7b:63:88:39:a1:5a:58:13:b4:e7:
49:49:1d:4b:17:41:8f:f5:20:aa:95:aa:1d:e2:ed:33:ed:a8:
61:a1:30:6b:b8:28:8f:13:dd:27:c8:f3:92:e0:43:a6:4d:ff:
a0:b8:7e:5a:9f:8c:df:ba:1f:d1:f3:59:22:f1:88:ed:4f:76:
cc:9d:69:e0:45:96:dc:56:15:04:69:42:d1:8c:43:6d:61:72:
a8:87:62:7b:e0:4b:9f:3f:78:dc:5c:0d:6d:d5:f5:fc:3a:d1:
20:c3:08:d9:74:27:83:6e:9b:aa:7d:fa:2c:06:4d:98:fc:4c:
c7:59:09:34:5c:ba:9d:f9:84:86:18:0a:f6:f9:b2:c9:6f:4d:
72:ec:44:34:e7:10:85:65:4a:30:97:20:ce:05:6b:1e:6f:af:
f9:d7:ad:60:42:c6:43:fb:02:d2:6f:9f:fe:0e:d8:54:e0:2b:
97:62:5b:4d:fb:03:dd:4d:86:a7:dc:a7:4a:54:8f:93:b3:5c:
bb:0d:1c:45:68:0c:23:1d:e9:43:d3:e3:ca:25:49:b3:2f:ad:
59:09:da:5b:12:20:39:6a:8e:c0:4d:d0:76:bc:41:9b:2e:49:
97:27:6f:bf:b3:5b:85:b7:03:ca:16:8b:c5:f6:32:12:1e:63:
07:f7:23:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 00:01:20 2025 by rpki-client