Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/m2sma2DNXl842jkemzc1FVM9mD8.roa
File: m2sma2DNXl842jkemzc1FVM9mD8.roa (raw, json)
Hash identifier: 9J00xzIOA8XgM+VjKVDWVkEXKumlY/AEkVRymHhLLfc=
Subject key identifier: 9B:6B:26:6B:60:CD:5E:5F:38:DA:39:1E:9B:37:35:15:53:3D:98:3F
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 26CC
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/m2sma2DNXl842jkemzc1FVM9mD8.roa
Signing time: Sat 14 Jun 2025 16:39:18 +0000
ROA not before: Sat 14 Jun 2025 16:39:18 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9932 (0x26cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 14 16:39:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9B6B266B60CD5E5F38DA391E9B373515533D983F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:d4:41:09:f9:ef:7e:f6:7c:0b:3c:f9:a5:
53:7f:f3:ee:61:d3:76:c0:ac:1d:62:43:f3:47:f5:
02:c9:d0:81:df:c5:27:93:d4:70:7f:a2:80:29:9f:
0f:53:0d:01:f4:50:5c:63:da:c7:a2:13:79:02:22:
e6:86:66:27:2f:b9:1f:55:66:2c:f2:d0:27:86:e4:
9a:6e:0b:a6:69:78:7a:3b:26:a7:cc:0e:01:80:c2:
90:12:9a:32:4d:92:71:23:a7:e9:37:d0:81:5f:9e:
b2:89:2e:f2:93:af:8f:30:a2:91:10:ec:2d:f7:fd:
2d:d0:96:02:46:55:89:7e:6c:03:83:f7:f5:6f:5b:
e9:16:64:7b:b8:ef:3e:21:cd:7f:f9:5e:90:e4:8c:
39:a0:35:d1:48:84:7e:00:a3:d3:46:d5:99:af:34:
38:10:5a:b7:1b:57:e0:af:3d:2b:83:88:4a:c4:51:
53:14:d0:3d:cd:9c:c4:24:cb:d8:68:92:7a:58:5a:
be:2f:79:93:cd:a3:61:64:20:60:45:88:36:f9:33:
00:7b:e6:ac:0e:fe:db:c3:b1:08:fc:8d:39:7a:e6:
c8:7e:5f:52:17:cd:29:62:97:3a:38:94:73:a4:ee:
2d:cf:b1:da:ff:b5:4f:9f:32:50:b5:1b:34:a2:42:
36:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6B:26:6B:60:CD:5E:5F:38:DA:39:1E:9B:37:35:15:53:3D:98:3F
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/m2sma2DNXl842jkemzc1FVM9mD8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
57:c2:34:3c:80:ab:1b:49:c2:26:20:5d:18:3e:f2:fa:99:a6:
9b:4c:12:21:d4:12:d5:33:d1:a5:e9:9c:72:20:96:72:23:9e:
05:59:94:f4:1b:2c:74:e9:a5:9a:d8:82:e9:6f:47:ea:68:2b:
be:e4:b8:77:6b:9a:fc:2a:bc:1c:b3:57:b4:b7:9f:92:5f:24:
84:d6:10:ac:99:ed:8f:66:6f:91:04:fa:6b:9c:b7:07:40:26:
dd:84:3f:9b:a2:74:c0:f7:7d:00:d5:db:2d:75:0a:ae:54:81:
82:41:f4:ed:00:b3:b1:4f:66:61:42:45:f7:eb:83:9c:14:85:
ad:b0:72:5c:81:e5:19:70:bf:9a:bf:a5:ed:5e:34:f1:fb:17:
ea:55:7e:9d:87:a0:04:42:3b:ad:95:ad:e7:c1:4c:bd:c8:06:
b5:73:a5:6d:3a:06:b2:be:e2:64:8a:fa:0d:a7:17:d1:09:8a:
7d:17:a6:b7:84:3d:02:8a:3f:70:90:75:81:e6:e7:2a:82:c1:
0b:17:c6:69:3e:dd:b5:6b:81:d4:c0:b1:5d:69:2d:68:5c:b6:
f7:04:8b:e1:a9:99:26:2b:8e:8b:04:1e:ff:10:aa:ef:27:2d:
79:1e:27:1a:a1:05:0f:62:17:60:09:46:e1:cb:d2:71:d3:50:
4e:67:a8:eb
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICJswwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTQx
NjM5MThaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDlCNkIyNjZCNjBDRDVF
NUYzOERBMzkxRTlCMzczNTE1NTMzRDk4M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLi9RBCfnvfvZ8Czz5pVN/8+5h03bArB1iQ/NH9QLJ0IHfxSeT
1HB/ooApnw9TDQH0UFxj2seiE3kCIuaGZicvuR9VZizy0CeG5JpuC6ZpeHo7JqfM
DgGAwpASmjJNknEjp+k30IFfnrKJLvKTr48wopEQ7C33/S3QlgJGVYl+bAOD9/Vv
W+kWZHu47z4hzX/5XpDkjDmgNdFIhH4Ao9NG1ZmvNDgQWrcbV+CvPSuDiErEUVMU
0D3NnMQky9hoknpYWr4veZPNo2FkIGBFiDb5MwB75qwO/tvDsQj8jTl65sh+X1IX
zSlilzo4lHOk7i3Psdr/tU+fMlC1GzSiQjbXAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUm2sma2DNXl842jkemzc1FVM9mD8wHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvbTJzbWEyRE5YbDg0
MmprZW16YzFGVk05bUQ4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAFfCNDyAqxtJwiYgXRg+8vqZpptM
EiHUEtUz0aXpnHIglnIjngVZlPQbLHTppZrYgulvR+poK77kuHdrmvwqvByzV7S3
n5JfJITWEKyZ7Y9mb5EE+muctwdAJt2EP5uidMD3fQDV2y11Cq5UgYJB9O0As7FP
ZmFCRffrg5wUha2wclyB5Rlwv5q/pe1eNPH7F+pVfp2HoARCO62VrefBTL3IBrVz
pW06BrK+4mSK+g2nF9EJin0XpreEPQKKP3CQdYHm5yqCwQsXxmk+3bVrgdTAsV1p
LWhctvcEi+GpmSYrjosEHv8Qqu8nLXkeJxqhBQ9iF2AJRuHL0nHTUE5nqOs=
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:11:01 2025 by rpki-client