Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/mDGZVGbedDAPrXzWuusng_oFaVo.roa
File: mDGZVGbedDAPrXzWuusng_oFaVo.roa (raw, json)
Hash identifier: k67/ZKBOenuYNwpEw0VsdJrmBb4P3LanaX9TFq5VliM=
Subject key identifier: 98:31:99:54:66:DE:74:30:0F:AD:7C:D6:BA:EB:27:83:FA:05:69:5A
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 264F
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/mDGZVGbedDAPrXzWuusng_oFaVo.roa
Signing time: Fri 13 Jun 2025 19:39:17 +0000
ROA not before: Fri 13 Jun 2025 19:39:17 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9807 (0x264f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 13 19:39:17 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9831995466DE74300FAD7CD6BAEB2783FA05695A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6e:f5:d1:25:9c:4f:0d:7d:f0:14:ba:93:fb:
c8:0a:65:f2:d0:48:e7:a3:7d:64:d9:fc:4a:04:65:
25:c2:75:38:2d:94:de:3d:75:83:06:6a:c8:b5:6f:
d8:ca:07:58:49:c6:ac:6d:12:d0:aa:e4:38:df:e3:
29:16:4b:77:23:f2:a8:68:94:84:26:6a:03:03:7b:
fa:c3:6c:2e:7c:f5:b3:33:a8:25:4f:c9:21:fc:08:
5c:b9:fb:52:4b:d5:25:ee:24:3a:3d:50:1a:2c:1f:
e2:b3:f8:fe:b4:19:91:ed:14:93:db:27:15:ef:71:
4f:e2:84:58:c8:e6:99:3f:d9:00:88:69:e0:bf:e9:
2a:b7:cf:5f:73:2d:c7:6c:9a:d6:a6:40:10:bf:6c:
1d:e2:32:22:42:4f:3b:5b:c7:41:45:f4:c3:6a:d1:
91:a6:90:06:d8:23:d6:36:e1:1c:60:ce:2e:8b:ff:
5a:35:61:74:a5:bf:6f:92:41:94:c3:3e:b1:bc:f6:
77:9c:5b:d8:40:f4:65:78:05:cf:83:3b:7b:f2:24:
17:43:d7:46:36:2a:ab:85:d9:7e:08:30:6b:f4:01:
13:6c:cd:23:2e:1b:e5:ad:fe:3d:d2:c6:5c:7c:09:
64:09:f4:4a:e3:9d:6c:fb:2b:05:89:de:eb:56:d8:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:31:99:54:66:DE:74:30:0F:AD:7C:D6:BA:EB:27:83:FA:05:69:5A
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/mDGZVGbedDAPrXzWuusng_oFaVo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
77:fc:df:69:e0:65:e0:88:95:cd:e4:a6:4f:85:81:7f:c2:ab:
79:e3:8a:28:77:e1:ce:94:41:5f:b1:51:77:06:8b:c7:de:7c:
0a:fc:09:ae:17:6f:c8:d7:82:02:dc:d1:de:33:57:3a:54:e9:
6b:49:40:c9:a5:7b:bb:f3:bf:d0:91:37:ba:68:1b:6b:bb:6c:
58:d9:83:d2:7b:1d:6b:9e:a7:0d:91:20:44:cd:45:4d:76:18:
01:7e:5d:ed:76:c8:40:ac:46:9f:aa:97:d2:c0:3a:e3:0a:75:
20:ac:eb:e8:26:2c:5f:7e:86:0e:79:f6:d1:06:4a:4b:42:a3:
98:a9:d2:62:dd:5f:1a:1e:60:c6:c5:01:1a:09:58:7b:d1:6c:
31:97:be:69:48:c9:48:87:ef:6a:87:0d:84:43:b6:f0:a5:88:
2e:38:94:b8:69:6a:28:ce:5f:41:cf:db:22:12:1a:a6:3a:68:
1f:14:30:d5:f6:ab:a7:e9:10:ee:77:b5:b1:0c:38:0a:87:32:
c3:a8:65:fd:99:a8:89:28:c4:60:87:4f:d2:8b:1e:f7:12:80:
a9:ba:75:10:91:5f:f5:07:bd:57:25:7a:4b:3f:b2:b1:ed:88:
52:70:43:8f:69:cc:bf:fc:cf:2c:54:f9:06:5f:6e:da:44:b4:
25:b5:0f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:28:42 2025 by rpki-client