Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/mSSzJvEMjn-q7KKgB0Zgen0KPds.roa
File: mSSzJvEMjn-q7KKgB0Zgen0KPds.roa (raw, json)
Hash identifier: 1tGdQsa6TEUnKTOhBCuGUsHtoWwdN4z0jQaB3LPAjGU=
Subject key identifier: 99:24:B3:26:F1:0C:8E:7F:AA:EC:A2:A0:07:46:60:7A:7D:0A:3D:DB
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1C6A
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/mSSzJvEMjn-q7KKgB0Zgen0KPds.roa
Signing time: Tue 27 May 2025 05:38:08 +0000
ROA not before: Tue 27 May 2025 05:38:08 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7274 (0x1c6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: May 27 05:38:08 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9924B326F10C8E7FAAECA2A00746607A7D0A3DDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:03:34:43:ec:15:10:20:9b:b6:5e:25:27:da:
62:48:2a:df:95:aa:37:52:1b:6b:ec:ce:59:81:1c:
fc:4e:db:30:e6:44:9e:06:23:cd:55:14:88:59:b9:
70:ad:b5:ee:f2:65:48:3a:73:18:ad:e3:b1:6f:6a:
cb:da:57:44:c8:09:6c:76:11:4b:d1:27:2c:0c:a7:
de:65:07:c1:1b:2d:3a:b9:04:49:24:9a:0e:60:33:
6e:11:0d:26:bd:1a:b0:5c:27:68:48:df:0b:af:a6:
d7:fd:e3:9e:41:30:f2:8d:94:14:24:1d:7a:52:34:
28:5d:cf:f4:95:e7:c3:74:dc:90:a4:76:6e:94:f3:
98:42:2d:dd:33:9c:ab:da:5e:f5:9d:d8:cf:13:c7:
41:e3:2c:86:9c:0c:67:0b:35:8b:f1:47:68:c9:34:
26:bf:f4:dd:f3:37:00:7d:af:28:13:38:88:99:55:
a8:33:f3:90:92:e2:ca:43:23:c4:81:c0:9c:e4:12:
83:73:e9:27:69:bb:93:6f:fc:41:ea:aa:a6:67:df:
cb:52:d4:59:34:75:6e:ae:06:07:29:a0:ed:60:1a:
db:df:41:69:66:3c:8c:8b:29:a7:d7:c9:7f:cb:3a:
c3:c0:ed:99:2d:cb:a6:1a:5a:6d:63:e4:82:f1:42:
e0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:24:B3:26:F1:0C:8E:7F:AA:EC:A2:A0:07:46:60:7A:7D:0A:3D:DB
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/mSSzJvEMjn-q7KKgB0Zgen0KPds.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
34:33:97:3e:e0:59:72:e0:4d:1c:af:c7:77:40:ba:52:e1:11:
89:98:8d:51:11:44:92:81:27:05:69:46:be:d2:51:db:e4:e2:
83:6d:b0:20:8d:06:9a:cc:d5:41:00:0d:22:60:f5:aa:ca:51:
89:e3:23:df:db:3f:78:88:c3:9d:25:10:48:58:9a:0e:7b:bf:
64:63:3b:33:dc:8c:76:dd:f4:55:99:7d:7c:89:3a:9b:91:60:
b2:25:cb:8e:d5:97:1b:d1:31:14:26:21:c9:e9:1e:df:65:85:
c4:cf:ab:5a:91:22:9c:c7:e7:ee:38:51:ee:e3:14:e0:d7:39:
85:d7:81:0c:5e:bb:e9:59:86:64:57:86:1e:9c:37:cb:79:3a:
7e:00:20:6d:37:fa:ce:cd:0c:e4:71:11:fd:d7:63:eb:0f:21:
b5:84:b3:49:6f:6b:9b:69:f2:0d:12:64:34:cf:02:be:38:b4:
a4:0f:30:55:42:5f:bd:98:60:82:09:90:81:3e:6c:47:74:ea:
54:12:b3:21:9c:77:25:d0:09:60:a4:75:2d:2b:a8:c4:bb:fe:
45:ac:a7:ce:2b:42:33:bd:b3:04:96:b9:2f:f8:00:64:70:e9:
ac:86:a7:61:af:b2:6f:e3:68:3d:8e:f2:e0:e7:49:59:b8:ff:
70:15:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:55:07 2025 by rpki-client