Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/oUrQKW0DZgrbeQWv6wMVQUWMsL8.roa
File: oUrQKW0DZgrbeQWv6wMVQUWMsL8.roa (raw, json)
Hash identifier: 00ypa5k7jiT8/7kwmPEbk/RxJcQDhZgd9gdeZhfoL9Q=
Subject key identifier: A1:4A:D0:29:6D:03:66:0A:DB:79:05:AF:EB:03:15:41:45:8C:B0:BF
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1FC1
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/oUrQKW0DZgrbeQWv6wMVQUWMsL8.roa
Signing time: Mon 02 Jun 2025 04:08:35 +0000
ROA not before: Mon 02 Jun 2025 04:08:35 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8129 (0x1fc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 2 04:08:35 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A14AD0296D03660ADB7905AFEB031541458CB0BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:32:0e:5a:9d:f8:3e:53:ac:c7:46:94:fc:
54:76:ba:5e:5f:81:07:00:cc:85:9f:ad:9d:9c:6f:
b2:5b:08:fb:37:bc:de:e8:f6:a9:87:e1:78:01:44:
62:55:e8:c8:a1:bb:c0:3e:4f:d3:01:37:a1:10:a1:
8a:5e:ed:b6:b6:03:26:b5:13:0c:82:d5:89:ef:85:
eb:ac:dc:6e:09:1c:97:91:24:1b:f8:22:f6:1f:92:
7e:33:f0:fc:f8:61:9b:e5:b2:dc:28:63:70:7a:08:
50:dd:06:0a:55:cf:8d:26:6e:21:bd:89:3c:11:5c:
3e:a0:b7:40:2d:30:16:7d:b3:48:94:f1:36:ef:f6:
db:c7:e3:af:57:73:9e:32:71:2c:26:7e:09:c3:89:
83:e2:ed:e3:d7:55:dd:2c:18:3f:58:be:52:b0:53:
ee:eb:dc:c5:16:4a:ed:1a:14:b4:32:cc:66:9f:80:
93:27:9c:5d:be:41:91:00:04:a8:dc:00:57:1a:96:
67:aa:56:0a:17:b3:5d:b9:1d:bb:43:5f:c6:b1:94:
38:2b:d8:bf:05:8c:28:45:f3:74:13:8b:e5:39:25:
ce:a2:19:39:3e:f7:22:1b:78:75:01:d3:c4:c7:c9:
4a:fe:96:88:1d:7b:33:f4:94:24:e6:c4:6b:66:ce:
5e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4A:D0:29:6D:03:66:0A:DB:79:05:AF:EB:03:15:41:45:8C:B0:BF
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/oUrQKW0DZgrbeQWv6wMVQUWMsL8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
a9:b0:37:39:c2:7c:75:4c:2c:a4:5d:57:40:31:6a:63:0c:09:
a9:cf:a9:0a:00:fe:6b:17:4b:b2:fd:e6:fd:3a:cf:f1:0b:a5:
3f:e3:8e:b7:52:d5:52:e3:fe:a1:8f:3b:f1:16:f6:e1:68:e8:
ba:e3:12:6f:b7:77:2b:ec:2b:b9:54:45:c8:d7:93:7b:71:de:
ef:f4:b9:63:74:e5:58:a7:83:f8:c0:27:90:d0:e8:54:ec:94:
c1:1a:13:55:67:1d:dc:15:3a:33:05:a2:8e:ba:2f:54:4b:2c:
1e:e6:d1:1b:5a:a1:17:66:8d:3a:9f:e0:f6:ff:07:d6:0a:ff:
6b:f6:24:88:ff:79:ca:d8:3d:04:8f:ef:84:c5:18:b0:71:c4:
65:2d:e6:c5:23:68:38:d2:f4:b0:28:84:28:89:7c:2f:c8:02:
9a:cb:61:2e:9d:eb:f3:a2:a0:e7:31:83:0d:3d:64:46:bb:64:
07:d8:fe:e9:da:88:37:29:da:e6:94:df:1d:c7:4e:8e:28:1f:
d8:61:ee:45:65:df:3a:89:08:50:42:d2:92:9e:26:db:ce:83:
f7:98:8c:b5:fa:a8:58:e1:a8:de:bd:06:e9:21:2a:53:0c:1d:
53:54:b4:25:11:50:42:52:35:9a:30:3b:c4:79:c1:b8:b8:c0:
00:64:b1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:44:53 2025 by rpki-client