Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/oiBt6LkG59kmK-BDheIi2ebqqh0.roa
File: oiBt6LkG59kmK-BDheIi2ebqqh0.roa (raw, json)
Hash identifier: 1hL6eyL9aS+e44II+38IfJ4y5Kd8X0OqzcJoKpX0QeA=
Subject key identifier: A2:20:6D:E8:B9:06:E7:D9:26:2B:E0:43:85:E2:22:D9:E6:EA:AA:1D
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 200A
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/oiBt6LkG59kmK-BDheIi2ebqqh0.roa
Signing time: Mon 02 Jun 2025 16:08:37 +0000
ROA not before: Mon 02 Jun 2025 16:08:37 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8202 (0x200a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 2 16:08:37 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A2206DE8B906E7D9262BE04385E222D9E6EAAA1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:67:d5:08:e7:22:3e:57:74:83:cf:3b:3a:
a2:56:eb:85:b3:00:c9:1b:b5:31:ab:f6:4b:86:f0:
d0:e1:88:87:9c:49:1e:0b:ee:b5:d9:b7:ed:39:c5:
3e:5f:03:b9:c7:ae:c6:bb:9a:0e:6f:dd:52:2e:1c:
55:bb:0f:95:be:a0:d0:60:00:a6:74:8f:a2:a6:33:
7d:fa:b3:d9:b4:bf:6b:24:49:59:13:4c:5a:07:47:
44:f0:79:58:83:07:55:75:27:93:e4:d2:02:ee:5c:
0a:88:be:af:12:71:c2:3e:dd:a7:8c:9e:1a:f6:d3:
84:2f:87:23:e8:6d:d9:8a:b5:8c:ea:ff:24:50:c9:
33:37:a0:60:60:fe:94:42:20:a7:d4:bb:46:41:ed:
95:21:94:86:d5:a4:8f:96:51:19:a5:2a:ec:bf:e7:
5d:dc:2a:63:a7:26:00:84:f4:c4:7e:0f:0f:2c:c3:
a7:52:12:a2:3a:cc:10:da:7d:99:9e:d6:76:32:c4:
03:82:72:0b:4b:fc:17:b3:f1:0b:e4:84:c1:9b:fa:
67:35:51:2d:bb:d8:52:01:6a:3e:77:70:33:30:e9:
ea:69:37:22:c4:e2:55:03:36:04:9a:92:59:49:c3:
e8:60:41:16:f3:50:05:2d:95:40:bb:b8:13:df:99:
fb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:20:6D:E8:B9:06:E7:D9:26:2B:E0:43:85:E2:22:D9:E6:EA:AA:1D
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/oiBt6LkG59kmK-BDheIi2ebqqh0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
16:2a:46:d7:c5:66:86:fd:33:23:4d:3d:8f:37:3b:5f:c3:bf:
25:06:43:5d:a6:08:5a:72:43:f3:f3:10:2a:3f:80:f7:d2:ca:
81:1e:78:20:9f:ee:71:ce:f5:49:33:d6:28:46:4c:0b:90:bf:
f7:fa:ed:6e:d8:b0:38:29:b3:c0:d1:a7:65:42:79:83:f3:11:
75:74:fa:82:6f:f7:1b:9e:1f:9b:39:9a:f1:c5:1b:00:74:67:
c4:ff:c5:8d:9d:14:12:f3:e9:68:b1:9b:d8:ff:29:d7:13:3f:
37:35:4f:f0:ed:26:a7:c5:6d:4e:37:87:23:1a:3f:79:5d:ac:
b6:65:9b:79:3d:a0:de:39:88:68:36:9e:0c:68:8d:e4:11:8b:
bb:48:99:ac:3e:e3:fd:76:3a:1c:68:6b:73:20:30:85:36:ff:
8a:d5:ec:76:6a:39:0d:4e:9e:be:a7:d4:37:75:89:61:31:92:
f2:e2:85:38:5f:14:86:a7:97:d9:c3:63:21:b8:0b:5b:da:f3:
fe:f5:08:e1:33:95:ba:e4:18:da:db:0f:71:c0:7f:68:ce:54:
62:00:41:de:7c:78:6c:1d:04:0c:55:ee:76:81:9d:c3:3a:96:
3e:e4:d1:fd:eb:3e:56:91:16:ac:8c:4e:6d:dc:f8:ca:73:09:
c0:0e:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:02:59 2025 by rpki-client