Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/q0JC0vqrT9SFOkustEDgxUiZ4hI.roa
File: q0JC0vqrT9SFOkustEDgxUiZ4hI.roa (raw, json)
Hash identifier: meZRbZI92axivO0H3TSlg/hgG2CDFzvXZ6XXcT2RU8I=
Subject key identifier: AB:42:42:D2:FA:AB:4F:D4:85:3A:4B:AC:B4:40:E0:C5:48:99:E2:12
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2421
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/q0JC0vqrT9SFOkustEDgxUiZ4hI.roa
Signing time: Mon 09 Jun 2025 22:39:02 +0000
ROA not before: Mon 09 Jun 2025 22:39:02 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9249 (0x2421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 9 22:39:02 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=AB4242D2FAAB4FD4853A4BACB440E0C54899E212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:ac:9f:89:d7:4f:fb:b2:a6:32:e7:bd:89:
20:1d:30:ca:c3:1d:49:24:07:cc:da:a1:45:cf:fa:
ff:4a:21:56:8f:61:58:db:67:0e:30:68:44:e3:e4:
c6:9a:9f:1a:2f:1b:a8:48:6a:e4:14:8f:1a:4e:92:
46:d0:ac:b7:bd:87:26:fa:1f:60:0d:63:5b:d9:c0:
53:da:6e:b7:79:3c:5a:50:e9:b2:f3:63:f6:47:2d:
12:36:3b:e5:68:06:39:39:57:b1:a3:17:23:1d:30:
0a:36:3e:fb:96:d9:a0:a0:32:5e:59:68:9a:f9:02:
0d:14:c7:06:d2:cb:cb:01:d7:10:dd:87:9d:fa:74:
9f:54:c7:ee:68:27:26:7a:f5:35:79:52:5d:85:16:
36:58:5f:68:0b:49:bb:7c:6e:83:57:0b:8a:78:ac:
ad:dd:a4:e8:09:58:9a:0a:c7:f6:c5:22:ce:e5:7a:
86:d6:71:3a:c2:10:36:bd:7b:22:a0:fe:13:e9:2b:
85:71:1f:a8:8e:95:26:f7:0c:b1:07:43:5f:1d:7c:
3a:36:28:ce:c6:3c:ef:92:e8:fb:53:35:a9:68:7d:
2c:d1:95:c9:a6:8c:e7:de:26:44:c2:20:57:f1:d9:
40:10:37:6f:bf:eb:5d:7f:06:c0:31:80:e1:54:81:
fa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:42:42:D2:FA:AB:4F:D4:85:3A:4B:AC:B4:40:E0:C5:48:99:E2:12
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/q0JC0vqrT9SFOkustEDgxUiZ4hI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
0a:0b:96:73:ec:f8:ca:04:51:50:08:bc:d7:47:e6:1f:6b:d8:
5b:8e:85:8b:01:78:69:df:d1:88:6d:aa:91:b3:64:6b:db:e6:
69:34:71:4f:a4:d4:95:bd:54:69:43:57:81:32:a6:ff:29:b9:
ee:3f:e5:bf:bc:66:59:5a:8b:e1:60:ff:2f:23:a6:95:e2:a4:
da:e6:99:be:a6:f5:af:b3:19:c4:5a:86:76:74:66:27:7b:ad:
5a:44:f9:41:93:d4:61:45:3c:af:e1:33:5a:86:3a:74:fe:96:
53:00:a4:47:86:04:86:10:ab:4d:59:39:33:0d:42:6c:cb:78:
7a:cc:48:78:30:8f:70:e9:29:a0:a6:db:83:0a:8b:5a:87:29:
b1:da:95:f2:b6:68:93:88:54:79:36:60:05:85:60:72:6d:58:
c0:7c:b6:79:8e:6e:73:6a:2f:7c:27:7b:42:ec:df:03:36:22:
0c:e8:99:79:c4:25:87:e3:6c:23:a0:19:e8:6d:b1:19:7b:55:
95:f6:ca:5a:c9:cc:af:ad:f1:cd:fc:97:51:d8:29:4b:56:76:
20:b4:2e:18:94:31:f3:55:90:85:47:95:6f:bc:8b:1b:e6:3f:
11:16:28:5c:4e:67:b5:56:c5:0a:f8:7f:af:eb:c9:c3:15:82:
56:5b:2f:5f
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICJCEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDky
MjM5MDJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEFCNDI0MkQyRkFBQjRG
RDQ4NTNBNEJBQ0I0NDBFMEM1NDg5OUUyMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1OayfiddP+7KmMue9iSAdMMrDHUkkB8zaoUXP+v9KIVaPYVjb
Zw4waETj5MaanxovG6hIauQUjxpOkkbQrLe9hyb6H2ANY1vZwFPabrd5PFpQ6bLz
Y/ZHLRI2O+VoBjk5V7GjFyMdMAo2PvuW2aCgMl5ZaJr5Ag0UxwbSy8sB1xDdh536
dJ9Ux+5oJyZ69TV5Ul2FFjZYX2gLSbt8boNXC4p4rK3dpOgJWJoKx/bFIs7leobW
cTrCEDa9eyKg/hPpK4VxH6iOlSb3DLEHQ18dfDo2KM7GPO+S6PtTNalofSzRlcmm
jOfeJkTCIFfx2UAQN2+/611/BsAxgOFUgfohAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUq0JC0vqrT9SFOkustEDgxUiZ4hIwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvcTBKQzB2cXJUOVNG
T2t1c3RFRGd4VWlaNGhJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAAoLlnPs+MoEUVAIvNdH5h9r2FuO
hYsBeGnf0YhtqpGzZGvb5mk0cU+k1JW9VGlDV4Eypv8pue4/5b+8Zllai+Fg/y8j
ppXipNrmmb6m9a+zGcRahnZ0Zid7rVpE+UGT1GFFPK/hM1qGOnT+llMApEeGBIYQ
q01ZOTMNQmzLeHrMSHgwj3DpKaCm24MKi1qHKbHalfK2aJOIVHk2YAWFYHJtWMB8
tnmObnNqL3wne0Ls3wM2IgzomXnEJYfjbCOgGehtsRl7VZX2ylrJzK+t8c38l1HY
KUtWdiC0LhiUMfNVkIVHlW+8ixvmPxEWKFxOZ7VWxQr4f6/rycMVglZbL18=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:08 2025 by rpki-client