Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/q4t5wPp99A9oevDn_lvVBAAJiOg.roa
File: q4t5wPp99A9oevDn_lvVBAAJiOg.roa (raw, json)
Hash identifier: S4YIaQvBlg/q0g2h9mtO9k3YGrovDLy+uES7UbxquU0=
Subject key identifier: AB:8B:79:C0:FA:7D:F4:0F:68:7A:F0:E7:FE:5B:D5:04:00:09:88:E8
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1FA6
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/q4t5wPp99A9oevDn_lvVBAAJiOg.roa
Signing time: Sun 01 Jun 2025 23:38:36 +0000
ROA not before: Sun 01 Jun 2025 23:38:36 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8102 (0x1fa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 1 23:38:36 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=AB8B79C0FA7DF40F687AF0E7FE5BD504000988E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:6e:fe:3d:3b:b7:cf:7a:8f:e6:95:98:21:
99:41:19:6d:73:f4:26:bd:13:91:f7:71:83:b3:98:
53:de:8a:26:69:c0:88:77:0e:bd:dd:5b:1d:b0:71:
60:ca:53:08:79:62:04:4a:9c:a7:33:4f:6e:c4:59:
28:c2:6b:a4:52:b5:19:10:30:5b:4f:2c:41:3c:e3:
1c:00:5b:72:1e:c6:13:d0:84:c4:fa:b1:1d:b9:e1:
f7:88:50:c5:f0:a3:3b:77:77:33:0a:a5:4f:2e:0c:
f0:d2:bf:72:21:f7:8d:e0:1a:90:05:c0:5f:fe:a1:
93:1b:f2:67:aa:b1:e8:57:75:95:3d:9d:94:ca:ee:
71:d3:19:0f:a7:02:58:ae:7d:6d:33:13:8f:0e:c1:
c3:86:99:01:92:79:91:36:d5:35:64:1c:b0:1d:c2:
12:6b:21:59:c2:50:3c:e3:98:fb:71:7b:6d:f0:5f:
83:ed:3c:1f:d1:19:8b:eb:eb:be:38:a2:3c:76:2d:
2b:6b:d6:3e:b2:81:d2:4a:f8:5c:37:1d:8f:84:4a:
08:f6:95:e0:98:52:73:b4:39:d4:7a:1e:7c:01:95:
b2:d5:1f:ea:53:93:a6:87:67:9d:fd:78:e8:27:29:
57:43:43:5f:d8:5d:c9:e0:1b:6b:a1:1e:91:b9:e3:
bb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8B:79:C0:FA:7D:F4:0F:68:7A:F0:E7:FE:5B:D5:04:00:09:88:E8
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/q4t5wPp99A9oevDn_lvVBAAJiOg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
27:87:06:a0:04:0a:2b:9d:ba:b4:da:13:0f:92:0c:a0:85:ab:
50:a0:c4:c2:39:2b:be:72:7a:b3:4d:54:2f:07:0d:18:8e:82:
a8:e8:04:f9:d7:56:04:b3:8f:57:c6:4d:b7:9b:d4:e1:28:43:
40:7b:4d:96:d7:fe:ee:81:40:08:c2:5d:d2:fe:b9:d1:f7:ae:
3a:27:12:dc:7c:05:57:53:e0:21:dd:cb:db:6f:51:bd:43:df:
35:83:67:24:a8:a6:a7:95:ae:e8:4e:76:a8:f6:36:24:8b:85:
75:41:9a:62:1d:fe:53:9c:40:65:67:aa:50:2d:28:70:a3:06:
e4:f9:f7:30:51:2e:9a:19:65:fa:e1:8e:ee:c4:0e:d2:7d:da:
6e:51:a0:75:d4:7f:d4:e5:5c:79:e7:db:e3:33:3f:ac:8a:60:
ac:33:d3:8e:13:34:51:c1:34:2f:5c:ea:53:b2:ff:2a:81:e0:
66:2b:cc:cb:4f:e5:b6:45:e0:11:23:f6:bf:c5:41:82:64:4d:
24:1b:cf:8f:ab:9b:52:04:1e:a9:96:8c:86:f6:4a:40:41:da:
4f:b8:ff:e3:fd:66:a5:51:63:20:ba:89:a3:ec:68:14:c5:65:
9a:d5:10:53:7d:22:c1:e7:36:26:f4:dd:f4:3e:3e:fe:97:da:
bd:78:00:99
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICH6YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDEy
MzM4MzZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEFCOEI3OUMwRkE3REY0
MEY2ODdBRjBFN0ZFNUJENTA0MDAwOTg4RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3027+PTu3z3qP5pWYIZlBGW1z9Ca9E5H3cYOzmFPeiiZpwIh3
Dr3dWx2wcWDKUwh5YgRKnKczT27EWSjCa6RStRkQMFtPLEE84xwAW3IexhPQhMT6
sR254feIUMXwozt3dzMKpU8uDPDSv3Ih943gGpAFwF/+oZMb8meqsehXdZU9nZTK
7nHTGQ+nAliufW0zE48OwcOGmQGSeZE21TVkHLAdwhJrIVnCUDzjmPtxe23wX4Pt
PB/RGYvr6744ojx2LStr1j6ygdJK+Fw3HY+ESgj2leCYUnO0OdR6HnwBlbLVH+pT
k6aHZ539eOgnKVdDQ1/YXcngG2uhHpG547vHAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUq4t5wPp99A9oevDn/lvVBAAJiOgwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvcTR0NXdQcDk5QTlv
ZXZEbl9sdlZCQUFKaU9nLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBACeHBqAECiudurTaEw+SDKCFq1Cg
xMI5K75yerNNVC8HDRiOgqjoBPnXVgSzj1fGTbeb1OEoQ0B7TZbX/u6BQAjCXdL+
udH3rjonEtx8BVdT4CHdy9tvUb1D3zWDZySopqeVruhOdqj2NiSLhXVBmmId/lOc
QGVnqlAtKHCjBuT59zBRLpoZZfrhju7EDtJ92m5RoHXUf9TlXHnn2+MzP6yKYKwz
044TNFHBNC9c6lOy/yqB4GYrzMtP5bZF4BEj9r/FQYJkTSQbz4+rm1IEHqmWjIb2
SkBB2k+4/+P9ZqVRYyC6iaPsaBTFZZrVEFN9IsHnNib03fQ+Pv6X2r14AJk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:56:27 2025 by rpki-client