Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/qpvbQteViKwxuBB8BMXvPZgFeN0.roa
File: qpvbQteViKwxuBB8BMXvPZgFeN0.roa (raw, json)
Hash identifier: oKwD/bAjV+FJQQJtwUECM0cc7WSL86d40nun9htgedA=
Subject key identifier: AA:9B:DB:42:D7:95:88:AC:31:B8:10:7C:04:C5:EF:3D:98:05:78:DD
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2193
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/qpvbQteViKwxuBB8BMXvPZgFeN0.roa
Signing time: Thu 05 Jun 2025 09:38:46 +0000
ROA not before: Thu 05 Jun 2025 09:38:46 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8595 (0x2193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 5 09:38:46 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=AA9BDB42D79588AC31B8107C04C5EF3D980578DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:71:3f:d2:d1:e7:5a:3c:96:df:2d:d0:08:47:
5c:a1:6a:d2:94:c0:57:db:90:b9:f5:bd:85:49:77:
7f:7b:1d:19:3c:94:76:8c:82:5c:58:01:83:7e:b5:
7a:54:e4:99:f0:a4:df:8f:b0:42:f0:8f:fb:a1:19:
b3:ce:40:12:23:3c:b0:54:e1:5e:aa:88:c0:07:ac:
ee:6e:3b:45:55:93:f5:5d:70:8a:d2:37:e1:a4:11:
87:6c:d4:a3:2e:da:41:21:0b:c8:7b:c5:d8:65:75:
c8:f5:05:23:76:91:b0:73:c2:5c:3e:b6:ce:c5:25:
eb:0f:3a:b0:b7:13:14:98:67:4c:28:2d:86:15:1e:
78:43:b8:60:e0:cd:c7:fd:5b:f8:69:56:73:c6:53:
eb:e7:b7:c4:e6:0a:2a:73:12:cf:13:fe:d1:7d:02:
6f:eb:f5:9c:57:0a:4a:30:b6:6a:53:a3:62:f4:da:
01:bf:3d:62:54:33:6e:38:09:53:72:c9:04:5e:95:
06:54:69:42:7b:cc:93:72:65:c1:d5:8e:c2:ef:8f:
a2:03:32:0d:b3:89:55:42:60:70:b5:1e:99:64:79:
82:7e:ef:61:5a:97:6f:16:17:53:d8:16:83:7e:6b:
f0:5f:fd:c7:23:ee:cc:94:b8:88:b9:cd:82:d4:70:
50:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9B:DB:42:D7:95:88:AC:31:B8:10:7C:04:C5:EF:3D:98:05:78:DD
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/qpvbQteViKwxuBB8BMXvPZgFeN0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
91:ac:f9:17:11:2d:0b:6a:36:fa:e4:b6:2a:50:67:d4:97:3e:
fd:b0:a4:d6:b3:29:0d:00:a9:a9:52:36:c3:e8:74:5c:8b:06:
2c:b4:d7:56:59:13:9e:f8:da:70:12:8f:4d:b6:fa:25:dc:ab:
53:e8:4e:8c:75:7f:33:90:93:3b:12:a2:bd:42:6f:54:23:1a:
f5:ab:bd:89:3f:6d:20:18:4c:19:7f:59:a1:67:22:28:f0:a3:
fc:ed:8a:60:5c:9d:a2:b2:6a:1d:b0:e3:e1:3d:a2:0c:0b:d3:
c1:3f:9d:f9:ba:40:fa:fa:77:3e:69:38:1f:98:9c:99:bd:6d:
c1:89:46:80:5d:6f:e4:4f:16:9f:3a:8f:f1:f8:b1:91:ec:d9:
26:43:a1:31:8f:fd:b4:5d:73:b3:34:db:44:f4:34:6d:e5:66:
72:a9:39:a2:0d:64:1c:3a:22:d1:f6:e0:1d:ee:80:6c:5e:aa:
f8:e9:11:ee:86:22:b7:b1:a7:5b:b8:89:8d:1d:80:c9:6a:0d:
2d:3b:dc:cc:50:60:74:43:36:bb:b7:76:db:e8:e5:13:ac:d2:
03:74:b8:3e:35:6e:d9:31:18:b8:d2:70:cc:f3:f1:51:a8:b9:
1c:4e:45:5e:89:be:be:35:96:0d:3c:6e:d4:cd:e5:6a:95:28:
46:16:5f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:37:07 2025 by rpki-client