Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/rfgJQowqR9upemZHUq9SI_OrAEo.roa
File: rfgJQowqR9upemZHUq9SI_OrAEo.roa (raw, json)
Hash identifier: OVYQ/3eGgEjaYb5bmu0huDzNSwZzU6oJaVftgVPPdXo=
Subject key identifier: AD:F8:09:42:8C:2A:47:DB:A9:7A:66:47:52:AF:52:23:F3:AB:00:4A
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 22D4
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/rfgJQowqR9upemZHUq9SI_OrAEo.roa
Signing time: Sat 07 Jun 2025 15:08:53 +0000
ROA not before: Sat 07 Jun 2025 15:08:53 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8916 (0x22d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 7 15:08:53 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=ADF809428C2A47DBA97A664752AF5223F3AB004A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:3e:f6:ed:0b:8c:76:39:05:6d:62:75:ac:
0e:c6:d1:b1:da:c0:ed:dd:7c:7f:ad:13:ae:3b:3f:
6d:08:c5:ff:97:97:42:73:7d:2d:6a:a7:ed:dd:68:
80:cf:1d:c3:e9:d7:81:62:c5:1c:9f:cd:fd:0c:88:
88:81:83:67:3c:8d:8b:8d:c5:0e:fa:28:66:f3:08:
57:ab:91:9f:ed:05:ac:95:01:a8:8d:c2:87:04:cd:
6b:52:ef:da:5e:cd:85:77:71:12:6b:96:27:06:6f:
d8:94:78:90:3e:85:64:8c:4a:db:23:6a:f8:75:ea:
68:9f:22:54:d0:56:4d:cf:37:8a:72:f7:a2:d6:84:
73:05:e0:01:46:03:3e:fa:d2:c7:ec:aa:8e:e7:0c:
f1:c0:fc:a7:b6:b3:a4:72:90:6a:1f:6e:f7:b0:cf:
aa:9c:94:db:b9:fc:76:6a:a2:d7:37:cd:83:97:93:
25:d0:a6:5b:7e:e2:2c:7f:0c:6b:73:58:cd:bc:6f:
9b:6b:05:1e:14:8a:b8:4c:b6:04:4f:2a:9f:c6:67:
84:a0:b3:cf:42:99:81:a6:6a:84:8a:a2:ce:27:20:
7d:a5:d4:30:20:cd:2c:67:41:6d:10:38:4b:f0:e0:
c2:71:d9:de:c2:21:85:4a:9c:cc:d7:85:59:0b:e0:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F8:09:42:8C:2A:47:DB:A9:7A:66:47:52:AF:52:23:F3:AB:00:4A
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/rfgJQowqR9upemZHUq9SI_OrAEo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
ab:0c:e4:49:41:fd:1e:ba:27:ac:a7:f5:53:d1:c2:a7:1e:04:
93:7e:02:7a:19:e4:9d:4e:fd:54:a3:77:e2:a5:9c:06:1f:e6:
a0:46:30:58:37:4f:73:2d:eb:d9:e3:14:55:e9:86:23:6e:f3:
d7:10:42:e5:35:85:e1:d0:f3:1e:e4:2d:78:19:ab:77:2f:72:
76:12:a2:51:b1:1b:75:14:e9:34:38:c9:19:c8:67:1f:35:3a:
cc:d1:77:bc:56:88:32:fe:52:83:eb:64:d4:11:b4:0e:62:d1:
37:66:c6:77:a4:7b:f9:3a:35:df:8a:16:8b:5e:3f:d0:16:47:
4b:c2:d8:16:18:c2:f8:62:ac:74:b8:f4:c1:38:1e:db:cb:bf:
bb:06:ef:29:ee:8c:7f:35:6a:a0:a3:a8:31:0b:f3:1d:f2:7d:
62:57:81:9e:7f:64:db:32:9f:06:89:9c:0b:21:5a:ca:06:cc:
82:31:e8:09:97:63:84:61:af:9b:ce:4c:e9:aa:ec:ed:78:ff:
1c:10:30:ae:1b:70:d4:8e:b0:dd:9b:5c:75:be:cb:7c:85:c6:
df:6a:fe:b1:89:34:4e:00:31:0c:df:41:96:26:8b:46:69:c8:
4f:e1:bd:e7:a4:8f:0f:8d:ed:33:f4:6d:30:53:6f:10:fd:01:
e7:d8:95:14
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICItQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDcx
NTA4NTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEFERjgwOTQyOEMyQTQ3
REJBOTdBNjY0NzUyQUY1MjIzRjNBQjAwNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3vj727QuMdjkFbWJ1rA7G0bHawO3dfH+tE647P20Ixf+Xl0Jz
fS1qp+3daIDPHcPp14FixRyfzf0MiIiBg2c8jYuNxQ76KGbzCFerkZ/tBayVAaiN
wocEzWtS79pezYV3cRJrlicGb9iUeJA+hWSMStsjavh16mifIlTQVk3PN4py96LW
hHMF4AFGAz760sfsqo7nDPHA/Ke2s6RykGofbvewz6qclNu5/HZqotc3zYOXkyXQ
plt+4ix/DGtzWM28b5trBR4UirhMtgRPKp/GZ4Sgs89CmYGmaoSKos4nIH2l1DAg
zSxnQW0QOEvw4MJx2d7CIYVKnMzXhVkL4FiBAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUrfgJQowqR9upemZHUq9SI/OrAEowHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvcmZnSlFvd3FSOXVw
ZW1aSFVxOVNJX09yQUVvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAKsM5ElB/R66J6yn9VPRwqceBJN+
AnoZ5J1O/VSjd+KlnAYf5qBGMFg3T3Mt69njFFXphiNu89cQQuU1heHQ8x7kLXgZ
q3cvcnYSolGxG3UU6TQ4yRnIZx81OszRd7xWiDL+UoPrZNQRtA5i0Tdmxneke/k6
Nd+KFoteP9AWR0vC2BYYwvhirHS49ME4HtvLv7sG7ynujH81aqCjqDEL8x3yfWJX
gZ5/ZNsynwaJnAshWsoGzIIx6AmXY4Rhr5vOTOmq7O14/xwQMK4bcNSOsN2bXHW+
y3yFxt9q/rGJNE4AMQzfQZYmi0ZpyE/hveekjw+N7TP0bTBTbxD9AefYlRQ=
-----END CERTIFICATE-----
Generated at Sat Jun 21 10:25:21 2025 by rpki-client