Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/v-8FdzMmFRyIGUN6yGP_jn5QPyE.roa
File: v-8FdzMmFRyIGUN6yGP_jn5QPyE.roa (raw, json)
Hash identifier: 2iYT1jOjIE4nka91mxmAIoQhPkxu34mv1IyL5wl13JQ=
Subject key identifier: BF:EF:05:77:33:26:15:1C:88:19:43:7A:C8:63:FF:8E:7E:50:3F:21
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 222B
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/v-8FdzMmFRyIGUN6yGP_jn5QPyE.roa
Signing time: Fri 06 Jun 2025 11:08:48 +0000
ROA not before: Fri 06 Jun 2025 11:08:48 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8747 (0x222b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 6 11:08:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BFEF05773326151C8819437AC863FF8E7E503F21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:91:ed:ac:d6:b2:23:2e:d3:b7:1c:7e:aa:
ab:d5:d9:c1:41:56:83:4c:fc:bb:94:20:6b:40:c6:
8b:68:b2:4a:e9:5e:38:94:eb:4a:84:fa:b1:95:1f:
19:19:24:3f:62:76:2e:3f:ba:f0:26:a3:af:b0:90:
0e:e9:45:67:49:cb:30:22:14:35:d7:ec:3b:ab:50:
8d:bb:1f:cb:90:d7:a1:6e:8c:f2:10:53:19:b5:cd:
d1:6f:b5:ea:38:eb:bd:c7:3a:23:f7:3c:84:1d:b0:
d8:d7:69:4b:ce:66:c1:3e:90:5d:12:fc:14:48:a4:
65:4a:44:51:36:e7:2a:5f:6a:c8:b5:67:4e:7f:a9:
31:d1:dd:35:9d:51:f2:cd:ac:8d:c8:4d:7d:50:b9:
92:20:97:13:a3:22:52:1f:5b:ee:16:c4:e3:35:7b:
21:43:ea:3a:39:79:38:39:f9:2a:be:7d:47:8e:3a:
f6:ea:0a:77:fd:3d:65:67:65:17:30:ff:d5:e0:54:
7a:87:3a:24:3b:7b:5b:a9:cb:1e:c1:fe:de:83:fa:
fa:a9:43:a1:f1:2d:e1:c0:77:65:8a:8e:20:02:56:
00:0d:99:77:b8:8a:6c:95:53:3b:f3:a3:9f:2d:67:
c2:78:9d:90:1c:76:0f:a3:93:73:c4:a6:a4:0e:43:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EF:05:77:33:26:15:1C:88:19:43:7A:C8:63:FF:8E:7E:50:3F:21
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/v-8FdzMmFRyIGUN6yGP_jn5QPyE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
73:1b:82:bb:e5:89:20:a8:e3:08:ec:9a:7b:bc:b3:5d:04:c6:
ed:29:04:e4:0d:c3:ee:39:97:2b:82:97:66:35:6a:a2:44:b5:
58:ec:87:13:96:10:c0:e3:3f:17:d5:40:22:6f:d4:39:8d:22:
c4:21:02:4c:66:7b:f1:81:7e:08:5a:ff:61:a4:1b:9d:2b:d6:
74:52:f0:f5:d6:09:a6:5e:d0:c0:69:2f:38:91:23:c9:73:db:
36:fb:47:e2:68:02:bc:ed:ae:cb:6f:8c:de:b4:57:8f:54:51:
86:64:e0:16:96:89:00:f0:a1:70:9b:11:d4:d8:81:04:97:b2:
58:70:64:e2:74:65:fd:91:13:33:c1:ec:5d:c3:6b:e5:78:37:
06:09:1c:5a:4d:16:8f:9f:e1:f8:bb:7d:62:76:f4:f1:99:73:
7a:ff:df:b6:ae:ee:5e:08:09:88:70:76:df:5b:9d:94:ae:f5:
3e:e6:fb:17:d3:f0:90:93:51:b6:ad:86:5b:2f:1e:ae:50:e0:
cd:9f:8c:14:ba:db:cb:93:78:4b:cc:cf:e6:e0:24:df:cf:b6:
0c:c2:18:4c:3d:6d:65:88:f8:9e:90:af:4b:df:94:5d:e4:aa:
a9:ed:f4:f1:6a:dc:81:e4:2d:fc:8b:fa:5b:d3:e2:eb:fb:41:
32:f2:1d:8a
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICIiswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MDYx
MTA4NDhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEJGRUYwNTc3MzMyNjE1
MUM4ODE5NDM3QUM4NjNGRjhFN0U1MDNGMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkapHtrNayIy7Ttxx+qqvV2cFBVoNM/LuUIGtAxotoskrpXjiU
60qE+rGVHxkZJD9idi4/uvAmo6+wkA7pRWdJyzAiFDXX7DurUI27H8uQ16FujPIQ
Uxm1zdFvteo4673HOiP3PIQdsNjXaUvOZsE+kF0S/BRIpGVKRFE25ypfasi1Z05/
qTHR3TWdUfLNrI3ITX1QuZIglxOjIlIfW+4WxOM1eyFD6jo5eTg5+Sq+fUeOOvbq
Cnf9PWVnZRcw/9XgVHqHOiQ7e1upyx7B/t6D+vqpQ6HxLeHAd2WKjiACVgANmXe4
imyVUzvzo58tZ8J4nZAcdg+jk3PEpqQOQ+GxAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUv+8FdzMmFRyIGUN6yGP/jn5QPyEwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvdi04RmR6TW1GUnlJ
R1VONnlHUF9qbjVRUHlFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAHMbgrvliSCo4wjsmnu8s10Exu0p
BOQNw+45lyuCl2Y1aqJEtVjshxOWEMDjPxfVQCJv1DmNIsQhAkxme/GBfgha/2Gk
G50r1nRS8PXWCaZe0MBpLziRI8lz2zb7R+JoArztrstvjN60V49UUYZk4BaWiQDw
oXCbEdTYgQSXslhwZOJ0Zf2REzPB7F3Da+V4NwYJHFpNFo+f4fi7fWJ29PGZc3r/
37au7l4ICYhwdt9bnZSu9T7m+xfT8JCTUbathlsvHq5Q4M2fjBS628uTeEvMz+bg
JN/PtgzCGEw9bWWI+J6Qr0vflF3kqqnt9PFq3IHkLfyL+lvT4uv7QTLyHYo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:12:12 2025 by rpki-client