Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/w1rVW7SaMHMc4DfaPk44EyDfcR8.roa
File: w1rVW7SaMHMc4DfaPk44EyDfcR8.roa (raw, json)
Hash identifier: jAEpzor4I0VuJLg4qjd0Ca3IVXe9W+JOO1xAq2fU2cI=
Subject key identifier: C3:5A:D5:5B:B4:9A:30:73:1C:E0:37:DA:3E:4E:38:13:20:DF:71:1F
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2645
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/w1rVW7SaMHMc4DfaPk44EyDfcR8.roa
Signing time: Fri 13 Jun 2025 18:09:15 +0000
ROA not before: Fri 13 Jun 2025 18:09:15 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9797 (0x2645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 13 18:09:15 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C35AD55BB49A30731CE037DA3E4E381320DF711F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c2:dd:e6:77:ef:9e:50:a1:5d:f0:c3:98:07:
77:a8:8e:1e:50:10:1d:0f:77:23:ee:f2:3e:cc:ba:
fc:45:67:b8:83:ef:66:1c:88:9d:24:4a:c5:e3:e7:
26:49:4b:44:cc:23:45:0f:a2:40:48:ed:e7:2d:6d:
c5:2c:63:2c:3a:2a:23:83:bb:da:b4:d6:8d:d0:75:
85:c2:d2:6c:b7:0b:90:11:76:51:4d:1f:d9:c1:92:
00:d3:a9:5c:ec:e5:a9:8c:3e:73:7b:59:a7:81:d4:
47:8f:45:21:2c:ec:48:07:75:23:b7:79:24:69:4d:
bd:02:b6:84:bc:6a:93:4f:40:62:7f:6f:a1:e4:b9:
c4:f3:b6:b8:8c:b1:a1:ed:88:b7:ad:e0:6d:14:73:
80:7a:b9:6a:63:8e:3e:70:1e:5f:5d:27:5f:52:c1:
86:dc:15:04:13:14:f1:49:64:54:34:b9:fe:32:43:
51:e1:55:bd:03:99:67:7f:11:d1:37:70:09:c5:95:
44:df:dd:d2:ff:77:4f:c7:cf:95:13:d6:03:02:95:
06:80:2c:97:7c:89:30:72:67:87:2b:ba:1d:5c:ac:
83:f9:62:71:1a:6d:23:3b:19:c5:44:21:28:56:4f:
67:14:6b:8d:1d:a3:db:43:ff:aa:7f:7c:f5:6c:be:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5A:D5:5B:B4:9A:30:73:1C:E0:37:DA:3E:4E:38:13:20:DF:71:1F
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/w1rVW7SaMHMc4DfaPk44EyDfcR8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
03:7e:4f:1b:cf:af:d8:fb:af:60:5d:e6:b0:e7:ec:79:a9:ea:
f0:88:ae:f1:b0:c5:75:21:5f:ac:a8:8f:1b:20:2c:a5:3d:d1:
f9:5f:8f:ba:af:9c:d4:3e:76:58:af:8c:a2:a7:24:90:70:b3:
21:f4:2e:f1:2c:66:85:f1:db:ed:da:4c:6c:15:55:02:8b:07:
47:0e:3d:a8:3a:a8:bb:3e:81:31:95:06:3a:f4:a6:23:b7:29:
d4:42:05:23:19:07:a4:f8:22:25:01:66:5a:11:5d:4d:ca:a5:
c5:d9:53:fb:9a:c4:ef:e3:7f:43:96:4e:0d:a7:b0:26:a6:9e:
bb:ea:90:a0:fb:81:ff:98:91:11:b9:e6:20:58:99:63:8b:22:
d2:18:c4:6e:f2:aa:8d:e9:36:e0:7a:b8:73:2b:9c:b8:9b:f2:
03:f4:34:52:f6:ae:ea:21:17:a3:0e:9c:5d:ee:88:05:c7:0e:
9b:15:4a:13:8d:e2:03:3f:c2:56:d7:c5:37:d9:4c:5a:cb:44:
ba:8f:35:06:08:a0:92:3e:82:00:86:26:dd:78:46:ec:90:73:
f6:a3:3a:c8:12:92:de:dc:7c:bf:96:42:a9:7d:31:2e:65:ca:
ff:ca:3b:2b:9a:15:38:b4:fd:02:15:59:3a:4c:04:cc:c0:af:
ab:83:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:27:31 2025 by rpki-client