Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/w8mC-CPP0cllLGAhnKb91Yn3jEI.roa
File: w8mC-CPP0cllLGAhnKb91Yn3jEI.roa (raw, json)
Hash identifier: AVfTAL3xht3h5fcP/cnbmjBQWtTVFrxvAm/aIOLUSiA=
Subject key identifier: C3:C9:82:F8:23:CF:D1:C9:65:2C:60:21:9C:A6:FD:D5:89:F7:8C:42
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2222
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/w8mC-CPP0cllLGAhnKb91Yn3jEI.roa
Signing time: Fri 06 Jun 2025 09:38:47 +0000
ROA not before: Fri 06 Jun 2025 09:38:47 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8738 (0x2222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 6 09:38:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C3C982F823CFD1C9652C60219CA6FDD589F78C42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:50:a2:3a:86:10:d4:3b:eb:42:e6:96:34:
4c:23:33:fc:73:52:8a:82:3b:84:9e:65:22:0d:32:
cf:ba:b4:27:9d:41:05:de:d3:ef:26:c1:66:d7:68:
88:33:b3:be:a3:44:61:c1:3d:1c:c8:3e:ab:26:c3:
a8:51:db:c6:ac:f0:56:57:47:b3:c0:e3:57:ef:7c:
d1:d8:e0:eb:28:6b:cf:8c:44:67:80:3e:b7:49:11:
be:b0:4d:12:97:01:31:f2:f0:d5:f8:28:32:8e:f3:
e9:f2:78:df:b8:64:0c:a7:47:94:6e:08:7c:9c:3d:
10:60:f1:e1:83:4b:a7:84:71:42:aa:d3:cd:80:b3:
03:82:78:98:7f:ce:7d:96:bd:2e:52:8b:d2:a8:01:
ec:74:08:43:a6:9a:ac:db:1a:00:55:f8:79:d4:be:
61:2c:dc:d5:ec:5d:f0:84:c6:60:b4:bd:bb:e7:7e:
d9:aa:ad:7f:58:ac:2f:06:ad:a2:60:66:db:a8:41:
c5:2b:ed:4a:27:ad:bf:f1:af:d6:c1:33:f8:33:6d:
e0:35:14:a3:26:03:f7:87:70:19:31:c4:92:b7:94:
97:78:f6:95:57:9e:df:85:43:41:93:36:b7:70:6a:
56:3f:34:ab:b5:b8:74:83:dc:9f:4a:f4:dc:f5:03:
3a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C9:82:F8:23:CF:D1:C9:65:2C:60:21:9C:A6:FD:D5:89:F7:8C:42
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/w8mC-CPP0cllLGAhnKb91Yn3jEI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
3c:7f:0d:88:80:9f:6f:18:d0:36:10:e0:33:d1:13:40:b6:5b:
2e:1c:86:56:e4:02:c4:84:03:ba:ee:ba:0c:da:81:0e:ab:09:
e5:30:a8:08:28:aa:db:34:a4:b1:40:17:99:5d:f1:35:be:a7:
28:d0:dd:01:7b:31:95:b9:4a:99:71:bf:00:4b:e5:53:23:d5:
7c:1f:3b:1f:9d:00:74:f9:6c:2e:06:72:80:c3:f9:ed:2d:b8:
a8:8a:13:6b:70:8f:51:70:03:cf:0d:b7:cd:98:2d:f3:5c:ed:
ef:e2:49:61:c3:dc:ac:e9:b4:92:52:a6:37:07:92:66:5c:49:
49:fd:98:c5:b4:cf:6f:23:eb:92:1d:eb:07:a6:f3:e4:ed:22:
e9:f1:cc:cb:7f:9b:48:06:8e:f5:91:45:4e:1e:2d:57:37:cd:
38:a7:85:93:57:32:63:e9:8a:b9:ac:b0:f7:24:8c:ce:d8:6b:
2d:67:85:1e:64:02:80:be:f6:be:68:fa:2a:fb:57:4b:56:c4:
57:d4:7b:af:66:3b:7e:90:cb:a6:39:4e:29:0d:48:37:79:2c:
80:db:40:16:39:00:8f:f6:a7:13:18:3d:10:80:3b:03:7e:95:
c9:bb:d8:04:8a:c1:c3:61:8d:e5:5e:fa:b8:da:9d:7a:bc:f1:
a0:e2:a1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:28:37 2025 by rpki-client