Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/x7kydKVDN76xvCjkvqMUlzL5Gl8.roa
File: x7kydKVDN76xvCjkvqMUlzL5Gl8.roa (raw, json)
Hash identifier: tgA/miAUuy5M9btSnPefT/mFiqIHgEAr+JaMmLKB4sk=
Subject key identifier: C7:B9:32:74:A5:43:37:BE:B1:BC:28:E4:BE:A3:14:97:32:F9:1A:5F
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2240
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/x7kydKVDN76xvCjkvqMUlzL5Gl8.roa
Signing time: Fri 06 Jun 2025 14:38:48 +0000
ROA not before: Fri 06 Jun 2025 14:38:48 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8768 (0x2240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 6 14:38:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C7B93274A54337BEB1BC28E4BEA3149732F91A5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:6d:28:ae:d0:43:58:61:aa:fa:21:03:b3:
ca:fe:cd:c8:d9:bd:85:fd:5b:91:1f:f4:a2:ea:51:
ee:bd:d8:00:8e:cf:91:12:ff:7a:3a:cd:24:97:5b:
08:30:57:67:2f:45:6f:bb:24:35:cc:f3:ce:62:d3:
04:19:d0:49:ea:f0:2d:06:69:36:04:49:70:3f:7f:
b6:b8:d3:4a:c3:88:91:32:57:f1:b3:3e:de:8c:04:
c5:68:a9:8b:3a:75:5f:e1:ad:47:df:f7:4c:fa:d6:
f9:d6:d3:6f:af:8c:46:fb:7e:34:26:c8:fd:64:09:
c2:25:fb:f1:46:42:41:32:26:1f:64:2f:3f:e8:55:
ad:09:06:5b:34:c0:e6:7a:f2:ca:2a:a0:d0:90:cc:
fd:b8:10:5d:6e:4c:57:5d:88:4a:02:85:74:cc:0c:
34:54:3c:49:18:d3:bd:c8:b4:b4:f8:f7:97:81:43:
81:ff:4d:ea:75:09:14:ee:68:86:1b:5a:c1:1c:a5:
6e:7c:f2:59:c3:33:1d:84:d3:1c:41:da:40:b4:8b:
c5:bf:78:99:6f:99:b2:75:65:79:ab:a8:bd:22:77:
af:32:f8:1d:1a:cc:9a:c6:f2:4c:85:c1:6e:b0:68:
a3:51:f4:f4:cb:e8:e1:10:71:9c:f7:aa:ad:20:c0:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B9:32:74:A5:43:37:BE:B1:BC:28:E4:BE:A3:14:97:32:F9:1A:5F
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/x7kydKVDN76xvCjkvqMUlzL5Gl8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
79:b5:4b:01:f4:1f:fe:33:43:bb:63:fc:34:54:2f:ee:8f:8b:
dc:6f:b5:07:89:f8:de:95:c7:02:41:81:63:e8:e4:ca:47:76:
b3:83:74:d6:5a:83:85:c0:d4:a3:61:06:a5:ce:6f:21:f0:09:
f7:3a:93:7e:c2:86:e2:58:1a:c2:eb:4b:54:f3:05:dd:94:2e:
5b:5e:6e:a5:74:c4:aa:cc:89:83:7d:c9:91:01:a5:ec:01:90:
3a:0e:c0:ad:65:72:94:52:d9:1a:e8:16:08:47:07:f0:33:8b:
86:25:9a:ff:96:03:b7:7c:01:c7:a3:be:60:c4:9a:bb:a0:2f:
6c:ce:01:f2:44:0b:4a:96:8f:4e:1a:d3:e2:67:b8:43:a3:32:
57:e1:b0:a7:93:bc:3b:4d:f0:7e:fd:5e:4b:f2:8c:5f:8e:28:
79:d2:70:1c:e2:6a:f9:ba:1d:54:28:3d:d6:84:35:05:2c:d7:
f0:4b:f6:18:c1:a6:93:20:05:3e:16:97:3c:c7:e6:2d:9a:60:
49:bb:32:ff:f9:92:1d:42:dc:72:51:f5:ca:56:b3:a3:eb:ae:
27:36:3e:38:97:e6:9d:ed:bf:8c:90:02:bc:a1:01:f9:c1:c7:
4a:16:2d:ce:8f:59:76:ec:88:10:9e:06:3d:aa:8e:b3:d4:e7:
ce:67:29:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:58 2025 by rpki-client