Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/xEcI41R6tn-aUPnEY3x0Ns_WT1E.roa
File: xEcI41R6tn-aUPnEY3x0Ns_WT1E.roa (raw, json)
Hash identifier: FoV6Kv6tdgB75kSm2gvNi/eD30sfGQcWsJpRezVj0nA=
Subject key identifier: C4:47:08:E3:54:7A:B6:7F:9A:50:F9:C4:63:7C:74:36:CF:D6:4F:51
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2132
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/xEcI41R6tn-aUPnEY3x0Ns_WT1E.roa
Signing time: Wed 04 Jun 2025 17:38:42 +0000
ROA not before: Wed 04 Jun 2025 17:38:42 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8498 (0x2132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 4 17:38:42 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C44708E3547AB67F9A50F9C4637C7436CFD64F51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:65:9b:1c:67:5d:94:43:5a:16:c9:57:83:
64:44:59:24:38:b0:89:90:17:8b:23:e9:30:f6:45:
35:43:1b:8d:8a:d9:ce:6c:77:80:be:7a:3d:d8:a5:
5a:97:a6:83:01:99:f4:01:82:d5:bd:a1:f7:32:0d:
10:78:c0:e7:26:36:3e:fd:af:d7:69:dd:c2:64:55:
f1:93:16:6b:6e:5d:aa:9f:e5:79:5a:f0:36:37:6f:
41:51:a4:67:21:5c:02:2f:15:ff:17:f7:0b:57:25:
78:95:31:5e:17:59:0a:eb:4e:98:25:69:0a:b4:13:
97:e2:72:85:a9:9c:72:8c:2d:6f:ea:01:06:85:a2:
38:0f:98:53:fd:59:c0:ba:6f:a8:e2:21:09:38:13:
fe:08:88:65:d2:23:f3:8b:49:22:42:17:7a:2d:b5:
34:21:15:1d:73:c7:3e:1b:50:4e:1a:c9:8e:f5:3c:
e5:ac:33:86:82:d9:44:1e:a7:37:f1:3a:86:35:17:
b1:95:dc:82:d5:c3:22:5d:8d:62:d6:31:66:d9:96:
a0:34:f8:50:15:6c:7c:84:7f:a6:6f:cf:00:ce:e0:
3d:d0:70:5e:84:13:3f:08:cd:78:b2:91:c5:ea:ee:
6c:c5:42:3d:8a:31:e5:47:5e:b7:0b:f9:e6:94:02:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:47:08:E3:54:7A:B6:7F:9A:50:F9:C4:63:7C:74:36:CF:D6:4F:51
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/xEcI41R6tn-aUPnEY3x0Ns_WT1E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
37:86:ed:be:1b:e3:56:87:28:36:99:d1:ed:d6:3d:c0:1f:e2:
a1:da:77:15:e6:b1:49:c7:0a:19:55:ed:84:78:27:9a:01:6e:
75:a7:b4:25:09:f2:e7:9d:41:a1:d3:c2:15:62:7b:b9:e5:83:
ef:93:0a:8c:2a:77:74:84:f1:bf:ee:12:8f:a6:38:19:c3:58:
08:45:b9:dd:ba:b4:d5:db:d4:22:46:41:a1:6f:ea:29:ac:d3:
5b:9b:cc:f6:f5:7b:d9:ce:28:03:72:1a:af:1c:a2:84:fe:87:
d6:fe:b8:1e:6e:4a:c0:25:17:11:56:48:2b:b9:68:80:bc:23:
60:e7:5f:7a:62:91:40:70:e0:fc:6f:a6:0a:86:8a:50:0e:36:
d2:4c:3f:4f:e5:fb:b3:b5:55:fc:f6:24:3f:83:80:f3:3e:ab:
09:e3:fd:a8:2f:1e:73:fc:76:a0:51:ce:9d:20:6c:f6:c9:0b:
a5:8f:e1:ed:8f:11:f9:de:b3:ce:48:a0:fd:a0:e0:74:0d:ee:
c0:4a:f1:e4:fe:10:7f:b7:32:f5:96:b1:a4:f2:d0:1f:a5:76:
55:dd:1f:eb:d1:fc:52:aa:88:91:8d:6b:3a:48:91:6e:63:ee:
12:71:dd:f1:f4:a0:e7:0a:b1:80:56:fd:0d:4d:e1:93:e6:40:
0e:90:f2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:14:38 2025 by rpki-client