Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/yEmiVyb2KuQyJpb_LC_tGts_sTM.roa
File: yEmiVyb2KuQyJpb_LC_tGts_sTM.roa (raw, json)
Hash identifier: x6+OvWMopOjj3UHW3hJKQScak2x5W8tktieP6mNzguY=
Subject key identifier: C8:49:A2:57:26:F6:2A:E4:32:26:96:FF:2C:2F:ED:1A:DB:3F:B1:33
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 26E4
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/yEmiVyb2KuQyJpb_LC_tGts_sTM.roa
Signing time: Sat 14 Jun 2025 20:39:19 +0000
ROA not before: Sat 14 Jun 2025 20:39:19 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9956 (0x26e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 14 20:39:19 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C849A25726F62AE4322696FF2C2FED1ADB3FB133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:f4:f7:59:2c:a4:f1:50:ed:ee:d5:0c:f8:
dd:a0:cc:90:e0:71:d6:bd:e3:d3:7f:a8:63:19:5c:
37:7e:98:2a:15:a3:99:2a:2c:68:4d:02:ca:1d:aa:
7d:b0:0d:64:77:bf:7a:83:a4:28:d1:57:11:56:46:
6a:a0:93:57:a7:23:c6:2a:90:0c:b3:70:6a:95:38:
d7:df:64:c6:96:2d:2a:64:49:5f:3e:03:a8:bb:36:
7d:9d:2c:01:53:4b:df:63:d5:8d:cf:1b:4d:3c:76:
e0:c3:28:71:c9:e4:63:a3:10:01:b8:13:bb:20:46:
6f:89:3a:ac:52:f7:c3:50:3f:96:b5:4e:39:2a:bc:
c7:80:65:c6:2e:cd:a5:34:c6:59:18:ec:8d:e5:fc:
13:23:00:02:ed:c5:d0:02:9a:47:cf:ac:2d:4d:9f:
34:f5:26:69:86:71:dc:b4:83:fb:56:5f:e4:c9:9d:
13:74:cb:ef:8c:bd:16:31:1e:89:a7:e3:d1:1d:d9:
2d:5a:18:ae:73:05:6a:90:cd:4b:bc:b7:e9:75:fd:
44:c3:bb:40:3c:8a:ec:d7:52:5a:f8:dd:03:da:fb:
15:dd:84:26:d7:d6:f6:3d:3c:fc:05:e4:d9:03:8a:
b5:69:a0:55:0c:8e:f4:52:c0:f3:fa:aa:a7:a5:0c:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:49:A2:57:26:F6:2A:E4:32:26:96:FF:2C:2F:ED:1A:DB:3F:B1:33
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/yEmiVyb2KuQyJpb_LC_tGts_sTM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
46:71:f3:fd:e0:7f:6d:13:3d:2c:b0:71:85:ea:f1:e6:d2:0d:
f3:05:ef:dc:1b:9e:c5:04:22:3c:43:84:76:fb:6d:3b:c2:dc:
ad:11:33:59:92:2a:08:5d:33:4e:34:5d:2c:e0:3f:60:0f:e5:
03:34:4a:d2:9b:38:b3:33:d8:36:54:d1:2e:0e:97:c9:ce:1a:
c0:80:a8:a3:96:79:b1:62:d8:4a:54:1f:62:f6:54:39:ec:52:
d0:f5:81:d6:24:a9:b6:27:90:55:8b:fa:ad:8b:25:5a:1d:ec:
4c:9a:bd:96:c4:da:fc:ff:23:92:3e:13:4a:3e:ed:55:50:26:
24:7d:86:48:52:d4:81:34:ef:19:76:60:7c:e6:b1:e9:5b:8d:
7f:0f:6f:cc:77:ea:3f:04:da:60:43:ae:52:2f:ac:95:20:9f:
7e:54:ae:e9:23:0b:c1:19:b0:67:99:95:4d:2a:cc:53:2e:5f:
38:58:b2:5e:63:7b:16:2c:d7:15:a0:a3:2a:b7:ff:1b:de:85:
cd:e8:36:52:67:23:1d:56:8b:f9:84:83:ef:95:62:02:49:16:
fd:c2:aa:98:4c:c4:bd:2c:b2:cf:bb:7a:d7:b6:09:75:fb:0a:
c3:3c:f8:f3:a5:6e:65:05:6f:73:17:5b:b2:9d:9f:a1:6f:c3:
be:6f:63:cc
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICJuQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA2MTQy
MDM5MTlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM4NDlBMjU3MjZGNjJB
RTQzMjI2OTZGRjJDMkZFRDFBREIzRkIxMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLjvT3WSyk8VDt7tUM+N2gzJDgcda949N/qGMZXDd+mCoVo5kq
LGhNAsodqn2wDWR3v3qDpCjRVxFWRmqgk1enI8YqkAyzcGqVONffZMaWLSpkSV8+
A6i7Nn2dLAFTS99j1Y3PG008duDDKHHJ5GOjEAG4E7sgRm+JOqxS98NQP5a1Tjkq
vMeAZcYuzaU0xlkY7I3l/BMjAALtxdACmkfPrC1NnzT1JmmGcdy0g/tWX+TJnRN0
y++MvRYxHomn49Ed2S1aGK5zBWqQzUu8t+l1/UTDu0A8iuzXUlr43QPa+xXdhCbX
1vY9PPwF5NkDirVpoFUMjvRSwPP6qqelDBIRAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUyEmiVyb2KuQyJpb/LC/tGts/sTMwHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR
1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgveUVtaVZ5YjJLdVF5
SnBiX0xDX3RHdHNfc1RNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAEZx8/3gf20TPSywcYXq8ebSDfMF
79wbnsUEIjxDhHb7bTvC3K0RM1mSKghdM040XSzgP2AP5QM0StKbOLMz2DZU0S4O
l8nOGsCAqKOWebFi2EpUH2L2VDnsUtD1gdYkqbYnkFWL+q2LJVod7EyavZbE2vz/
I5I+E0o+7VVQJiR9hkhS1IE07xl2YHzmselbjX8Pb8x36j8E2mBDrlIvrJUgn35U
rukjC8EZsGeZlU0qzFMuXzhYsl5jexYs1xWgoyq3/xvehc3oNlJnIx1Wi/mEg++V
YgJJFv3CqphMxL0sss+7ete2CXX7CsM8+POlbmUFb3MXW7Kdn6Fvw75vY8w=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:41:49 2025 by rpki-client