Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/yLx5tWUBtr0m3Vxn0YsJhQZ04RY.roa
File: yLx5tWUBtr0m3Vxn0YsJhQZ04RY.roa (raw, json)
Hash identifier: Bh1gzIwYOGLsbiu6bIy/G+RlwF5tpSuHJ5h6qM2S7fQ=
Subject key identifier: C8:BC:79:B5:65:01:B6:BD:26:DD:5C:67:D1:8B:09:85:06:74:E1:16
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1F41
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/yLx5tWUBtr0m3Vxn0YsJhQZ04RY.roa
Signing time: Sun 01 Jun 2025 06:38:37 +0000
ROA not before: Sun 01 Jun 2025 06:38:37 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8001 (0x1f41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 1 06:38:37 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C8BC79B56501B6BD26DD5C67D18B09850674E116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:35:8b:f1:50:7e:45:7c:e5:c8:0f:ae:cc:
e4:14:ce:eb:69:46:52:b6:25:e7:4a:28:c7:57:7f:
fe:fd:23:aa:ac:4f:8a:28:93:21:2c:a8:a0:48:32:
9b:ba:ae:33:34:fc:1e:e4:2d:40:43:58:79:ac:8e:
06:83:15:ec:04:34:cf:1f:18:60:55:e0:42:7a:65:
41:d9:b4:01:8f:13:ed:24:fd:9d:e2:78:fc:51:3f:
f6:b3:cb:fd:2c:65:a6:e9:9a:a9:b4:53:d5:90:06:
3a:a8:4b:b3:a5:15:c2:01:d2:2d:43:15:2e:2b:41:
60:94:2f:34:f9:68:66:39:87:9c:02:39:31:96:0f:
cd:8b:36:03:fe:01:0c:10:a5:a8:d5:b3:02:51:43:
21:f4:03:a5:f9:5f:b6:ff:cb:44:b7:cd:29:13:4d:
06:5c:39:57:38:23:be:fd:43:31:5c:dc:aa:80:70:
6a:db:6d:f9:86:73:57:df:09:69:df:83:74:b2:87:
02:bb:40:98:0d:46:79:d0:48:80:8a:e8:f6:c2:1b:
26:c9:97:f0:e0:af:a4:cf:45:fe:81:56:70:f2:63:
a0:08:74:11:54:36:04:95:d6:cb:d9:b7:4f:14:56:
cc:f7:04:31:b9:c7:0f:2d:47:43:dc:3c:dd:cf:fe:
7d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BC:79:B5:65:01:B6:BD:26:DD:5C:67:D1:8B:09:85:06:74:E1:16
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/yLx5tWUBtr0m3Vxn0YsJhQZ04RY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
39:3e:b3:f2:39:ad:3f:a8:da:7d:de:59:4a:f0:54:af:2d:e5:
8d:5b:97:21:d7:df:2e:a8:7f:2c:2e:2a:31:57:ba:47:d4:ee:
71:4a:dd:66:8d:92:15:99:d9:9b:28:e9:7b:d8:ff:86:8c:33:
77:d3:1d:ae:6c:ca:05:eb:94:2a:60:bc:a3:35:89:c1:be:2d:
b0:e3:73:35:92:22:6e:52:d2:f4:2d:8f:2f:47:70:ad:46:e1:
fc:f3:fb:76:2b:93:3e:f1:3e:61:33:49:86:4f:4c:1e:c5:f4:
97:a5:46:4f:44:9f:e5:b0:71:9a:b5:1d:9a:16:4e:23:d8:a0:
4b:31:04:4f:8c:8a:d2:75:a9:eb:f8:35:b0:3c:3c:d7:79:ea:
bd:db:8c:e1:61:10:22:33:5a:f1:35:61:ae:88:df:53:94:5d:
98:80:11:a0:08:a5:db:8a:8b:93:68:1a:50:d2:f2:3b:ac:30:
02:54:21:00:0b:41:d5:77:fe:a1:20:e6:db:37:b7:59:66:53:
60:22:d8:bb:b5:bf:aa:e2:d1:73:bd:9d:26:c1:69:7e:54:7f:
44:45:9f:cf:0c:f8:3c:66:ab:c7:c1:d0:24:7b:c9:3c:6f:ed:
74:4c:6f:7b:f4:94:9f:64:0b:8f:86:40:1c:1d:e9:e8:3b:a2:
24:66:c7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:55:07 2025 by rpki-client