Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/yX2ybTTNwC07lP4nN6QkwXe67-M.roa
File: yX2ybTTNwC07lP4nN6QkwXe67-M.roa (raw, json)
Hash identifier: i0EuAbodHEqEtbc3BX0wYLC3Gmi3O3zX2i5j8KPo0lQ=
Subject key identifier: C9:7D:B2:6D:34:CD:C0:2D:3B:94:FE:27:37:A4:24:C1:77:BA:EF:E3
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 23FA
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/yX2ybTTNwC07lP4nN6QkwXe67-M.roa
Signing time: Mon 09 Jun 2025 16:09:00 +0000
ROA not before: Mon 09 Jun 2025 16:09:00 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9210 (0x23fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 9 16:09:00 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C97DB26D34CDC02D3B94FE2737A424C177BAEFE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:b7:58:6a:c3:03:43:5c:3f:4f:58:a6:6c:
0d:37:7a:ad:6a:28:98:6f:9a:5e:fd:d8:85:a6:8d:
7d:9f:70:eb:92:d2:07:47:36:90:d4:6b:39:b9:55:
5d:f3:44:ca:63:46:8e:ad:00:43:98:93:f1:25:ea:
18:ba:89:84:18:f4:80:a1:b5:ae:f9:66:44:55:d4:
be:fd:98:63:65:8d:15:c5:9e:57:23:72:fb:c9:40:
d6:a2:f4:2a:16:f7:f3:99:98:11:51:a5:38:fe:2a:
e5:79:eb:5e:61:b2:0d:d6:e7:9e:77:01:7c:c3:a0:
80:cf:04:d8:68:68:f2:50:b2:b6:37:2f:06:d8:c9:
84:76:d1:6e:57:54:e6:47:4d:c0:a5:1f:93:c6:63:
0d:80:d4:70:da:75:57:47:f8:37:c5:50:da:26:2d:
1e:ab:66:92:c7:d1:6c:f0:7f:31:74:9f:48:50:32:
88:18:34:1b:ee:1d:44:af:d5:56:1c:ee:fc:71:41:
9f:4f:55:f5:f9:76:26:0b:d4:cb:9a:40:e3:77:a8:
9d:ba:30:14:96:02:b3:4a:c0:5d:f3:60:eb:34:9d:
b5:f6:f2:43:1b:90:23:19:a1:82:44:56:8e:ed:b0:
10:f6:41:1d:37:d0:f9:25:a7:cb:98:5b:ef:3c:40:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7D:B2:6D:34:CD:C0:2D:3B:94:FE:27:37:A4:24:C1:77:BA:EF:E3
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/yX2ybTTNwC07lP4nN6QkwXe67-M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
23:f6:a7:ec:9f:82:7f:09:b2:67:19:6a:00:49:84:e5:27:6c:
94:50:f4:86:85:c9:9e:ec:a1:86:1d:a5:6c:53:4c:72:2a:da:
d3:f0:01:2b:27:63:a7:7a:9b:0c:ff:9d:e0:0c:39:56:17:ee:
57:0a:58:00:6e:a3:54:ca:6b:8e:30:b7:88:97:c7:7c:47:06:
2b:68:11:50:ff:e4:b7:e9:0a:b5:ba:df:35:25:83:71:8d:93:
61:8a:05:c2:63:a7:8e:37:fc:41:64:14:05:96:84:26:fb:99:
5e:c8:e6:d9:63:51:c7:99:60:3c:5f:77:63:ae:c4:b1:18:12:
f4:6d:3e:50:01:07:c7:cc:8c:18:aa:dc:a0:aa:7f:67:1e:77:
f4:b8:7a:1a:75:f8:87:55:2a:04:8b:cc:09:72:55:43:12:b1:
a9:cc:98:03:fd:40:7b:f0:38:40:20:72:46:81:47:8f:17:1e:
88:0f:ac:8f:8c:a4:a5:67:8c:85:bc:02:c0:ba:88:e2:6e:f1:
dd:05:d6:ee:fa:32:e4:07:f9:5f:6e:4c:e1:24:25:3c:da:23:
84:f4:f6:63:b6:1d:00:75:2d:9b:76:f3:e2:3e:1f:51:1e:94:
73:b2:31:fc:a9:1a:77:93:8f:fc:41:81:70:23:f5:d9:2e:07:
c1:07:a7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:04:07 2025 by rpki-client