Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/EymkZ2O9iJVfSgzvm060kVTQVyg.roa
File: EymkZ2O9iJVfSgzvm060kVTQVyg.roa (raw, json)
Hash identifier: eyNKQ3fv1lyTKq2NTvQ7FRdH5rbLJKDM6/3zOa23Dp0=
Subject key identifier: 13:29:A4:67:63:BD:88:95:5F:4A:0C:EF:9B:4E:B4:91:54:D0:57:28
Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Certificate serial: 39
Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/EymkZ2O9iJVfSgzvm060kVTQVyg.roa
Signing time: Fri 22 Aug 2025 06:30:20 +0000
ROA not before: Fri 22 Aug 2025 06:30:20 +0000
ROA not after: Thu 20 Aug 2026 07:49:18 +0000
asID: 139140
IP address blocks: 2402:7d80:8888::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Validity
Not Before: Aug 22 06:30:20 2025 GMT
Not After : Aug 20 07:49:18 2026 GMT
Subject: CN=1329A46763BD88955F4A0CEF9B4EB49154D05728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:e9:76:37:ab:b5:9b:11:e7:9f:d1:2d:a2:
2d:44:c7:7b:a0:b1:52:a3:fa:3e:e9:48:ee:f0:8e:
e9:b2:40:0c:e5:33:be:63:84:31:1d:ad:96:a0:35:
25:2f:57:88:3b:b4:a4:b8:37:0d:54:a6:56:0f:52:
26:f0:5b:9b:2a:1c:97:0f:cf:e0:97:c1:ea:e4:1f:
c6:6a:5e:44:5f:3b:0f:e3:13:02:9d:18:f3:15:10:
22:9c:16:e2:59:ce:45:a4:c2:75:b1:6a:a1:c1:9b:
5b:1b:fb:a4:be:a8:4d:d9:9e:21:21:f9:2b:80:d9:
f3:a2:74:ca:fe:c5:ad:d8:52:45:f3:5d:e0:9d:c0:
60:dc:cf:50:fa:73:34:6c:1d:e5:19:15:a2:31:96:
ac:69:e4:6d:4a:f7:90:a8:4e:ae:2c:94:b4:13:69:
2b:9c:8a:0d:de:d9:9f:a1:cd:f2:88:bf:82:ac:b1:
c8:42:f5:64:a3:6f:43:27:4b:84:09:41:1b:96:1b:
78:79:22:ad:a2:36:cc:46:b9:f1:1e:f3:61:e0:a0:
15:88:fc:c2:e8:23:41:ed:ef:c6:22:cc:07:c0:1a:
8f:29:9f:73:4f:72:32:21:e4:3a:2a:bd:53:55:ce:
1c:6a:60:6f:9c:47:56:2e:87:8d:24:24:69:95:52:
30:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:29:A4:67:63:BD:88:95:5F:4A:0C:EF:9B:4E:B4:91:54:D0:57:28
X509v3 Authority Key Identifier:
keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/EymkZ2O9iJVfSgzvm060kVTQVyg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:7d80:8888::/48
Signature Algorithm: sha256WithRSAEncryption
69:1d:cb:87:84:4b:3f:6d:78:35:9b:ad:6d:99:8b:53:37:64:
63:64:18:5a:66:6c:f5:e1:aa:f2:40:c2:a7:c9:f9:25:b0:e8:
bc:25:0e:ea:26:73:6e:20:01:9e:67:d4:d5:19:01:b1:d6:ff:
08:59:09:43:19:7f:c4:14:0a:e5:39:c7:da:ed:43:aa:19:52:
de:5f:7e:cb:84:a3:c6:f6:9e:9a:07:c2:28:69:e0:2b:16:8b:
40:7e:47:f0:66:80:58:68:4e:20:09:ba:2b:15:3e:a0:74:5c:
d6:9d:2d:be:7e:72:e6:91:43:cd:46:8b:dd:ad:d5:29:4e:ba:
f9:60:38:64:7d:9e:9d:96:b2:06:f2:e0:fe:63:2f:08:26:fd:
16:4c:0e:de:f8:84:4c:52:e5:47:78:3a:11:b8:d1:0a:76:ba:
2e:3d:16:96:9a:f0:86:54:83:1f:0b:a3:0c:e1:a6:b0:5d:80:
70:50:a7:64:27:d2:22:fb:f5:bb:d6:56:14:3a:7d:1d:d8:92:
a6:08:e7:d0:77:76:45:97:41:74:af:d5:c5:e1:64:d7:bd:b7:
3e:15:0c:74:f2:c3:e3:34:a6:b9:71:75:10:09:4f:45:0d:73:
f9:2d:9b:da:70:31:a5:37:d7:43:49:7e:0c:d2:d9:02:17:85:
65:46:a0:ff
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4
OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2
MzAyMFoXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoMTMyOUE0Njc2M0JEODg5
NTVGNEEwQ0VGOUI0RUI0OTE1NEQwNTcyODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMsc6XY3q7WbEeef0S2iLUTHe6CxUqP6PulI7vCO6bJADOUzvmOE
MR2tlqA1JS9XiDu0pLg3DVSmVg9SJvBbmyoclw/P4JfB6uQfxmpeRF87D+MTAp0Y
8xUQIpwW4lnORaTCdbFqocGbWxv7pL6oTdmeISH5K4DZ86J0yv7FrdhSRfNd4J3A
YNzPUPpzNGwd5RkVojGWrGnkbUr3kKhOriyUtBNpK5yKDd7Zn6HN8oi/gqyxyEL1
ZKNvQydLhAlBG5YbeHkiraI2zEa58R7zYeCgFYj8wugjQe3vxiLMB8Aajymfc09y
MiHkOiq9U1XOHGpgb5xHVi6HjSQkaZVSMMMCAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBQTKaRnY72IlV9KDO+bTrSRVNBXKDAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E
4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy
LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9FeW1rWjJPOWlKVmZT
Z3p2bTA2MGtWVFFWeWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAJAJ9gIiIMA0GCSqGSIb3DQEBCwUAA4IBAQBpHcuHhEs/bXg1m61tmYtTN2Rj
ZBhaZmz14aryQMKnyfklsOi8JQ7qJnNuIAGeZ9TVGQGx1v8IWQlDGX/EFArlOcfa
7UOqGVLeX37LhKPG9p6aB8IoaeArFotAfkfwZoBYaE4gCborFT6gdFzWnS2+fnLm
kUPNRovdrdUpTrr5YDhkfZ6dlrIG8uD+Yy8IJv0WTA7e+IRMUuVHeDoRuNEKdrou
PRaWmvCGVIMfC6MM4aawXYBwUKdkJ9Ii+/W71lYUOn0d2JKmCOfQd3ZFl0F0r9XF
4WTXvbc+FQx08sPjNKa5cXUQCU9FDXP5LZvacDGlN9dDSX4M0tkCF4VlRqD/
-----END CERTIFICATE-----
Generated at Sun Aug 24 06:46:51 2025 by rpki-client