Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/_YSgu0-wPojmZPR7uy2-f-MtoOg.roa
File: _YSgu0-wPojmZPR7uy2-f-MtoOg.roa (raw, json)
Hash identifier: Qxoh3jINv0WsJxGQ6CvORR6uXLY241VDby3ihfETH9Y=
Subject key identifier: FD:84:A0:BB:4F:B0:3E:88:E6:64:F4:7B:BB:2D:BE:7F:E3:2D:A0:E8
Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Certificate serial: 38
Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/_YSgu0-wPojmZPR7uy2-f-MtoOg.roa
Signing time: Fri 22 Aug 2025 06:30:20 +0000
ROA not before: Fri 22 Aug 2025 06:30:20 +0000
ROA not after: Thu 20 Aug 2026 07:49:18 +0000
asID: 12076
IP address blocks: 2402:7d80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Validity
Not Before: Aug 22 06:30:20 2025 GMT
Not After : Aug 20 07:49:18 2026 GMT
Subject: CN=FD84A0BB4FB03E88E664F47BBB2DBE7FE32DA0E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ac:50:a6:19:c0:0b:cc:36:8e:4e:49:6b:0f:
2e:84:18:85:9d:52:4a:f3:ed:22:74:4b:22:1b:3a:
cc:c5:d6:41:07:4d:26:54:51:ab:7e:e1:0e:52:e5:
a2:42:49:44:f0:8f:28:7b:bd:72:1b:dd:7c:e7:c5:
b0:eb:7c:61:a5:3c:43:f7:b9:92:c4:5b:5d:d2:95:
6e:c8:6f:6d:57:d9:f8:a3:e6:01:0a:99:a6:ff:7a:
e8:8f:62:4f:94:56:57:52:4c:95:9a:25:09:2c:40:
0e:9a:2f:bc:13:6b:d5:3b:3a:63:9a:44:52:f3:dd:
c0:eb:66:39:d8:70:0b:65:24:03:9c:a4:36:8a:95:
e2:96:3a:fc:2a:3c:84:11:24:88:84:79:e9:69:16:
96:9e:e4:7e:53:8e:56:3e:9b:7d:a0:7b:39:a8:df:
91:8c:4b:7a:ce:cd:f8:45:5f:01:59:09:6b:7b:c1:
50:e9:2d:ca:d2:17:80:56:c9:9b:8f:0a:8b:12:ef:
a4:6e:b3:63:27:6b:d9:a8:fa:fa:27:c1:93:ef:51:
1b:92:eb:88:1d:40:8e:6c:30:e6:d9:2f:62:85:29:
76:82:16:5e:80:f9:59:ca:e1:38:69:51:7f:50:59:
cd:83:59:77:4d:44:55:33:ac:bd:32:32:3c:8f:b0:
a0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:84:A0:BB:4F:B0:3E:88:E6:64:F4:7B:BB:2D:BE:7F:E3:2D:A0:E8
X509v3 Authority Key Identifier:
keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/_YSgu0-wPojmZPR7uy2-f-MtoOg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:7d80::/48
Signature Algorithm: sha256WithRSAEncryption
8a:78:aa:8b:f9:25:c7:24:5c:3f:59:e2:91:42:e5:e2:29:fd:
d1:fb:9b:16:2b:5c:85:c1:09:6b:35:b1:1b:80:13:88:65:7d:
e7:68:84:39:d1:ea:b5:1d:cb:52:35:ad:35:85:3f:c7:49:c0:
6c:ec:a4:39:b6:ef:fe:23:64:c9:17:d2:13:dd:bc:65:54:4b:
e3:8b:d6:09:e7:d0:21:d2:e9:24:0f:7a:4c:3a:54:df:53:a8:
d9:52:90:5b:7c:c0:1e:00:0d:33:53:56:a9:32:6a:b7:d5:5e:
bd:2c:69:fa:03:11:2f:ff:68:c9:ce:e5:9a:8b:ef:6e:45:c1:
36:11:03:3b:26:ff:44:5b:69:4e:9b:43:a9:f5:f0:b1:1b:50:
15:b8:85:86:32:c6:4c:a8:61:69:b3:e7:90:95:7f:10:2b:31:
58:a9:05:d7:fe:c1:46:ba:7b:28:6b:7f:ae:f2:24:d6:66:2c:
f0:ea:56:db:b2:34:2c:c3:bd:c9:e6:5c:22:93:8e:38:df:25:
b6:7e:42:06:91:69:e7:64:f3:c0:81:6d:fa:f9:51:e8:44:dd:
c3:f9:60:c2:f0:3f:05:87:bd:d9:b0:d8:5d:00:18:a4:7d:93:
b8:8b:11:c2:d0:f4:52:6c:97:25:8b:29:ce:af:e3:46:e7:9b:
c9:93:93:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:46:31 2025 by rpki-client