Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2154/O3gZx3V23G7fmgkzzdZ3ZPqfJxs.roa
File: O3gZx3V23G7fmgkzzdZ3ZPqfJxs.roa (raw, json)
Hash identifier: 7qtX9vNeQlnn5LJAJiPLqpLwF+FjgCLvtipGIf+F088=
Subject key identifier: 3B:78:19:C7:75:76:DC:6E:DF:9A:09:33:CD:D6:77:64:FA:9F:27:1B
Certificate issuer: /CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2
Certificate serial: 0827
Authority key identifier: E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/O3gZx3V23G7fmgkzzdZ3ZPqfJxs.roa
Signing time: Sat 13 Sep 2025 03:04:08 +0000
ROA not before: Sat 13 Sep 2025 03:04:08 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 63631
IP address blocks: 2407:9080::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2087 (0x827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2
Validity
Not Before: Sep 13 03:04:08 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=3B7819C77576DC6EDF9A0933CDD67764FA9F271B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:53:ad:1d:f8:be:64:77:79:30:f8:98:fd:
86:03:e1:d6:da:3d:65:1e:05:46:f1:18:a3:af:9a:
93:4a:2d:d9:c4:e1:c5:06:59:ac:be:43:4d:f9:8a:
17:5a:f6:e8:2f:63:2e:a8:46:19:b9:6e:b0:42:89:
7f:42:29:ef:90:de:0e:fb:66:a3:72:77:86:f7:d4:
90:f7:ae:71:5e:81:2e:6d:2c:6b:d0:68:4f:92:74:
93:30:1d:32:24:b9:6c:a5:72:56:f8:89:e5:ba:f5:
d0:34:98:50:ed:3a:56:04:2a:a7:34:4c:32:1d:34:
d4:1d:cb:cd:a1:ec:4a:a9:cb:90:b0:fc:a0:b5:4f:
e3:0d:51:f4:5a:51:72:26:c4:6a:73:6f:00:95:42:
c1:80:89:ff:81:12:ab:08:93:e7:c2:9e:c0:31:0f:
e2:4d:0f:1b:2f:5c:23:2a:3e:45:4b:cf:8e:c0:f9:
ba:c0:b0:16:56:23:46:a6:54:81:e3:d9:69:3d:05:
4a:73:50:e6:99:99:52:ec:f8:13:fb:d6:09:af:06:
22:d4:23:f8:a6:64:ad:71:c5:cd:28:b4:e8:8a:e2:
0f:36:56:27:33:7a:5a:28:97:6a:d4:ae:43:a1:d6:
9a:97:5f:b7:2a:e6:dd:1c:4e:3c:76:25:82:4d:03:
f9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:78:19:C7:75:76:DC:6E:DF:9A:09:33:CD:D6:77:64:FA:9F:27:1B
X509v3 Authority Key Identifier:
keyid:E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/O3gZx3V23G7fmgkzzdZ3ZPqfJxs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9080::/32
Signature Algorithm: sha256WithRSAEncryption
2d:b2:ca:cd:1d:b1:80:13:3b:59:90:74:ac:1b:a7:a4:c9:dd:
c2:61:7b:80:8c:20:16:cb:2e:da:34:e7:a0:18:d7:6d:32:94:
ec:43:0a:7c:19:af:92:fb:05:8c:07:a4:7f:8d:48:83:09:dc:
ec:f0:02:4f:13:06:25:81:cb:78:a5:07:8d:cb:07:96:3e:5e:
c0:83:d8:b9:84:86:ef:85:ef:b2:f1:12:e1:6b:fc:f5:ae:aa:
61:e5:d4:91:1b:c4:a2:e7:cb:04:7a:3c:b6:59:b1:58:04:1b:
ec:10:8f:56:28:77:59:df:aa:7f:58:02:e6:d2:ed:0e:c2:f7:
6b:aa:6b:2d:e1:d9:43:f4:9f:b9:e2:8f:c9:71:5f:18:d4:9b:
08:1a:4c:d5:e6:fc:8c:69:de:6f:66:a9:e9:bd:1e:0c:a3:1e:
34:24:91:45:70:4b:25:0b:7d:af:a3:76:7e:8d:8c:11:19:f6:
ef:27:c7:9d:7f:2b:ba:2a:24:4d:4d:06:cf:5d:6a:bc:5e:31:
77:95:ab:13:0f:7d:22:04:e7:69:24:e3:c1:4a:29:e0:50:4a:
d8:62:86:62:32:1a:10:8a:6b:53:16:04:25:02:bc:0c:68:92:
30:35:77:ee:2d:7f:86:35:77:ce:1e:90:36:1e:6b:a8:7b:f2:
84:f1:cf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:15:02 2025 by rpki-client