Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/KplqLEeEvHulITc_68SAkNAv9rU.roa
File: KplqLEeEvHulITc_68SAkNAv9rU.roa (raw, json)
Hash identifier: XeIvE37aB7BKrd3U95/HSy8KU5Lpb5hB9OMu03OZoFs=
Subject key identifier: 2A:99:6A:2C:47:84:BC:7B:A5:21:37:3F:EB:C4:80:90:D0:2F:F6:B5
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: A7
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/KplqLEeEvHulITc_68SAkNAv9rU.roa
Signing time: Fri 06 Jun 2025 02:21:22 +0000
ROA not before: Fri 06 Jun 2025 02:21:22 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 24547
IP address blocks: 240a:40c0:c010::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jun 6 02:21:22 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=2A996A2C4784BC7BA521373FEBC48090D02FF6B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7b:fe:23:50:37:cd:59:a2:c2:f3:83:8b:bf:
69:87:84:40:96:18:62:03:bd:52:e4:28:71:e3:74:
f3:99:c6:0c:88:0b:e2:d2:47:2d:89:a9:41:f1:3a:
c3:af:61:15:3c:c8:40:ca:74:ff:f6:5e:af:c8:d2:
63:60:22:da:de:d9:62:ad:0e:32:f9:b7:44:28:bc:
06:31:e6:63:6c:1a:4d:f9:39:55:a7:0b:98:47:46:
92:2c:71:70:64:5a:b5:8c:9e:c9:73:56:c3:da:e8:
88:55:62:9c:db:be:b0:80:42:3b:96:ad:d9:54:60:
bf:8b:8f:f7:a0:46:2b:d2:9a:a8:82:c5:f0:b7:94:
a7:60:34:af:6b:36:e3:e5:48:2b:bf:06:e5:70:28:
ec:3b:ca:1a:d1:fb:00:38:b3:80:43:c3:89:2a:6d:
01:6e:be:a9:8f:36:a2:4a:18:00:f6:28:0a:c3:6b:
63:33:b9:ce:34:34:e3:ff:57:53:ea:45:a6:7a:d3:
36:41:4a:3e:3f:30:c5:d2:1a:21:20:97:b0:70:fd:
03:c2:68:4b:f0:9b:f2:58:42:f4:82:f2:4b:fd:5b:
00:32:c7:07:30:ec:56:e7:17:3b:05:29:a3:e5:51:
9a:c6:4e:86:ed:9e:06:aa:15:6f:be:ac:43:0c:42:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:99:6A:2C:47:84:BC:7B:A5:21:37:3F:EB:C4:80:90:D0:2F:F6:B5
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/KplqLEeEvHulITc_68SAkNAv9rU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:40c0:c010::/44
Signature Algorithm: sha256WithRSAEncryption
7a:99:b4:91:d4:49:8b:47:ee:7d:57:08:11:39:ca:0d:fc:dd:
da:73:19:53:1d:82:ff:bc:4e:78:d8:af:ca:46:0f:99:59:63:
fa:33:a7:05:7a:07:2d:e4:5f:ab:4e:77:9b:cb:3b:88:4f:bf:
91:1d:b7:f8:74:6a:c1:7a:60:31:48:7c:d6:18:e8:fa:02:54:
9a:27:b7:01:86:ab:0b:5e:96:a6:32:f3:8b:11:ab:54:4e:03:
2d:d4:77:84:f2:24:f6:12:98:6a:03:b5:1f:39:d6:d1:47:a3:
47:d1:f1:5b:91:e1:d3:9e:9e:b4:51:ed:ee:bc:32:35:1e:60:
78:ed:24:46:b1:27:49:e3:84:20:d5:41:c1:56:21:b6:b3:c9:
db:18:80:c8:23:45:2a:66:0b:59:b3:3b:25:63:14:9b:10:a5:
49:5c:2d:c0:5b:e2:15:56:10:c3:02:06:db:8b:5a:bf:88:34:
51:fd:3f:e0:fa:91:3b:7a:3d:51:2f:61:da:e9:a6:74:fd:ac:
e5:10:e9:c8:9b:91:ae:9b:13:95:f0:86:e4:aa:12:e9:8f:be:
45:9b:37:44:22:6b:2e:c4:f6:70:df:99:7d:d8:c8:9c:cd:92:
74:74:e2:29:e5:f9:66:27:e0:8b:10:c7:d3:b0:aa:15:2f:14:
71:c9:48:a3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Aug 24 06:48:05 2025 by rpki-client