Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2972/4NLDWWgvrdtoNmlZt6ha5D8LuEs.roa
File: 4NLDWWgvrdtoNmlZt6ha5D8LuEs.roa (raw, json)
Hash identifier: ifNnF9h072MS6Pwe42EJlNd8XK4udOUQoSw1UcbQjR8=
Subject key identifier: E0:D2:C3:59:68:2F:AD:DB:68:36:69:59:B7:A8:5A:E4:3F:0B:B8:4B
Certificate issuer: /CN=A8EBEAD4B13A791850CAF7914EA30D0F5036C3E7
Certificate serial: 11
Authority key identifier: A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/4NLDWWgvrdtoNmlZt6ha5D8LuEs.roa
Signing time: Thu 16 Oct 2025 09:09:01 +0000
ROA not before: Thu 16 Oct 2025 09:09:01 +0000
ROA not after: Thu 15 Oct 2026 07:34:23 +0000
asID: 139138
IP address blocks: 2406:b640:4100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8EBEAD4B13A791850CAF7914EA30D0F5036C3E7
Validity
Not Before: Oct 16 09:09:01 2025 GMT
Not After : Oct 15 07:34:23 2026 GMT
Subject: CN=E0D2C359682FADDB68366959B7A85AE43F0BB84B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:00:77:32:37:7f:57:6e:ac:cd:dc:95:e1:40:
f5:b1:2b:39:e0:46:7e:03:b2:9b:7c:61:a7:94:8c:
41:8f:b4:3e:a3:44:6f:6b:87:a8:6a:b2:b5:1e:34:
02:31:0f:d5:61:aa:6f:ce:9a:52:4d:0f:7d:7f:a3:
11:81:62:13:ee:e5:40:86:f2:c7:3e:35:3f:5b:e4:
60:67:cc:7c:88:e3:a0:74:61:09:7b:c1:32:ce:15:
98:5b:63:30:c6:04:be:21:87:5b:6b:94:a6:47:85:
db:55:d6:58:25:66:1e:1e:fe:d6:1e:8a:1a:5f:ed:
34:26:07:e2:6c:04:2b:f2:76:2f:bc:b0:25:40:4e:
a8:0b:09:dc:b7:c2:80:43:1e:2d:dd:e1:ca:9f:79:
94:33:84:b0:fb:d7:10:07:bf:a8:f2:f8:85:54:75:
c2:3c:1d:aa:83:63:31:87:d8:e8:7d:ed:01:6d:78:
27:9f:28:32:87:1a:fe:36:f6:8c:b3:86:61:5f:ae:
c4:d1:6d:ca:97:5c:fe:2a:63:20:57:a7:ca:3e:c7:
24:96:c4:83:a7:cc:80:a6:89:ec:1b:1b:83:27:eb:
22:07:e0:e7:14:1e:eb:8b:5b:b9:78:b2:84:32:5a:
10:96:ee:e4:bf:f1:e8:8b:b4:1b:e3:d1:6f:b0:a3:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D2:C3:59:68:2F:AD:DB:68:36:69:59:B7:A8:5A:E4:3F:0B:B8:4B
X509v3 Authority Key Identifier:
keyid:A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/4NLDWWgvrdtoNmlZt6ha5D8LuEs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:b640:4100::/48
Signature Algorithm: sha256WithRSAEncryption
2b:51:b8:be:16:dd:86:ab:8a:84:df:63:e6:7e:9b:7d:d0:61:
1a:c3:52:0e:fe:9c:2a:f1:65:94:c7:55:5f:ba:3e:84:3c:34:
8f:d2:01:6b:4d:91:26:e2:9b:11:54:92:92:08:6b:d1:f4:50:
78:1b:56:e2:18:54:d7:0b:c1:32:7b:41:df:d6:ef:2c:dc:c6:
cb:a7:6f:91:49:20:1d:e1:52:3c:7b:be:6b:4e:1a:b8:7b:ff:
0c:a3:3a:ba:4a:14:83:ce:f0:1e:83:ab:71:47:d4:20:6b:ec:
82:71:a6:af:a6:da:81:3f:7b:25:b4:51:54:ee:5a:48:0d:2d:
f0:f9:42:53:7d:d8:61:df:97:00:6f:6d:b4:a6:c6:0c:18:94:
80:29:b4:13:21:42:48:e7:8c:09:04:49:d9:e6:06:a0:62:ac:
b7:6d:da:21:bc:ca:0b:e8:f2:32:46:bb:20:88:e5:0f:c6:9a:
4d:fd:c6:57:5f:dd:b1:3d:45:50:e1:72:3b:d8:87:23:87:2a:
a9:54:ae:01:27:18:73:9a:0d:6e:91:13:42:0e:26:b2:e5:c7:
7d:cd:51:bb:b4:51:40:57:be:07:d5:75:a8:e7:ca:0b:5d:50:
99:6a:aa:54:a4:3a:8a:59:8f:16:21:08:2c:2b:ec:0c:35:64:
b3:b2:e1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:52:19 2025 by rpki-client