Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/IPtRjoC5wgM0QD6vPJgG4q0BhmQ.roa
File: IPtRjoC5wgM0QD6vPJgG4q0BhmQ.roa (raw, json)
Hash identifier: oUOX3EPTh78RFWdHmoBQii9EyHpudbMCkjwhwt0BcwQ=
Subject key identifier: 20:FB:51:8E:80:B9:C2:03:34:40:3E:AF:3C:98:06:E2:AD:01:86:64
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 6EEC
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/IPtRjoC5wgM0QD6vPJgG4q0BhmQ.roa
Signing time: Tue 21 Oct 2025 09:35:45 +0000
ROA not before: Tue 21 Oct 2025 09:35:45 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28396 (0x6eec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Oct 21 09:35:45 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=20FB518E80B9C20334403EAF3C9806E2AD018664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:d3:8c:7a:cb:4f:5b:c3:98:42:13:26:45:
a7:c2:16:eb:88:4a:25:24:e2:c9:8b:53:6a:10:a0:
8a:8d:05:36:a1:74:cd:94:19:90:52:b5:b1:dd:63:
bd:04:39:32:59:d6:80:e9:98:bb:72:6f:55:e0:af:
93:5a:e6:34:67:90:63:f2:11:c9:89:ca:ab:99:25:
1c:09:bf:bc:4b:9a:d8:6e:8b:3e:9e:6a:95:91:c7:
de:08:83:c1:ee:b4:78:78:d0:fd:64:4d:c1:b1:f7:
54:4d:a6:43:57:ad:0c:e0:ca:f1:8f:43:f9:b7:f9:
0c:9f:de:eb:0b:9f:03:52:c8:2f:0b:89:8d:92:1a:
b4:e8:1d:61:6a:97:07:56:9b:c3:23:18:c1:f3:11:
77:35:b9:ff:04:1c:da:40:9f:36:99:fd:57:83:1d:
f6:86:a8:b7:ca:4a:41:f2:26:9b:d0:2f:8e:4f:91:
7c:ed:b7:f0:fc:f2:60:5e:ac:00:aa:de:bd:ee:c2:
33:2c:bd:f6:17:83:52:29:e4:ca:c9:e1:68:82:70:
30:cd:44:e6:c3:1d:5d:57:d7:12:ec:d1:55:9c:91:
7b:b9:03:63:9c:58:1f:e7:5f:c0:d0:d5:5f:c3:ea:
3a:ea:7a:65:75:75:83:21:4e:15:3e:1a:c3:0f:d9:
07:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FB:51:8E:80:B9:C2:03:34:40:3E:AF:3C:98:06:E2:AD:01:86:64
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/IPtRjoC5wgM0QD6vPJgG4q0BhmQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
8d:b1:46:d8:a8:96:63:97:a3:fb:a4:f5:ca:31:41:96:52:75:
e9:cd:a7:0c:74:36:4f:44:2a:11:39:1d:90:7c:2d:b7:ff:44:
6a:bd:1b:76:01:59:a4:d6:9a:26:ae:99:a2:c8:bf:ff:c1:6e:
59:ab:73:c7:ed:38:c4:a1:cc:aa:84:7d:66:06:73:16:3c:ea:
0f:31:71:40:60:1f:c8:98:cb:81:ae:38:a1:1c:45:dd:dc:2f:
bf:10:68:5c:9f:33:61:e2:16:43:76:7f:ea:07:11:d2:57:af:
77:a2:86:4c:f6:44:b2:af:0e:3b:a6:d0:a2:f5:af:83:3c:3a:
36:72:f4:93:5e:39:07:f7:fb:38:e2:4c:c6:b5:73:03:dd:4d:
47:89:79:56:18:5c:1a:3b:a5:a8:21:28:93:7b:5b:36:bc:f3:
7a:a8:43:ff:39:82:62:ac:b0:bd:2e:9d:db:ec:0f:89:48:1a:
10:b0:d2:9f:7d:54:c2:67:d1:ba:d7:60:e5:43:e8:32:7b:11:
a7:d8:58:b4:05:f7:3d:8c:74:6d:a4:f0:8b:4e:c2:b1:bf:41:
13:6f:46:ff:de:ed:84:89:2f:87:9d:ca:a0:0a:bf:6d:b8:1a:
c4:f1:1d:d2:ff:7f:87:e8:a4:7a:0c:08:4c:10:29:31:c5:2d:
ac:d3:97:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 20:16:55 2025 by rpki-client