Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2639/ye_e7IFFDWKpcYMtVDV5_x90OBc.roa
File: ye_e7IFFDWKpcYMtVDV5_x90OBc.roa (raw, json)
Hash identifier: GTorZa2VEQ15okVlCtUiLTxm6xDsOWEgeYB8rGxPHuQ=
Subject key identifier: C9:EF:DE:EC:81:45:0D:62:A9:71:83:2D:54:35:79:FF:1F:74:38:17
Certificate issuer: /CN=262CFF5632E4BCD10211BFA08B63F49FC9469F03
Certificate serial: 27D3
Authority key identifier: 26:2C:FF:56:32:E4:BC:D1:02:11:BF:A0:8B:63:F4:9F:C9:46:9F:03
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jiz_VjLkvNECEb-gi2P0n8lGnwM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/ye_e7IFFDWKpcYMtVDV5_x90OBc.roa
Signing time: Tue 10 Mar 2026 02:20:35 +0000
ROA not before: Tue 10 Mar 2026 02:20:35 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 151231
IP address blocks: 2402:2e60::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10195 (0x27d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262CFF5632E4BCD10211BFA08B63F49FC9469F03
Validity
Not Before: Mar 10 02:20:35 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=C9EFDEEC81450D62A971832D543579FF1F743817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:b8:f7:31:e4:9b:6e:e7:7b:c6:38:82:87:
d5:a2:3a:4b:20:78:96:11:81:88:4c:05:83:48:7c:
84:82:dd:99:d2:2e:cb:bf:16:9f:9f:eb:89:eb:dc:
34:b2:28:79:30:c4:bf:4a:18:58:7e:fb:b3:6d:6f:
af:40:5b:aa:a7:b4:fa:4b:ad:21:3b:a5:8a:de:99:
28:a9:60:82:3d:44:d9:3f:3a:62:0c:74:a0:b1:54:
80:a3:c7:68:e3:0c:76:74:a1:c9:94:7c:d3:a3:58:
06:c5:c8:fa:df:93:d4:1e:76:2a:0a:5b:6a:36:3c:
e4:e8:81:4c:92:63:14:42:38:68:54:5c:d8:ee:7c:
a5:ac:80:88:32:78:7b:e4:e9:13:75:f5:26:46:5a:
eb:35:f1:8b:72:df:ef:01:8d:de:93:c5:52:27:65:
55:c3:33:8b:01:8e:b2:ac:4b:1c:0a:c3:42:34:e6:
64:a3:0b:d0:9f:73:6b:23:62:0d:0c:b0:25:f6:1c:
1c:fc:b6:5d:de:7e:3d:2a:ab:16:aa:3d:2a:5e:32:
84:a3:30:9b:e3:53:12:b5:90:c9:0c:35:7b:cb:e5:
fe:7d:1d:0f:77:67:35:c0:16:58:3d:96:a5:51:18:
fd:5e:f9:52:85:d3:11:91:f9:8a:31:ad:0e:02:ef:
cc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EF:DE:EC:81:45:0D:62:A9:71:83:2D:54:35:79:FF:1F:74:38:17
X509v3 Authority Key Identifier:
keyid:26:2C:FF:56:32:E4:BC:D1:02:11:BF:A0:8B:63:F4:9F:C9:46:9F:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/Jiz_VjLkvNECEb-gi2P0n8lGnwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jiz_VjLkvNECEb-gi2P0n8lGnwM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/ye_e7IFFDWKpcYMtVDV5_x90OBc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:2e60::/32
Signature Algorithm: sha256WithRSAEncryption
45:8b:2b:62:0a:d6:f8:a0:84:c6:30:ce:4d:e0:13:ce:b7:73:
7c:77:cd:c6:79:a8:49:dc:6a:31:e7:26:05:1c:7f:b4:3d:3e:
0f:74:08:91:8d:87:a6:63:20:57:7c:e5:5c:17:2b:b2:0f:b0:
47:b0:f3:a6:f9:1c:46:18:d3:83:5a:80:18:91:29:97:7b:47:
91:e7:b9:6d:18:c1:8a:a6:1b:e4:e9:0b:13:8e:e1:7e:dc:cc:
bd:d6:bc:82:71:dc:b6:be:58:98:5e:16:f0:53:fe:25:e2:b9:
94:a3:30:e8:7c:76:b1:60:48:ed:07:3d:c7:cb:25:25:bd:99:
04:59:38:bf:f0:73:c8:a8:c1:af:63:35:2d:52:26:14:2c:55:
db:1f:93:f4:e2:2a:32:07:db:bc:17:38:00:88:88:71:31:50:
52:5f:0b:40:44:47:79:99:c4:e3:04:20:a8:96:4b:a7:45:91:
5c:ba:c6:40:3a:21:46:e4:2a:be:27:09:ee:0d:21:9e:b6:f7:
c0:79:fa:2d:52:42:6f:80:54:0b:88:31:75:67:f6:61:98:81:
3e:7d:d4:35:0b:b0:fa:3f:33:02:af:11:c8:7e:89:98:63:40:
af:3f:85:f6:b2:95:59:02:40:50:29:d8:cf:89:7e:8d:cd:c8:
d8:ee:20:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 12:46:26 2026 by rpki-client