Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/Bl3kelG_FWQCYccgHJF5fvnriOk.roa
File: Bl3kelG_FWQCYccgHJF5fvnriOk.roa (raw, json)
Hash identifier: z+kqdcB2zFf8A8Q9HV3e8vh8PeoGxJIuYO6Lo1To+Gs=
Subject key identifier: 06:5D:E4:7A:51:BF:15:64:02:61:C7:20:1C:91:79:7E:F9:EB:88:E9
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 01A1
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/Bl3kelG_FWQCYccgHJF5fvnriOk.roa
Signing time: Thu 10 Jul 2025 06:35:38 +0000
ROA not before: Thu 10 Jul 2025 06:35:38 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 56048
IP address blocks: 240a:4090:2061::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jul 10 06:35:38 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=065DE47A51BF15640261C7201C91797EF9EB88E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:f6:53:bf:0c:b9:33:3a:9c:95:47:cc:6f:
59:0b:0b:4d:bd:6e:3c:00:3c:59:74:62:d3:5a:f0:
13:78:8e:b6:9c:26:ae:d6:08:be:e6:94:d0:fe:7e:
90:cc:14:43:a2:36:d3:98:3a:31:44:f8:a3:7c:2e:
70:6e:7a:ae:de:29:c9:ff:2b:27:33:0f:0b:2d:c2:
db:5b:f4:0a:3d:49:32:4e:47:30:c0:f0:df:9e:fe:
37:ff:65:e9:53:75:0b:62:a7:95:06:da:d0:44:2a:
d7:cd:d7:84:63:b0:a9:46:70:39:45:47:99:9d:e2:
2e:66:e9:f1:6c:da:06:b2:85:1f:da:16:0e:6a:cd:
c7:44:b9:68:98:58:d8:7c:62:73:68:78:b7:58:a9:
c9:f8:55:eb:c5:47:8b:58:ce:35:13:2c:d4:0c:fa:
d9:d6:9c:a7:cb:33:8b:ac:99:71:43:36:c0:1c:02:
0e:4e:5d:36:6c:b3:ad:67:27:35:85:25:99:04:eb:
e3:60:b6:70:b4:97:24:51:fb:c0:22:4a:da:65:06:
61:a2:05:f2:93:6f:26:8e:18:0b:fa:b7:6c:54:08:
5d:b5:c5:37:7f:26:95:f8:28:b8:84:7c:3b:20:e3:
14:20:0d:8a:72:d7:d0:c0:fe:e9:fc:22:c6:b5:28:
d3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5D:E4:7A:51:BF:15:64:02:61:C7:20:1C:91:79:7E:F9:EB:88:E9
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/Bl3kelG_FWQCYccgHJF5fvnriOk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:4090:2061::/48
Signature Algorithm: sha256WithRSAEncryption
79:f7:a5:bc:06:18:31:64:45:85:96:59:5f:6c:c2:5e:46:56:
be:28:cd:1b:6b:5c:58:a5:66:18:a4:73:7b:78:30:33:14:94:
c3:b9:e3:89:dc:a3:9f:65:63:91:28:07:14:0e:dc:6f:0d:a4:
37:af:fe:d9:5b:b2:66:fd:ad:5c:15:56:35:8c:1a:a6:fe:bb:
58:75:b8:ac:0a:ea:2e:c8:df:78:13:eb:29:e7:d6:28:cf:3f:
74:d9:a2:d6:c1:90:cd:3a:a6:80:bf:07:df:15:24:4f:ae:27:
24:f3:68:97:cf:0e:77:13:95:ac:29:8e:4a:6e:e4:5e:3c:0e:
05:f7:85:c4:03:bb:13:06:b4:cc:b1:e2:b5:1b:66:dc:ba:7c:
76:56:52:f4:5e:68:f1:ff:5f:92:77:eb:bb:38:f8:af:d1:ad:
0f:03:dd:d1:d1:9c:c2:da:59:55:d6:e8:3c:1a:39:dd:dd:e1:
9c:98:3f:a8:c4:83:47:05:cb:f5:83:0c:03:00:55:10:c7:9f:
0d:2d:49:28:de:c0:4e:89:65:58:a3:77:b4:ee:71:2a:21:78:
20:67:7a:f9:a8:6e:71:41:18:f1:90:fd:7e:91:93:4b:aa:2a:
6d:4a:87:9b:c1:87:02:d9:8e:29:05:82:36:13:11:f2:39:07:
df:9e:54:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 21 13:46:22 2025 by rpki-client