Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/HLC_YBAONMLuTFiBqMaJpVlyvEU.roa
File: HLC_YBAONMLuTFiBqMaJpVlyvEU.roa (raw, json)
Hash identifier: aDq0u9agwt1XLObb5Yf/++Ba6H3HJsIR7i5kQk9VOdQ=
Subject key identifier: 1C:B0:BF:60:10:0E:34:C2:EE:4C:58:81:A8:C6:89:A5:59:72:BC:45
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 97
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/HLC_YBAONMLuTFiBqMaJpVlyvEU.roa
Signing time: Fri 06 Jun 2025 01:44:56 +0000
ROA not before: Fri 06 Jun 2025 01:44:56 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 56046
IP address blocks: 240a:42a4::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jun 6 01:44:56 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=1CB0BF60100E34C2EE4C5881A8C689A55972BC45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:26:c2:d3:d5:4b:d2:2d:26:74:e2:b2:37:1e:
f9:f4:2c:01:af:76:63:a8:77:0e:81:e1:3c:30:7d:
62:a1:5a:f5:5d:f8:e3:04:22:75:31:4d:e6:17:94:
a9:55:ad:fc:39:5b:77:f4:81:0a:13:c4:40:e1:da:
62:b7:61:6f:9e:97:9d:9c:74:52:18:84:87:7a:89:
48:0a:c9:ce:fa:0f:84:cc:5a:83:bf:8a:a2:b8:14:
38:15:b8:67:6e:b1:e7:ae:3e:a1:75:33:6f:ab:fe:
a5:81:46:29:c9:09:ee:f8:24:20:31:ed:de:c8:96:
cd:59:31:a1:cd:b3:2f:00:36:a5:35:7a:82:02:b6:
d2:c6:96:da:77:f8:7f:a8:70:16:6d:fb:f0:1f:5d:
d8:11:2e:c0:86:37:9d:51:11:23:02:06:8b:a0:b9:
ea:a0:2c:3c:d0:28:d1:96:b7:d7:e2:83:f0:03:92:
95:7b:01:69:92:56:37:fb:16:3a:c5:d6:72:08:f9:
51:e4:07:29:dd:c2:f3:73:c3:0d:4e:41:48:ab:8b:
d6:72:9b:6d:09:11:85:d4:81:6a:53:2d:28:e9:27:
07:3e:b4:bc:fb:93:f0:fe:9d:38:14:94:a6:d9:e6:
57:05:45:b9:3b:5b:d7:4c:35:00:a3:63:e9:17:3d:
9a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B0:BF:60:10:0E:34:C2:EE:4C:58:81:A8:C6:89:A5:59:72:BC:45
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/HLC_YBAONMLuTFiBqMaJpVlyvEU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:42a4::/31
Signature Algorithm: sha256WithRSAEncryption
89:2a:ea:f3:ad:7c:39:1d:98:12:b0:57:1b:a2:32:16:f2:e0:
5a:89:f1:25:a7:9e:63:44:e6:f2:29:1c:eb:a0:f3:ed:7c:e6:
a6:a1:d6:ca:6c:7c:4e:38:a8:7a:a3:95:b1:cc:e3:c3:d7:1c:
1f:58:bd:3c:a3:b6:60:3c:6d:79:47:4f:d3:68:87:f1:95:2c:
c8:ed:e9:23:14:77:3b:da:b5:04:36:15:04:87:08:70:42:9f:
e6:c4:9e:b5:3e:e0:ab:88:59:6c:c4:15:c1:4c:75:07:50:7f:
86:de:bb:b5:d9:9b:d7:35:02:4f:bf:47:cd:21:03:f7:27:a8:
d0:ab:06:28:2c:33:d8:5a:e6:d9:6d:e9:eb:4f:79:74:df:aa:
80:42:65:c3:58:80:50:fe:29:07:9d:e3:df:84:c3:f0:62:bf:
2a:5a:16:68:37:5e:bd:25:34:2c:0e:e5:b1:f7:b9:4c:98:a1:
1b:39:7a:ce:77:4d:05:8d:3f:45:32:3c:95:8b:b9:32:99:d3:
bd:47:d7:7a:4b:59:5d:81:75:42:5d:bd:58:da:b9:53:59:6f:
38:33:20:40:1e:9b:f2:c9:f8:a0:8d:9a:a6:a1:11:ef:69:9a:
8a:5a:ff:5b:a5:96:32:1b:d6:ce:7f:84:16:df:f5:dc:00:e9:
dc:f9:98:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:23:11 2025 by rpki-client