Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/KFiSgiNzwWBNZ_TwfQc6dj8zxSw.roa
File: KFiSgiNzwWBNZ_TwfQc6dj8zxSw.roa (raw, json)
Hash identifier: TQIikSWPmXOkQWx+pRcKAeNfiHkBQeFOkunziKZ3r3c=
Subject key identifier: 28:58:92:82:23:73:C1:60:4D:67:F4:F0:7D:07:3A:76:3F:33:C5:2C
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 58
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/KFiSgiNzwWBNZ_TwfQc6dj8zxSw.roa
Signing time: Tue 27 May 2025 08:36:33 +0000
ROA not before: Tue 27 May 2025 08:36:33 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 9808
IP address blocks: 240a:42f4::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:36:33 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=285892822373C1604D67F4F07D073A763F33C52C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:9b:c1:f2:5d:29:f0:ff:f6:96:91:95:78:
cf:85:2d:a7:75:a8:3c:3d:5b:28:2c:c1:09:04:a7:
bf:38:55:40:8d:b7:21:b9:cf:be:7c:da:1f:70:44:
a4:48:cd:d7:61:ea:21:00:ec:63:bd:7e:3e:de:a9:
f7:6a:59:49:89:b5:ef:eb:25:45:5e:81:29:0d:9d:
e0:73:1e:10:17:2f:fc:b0:03:18:62:c2:a2:ff:14:
03:ca:7d:32:b5:21:b6:ac:52:4c:c5:e1:ff:da:7a:
bb:8b:dc:a7:06:68:58:c4:e9:df:61:6d:22:c2:20:
f9:76:27:14:94:41:be:26:c5:01:f0:4d:78:8e:02:
6f:dd:14:7d:7b:ae:72:13:05:f3:a7:cc:6c:81:ec:
2a:36:cb:85:fd:5b:67:84:22:0f:ba:bf:29:21:ac:
f3:17:ff:43:04:cf:5e:ba:a9:d1:4b:bc:f8:28:6b:
5f:55:c9:a9:4c:c9:73:7d:03:88:fd:95:4a:a0:3e:
1a:16:c6:cb:e1:58:49:b7:51:f8:17:d6:57:18:d8:
40:b6:b8:cd:1a:e3:6b:84:2f:92:3a:a7:82:52:93:
79:3a:c8:6d:64:c5:84:4f:e3:9b:9c:19:34:ec:04:
f5:30:4c:f9:d6:3f:be:c3:25:a1:7e:fb:db:59:d8:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:58:92:82:23:73:C1:60:4D:67:F4:F0:7D:07:3A:76:3F:33:C5:2C
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/KFiSgiNzwWBNZ_TwfQc6dj8zxSw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:42f4::/31
Signature Algorithm: sha256WithRSAEncryption
ab:5d:f1:0a:89:71:50:0c:56:b7:b5:3d:0a:7b:33:ce:52:a1:
99:17:95:c2:6e:94:76:90:f8:94:f0:3d:a4:bb:fe:56:58:31:
d7:ec:16:ef:c0:eb:63:ac:a6:f5:d7:41:7d:f3:e2:6b:da:9c:
2b:96:45:82:25:18:fe:1f:20:81:90:b0:00:c6:b3:1e:a0:5d:
63:0e:42:ad:c7:aa:ef:62:03:70:72:0d:be:61:c6:c6:e2:7a:
69:51:fb:26:d9:3d:01:18:3b:ec:c9:ef:7f:b2:4f:a7:7e:29:
d1:7a:84:c0:22:fb:8a:71:ca:12:77:c0:b4:45:08:cb:34:7b:
a1:b8:c1:35:9b:17:7e:24:9d:3b:33:cb:1b:cd:61:82:ed:e0:
32:7b:66:64:5d:77:ce:34:91:df:d6:86:49:9e:48:6b:6f:fe:
0a:38:74:f9:8d:32:27:b6:c6:88:d0:f6:39:5a:7f:85:a7:5e:
e5:ed:dc:c7:a3:52:57:bc:92:ea:f9:dc:3a:4b:18:79:6c:c5:
89:de:1b:9a:33:b5:10:b3:ae:ac:ec:4e:1c:9e:65:2b:05:51:
fe:23:f2:ed:2c:f3:d2:85:94:93:87:02:a5:55:00:bc:18:a7:
62:99:47:a1:9d:2f:e7:e5:c5:35:da:82:4d:ac:b1:4f:47:6a:
dc:e1:42:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:24:24 2025 by rpki-client