Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/RalSCeaLKVlu_4U9g7ZVmg7-NXg.roa
File: RalSCeaLKVlu_4U9g7ZVmg7-NXg.roa (raw, json)
Hash identifier: BirXNEFDT/E4tQiUeviQeJ2scfWcZrbi/16M/3Zz1tE=
Subject key identifier: 45:A9:52:09:E6:8B:29:59:6E:FF:85:3D:83:B6:55:9A:0E:FE:35:78
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 16
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/RalSCeaLKVlu_4U9g7ZVmg7-NXg.roa
Signing time: Tue 27 May 2025 08:11:31 +0000
ROA not before: Tue 27 May 2025 08:11:31 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 56048
IP address blocks: 240a:4090:120::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:11:31 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=45A95209E68B29596EFF853D83B6559A0EFE3578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:37:df:57:f4:78:ab:95:01:5c:e2:f2:1d:
be:e0:a7:65:f7:b5:cf:fb:33:bd:65:f3:5c:3e:d7:
b9:cc:25:be:28:e0:bc:53:20:43:2c:06:1b:99:ed:
94:85:60:89:11:f4:d0:cb:a3:e4:fc:81:96:0c:2e:
40:91:f9:29:d6:98:31:8a:6d:fe:02:eb:35:d0:16:
ef:b6:90:0d:03:44:87:e0:71:5f:2b:3e:30:0a:53:
d5:bc:7b:bb:d9:52:c3:19:57:9c:4a:e1:4f:65:08:
9f:ef:8e:c0:bc:e8:60:fb:a7:21:64:14:02:eb:0d:
9f:40:7f:92:1c:0e:4d:2f:91:13:f2:9f:fe:1c:da:
b8:b9:ce:fa:9b:fe:d9:d1:54:e0:24:9f:8f:f6:e5:
09:ec:3a:5e:2e:70:a6:f7:21:7d:dc:23:a5:d2:ec:
f9:38:d9:99:e3:e8:37:7b:69:60:c5:a2:f4:53:00:
dc:aa:81:e9:e3:56:63:60:f7:8a:bc:2e:02:12:a1:
3a:4c:73:4b:84:63:e2:a5:b4:cb:c9:67:de:5b:73:
7e:24:fc:14:5c:ca:6d:df:01:2e:ce:2c:c0:a4:e8:
0e:a6:18:2a:2c:43:8c:52:e2:e8:2e:f4:32:74:e1:
c8:48:c4:b4:6d:aa:09:d3:5f:0b:f3:80:41:0c:a2:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A9:52:09:E6:8B:29:59:6E:FF:85:3D:83:B6:55:9A:0E:FE:35:78
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/RalSCeaLKVlu_4U9g7ZVmg7-NXg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:4090:120::/48
Signature Algorithm: sha256WithRSAEncryption
cb:66:f3:77:87:c8:d4:55:9e:13:a1:3a:27:b9:2a:91:a4:dd:
f9:cf:6c:33:1c:52:17:a0:98:0b:27:08:00:8b:eb:e3:9a:d1:
ec:b7:55:d8:49:87:9e:fa:d2:87:65:b5:d9:d1:f5:3a:d3:1e:
8d:38:17:0f:86:f6:91:f8:99:76:8f:62:e0:21:c3:ff:90:98:
af:de:5c:21:f8:18:51:f4:57:86:ec:2f:2c:bf:64:93:b0:1d:
77:7d:34:be:a3:ac:e8:32:e6:68:46:48:8d:97:4f:2f:a3:35:
15:7c:b5:aa:8c:06:66:4e:67:e8:c0:83:47:2f:b7:6a:f0:83:
3a:a8:a8:30:36:be:55:f4:a9:62:af:2b:70:0b:79:e5:8b:71:
39:e3:f7:8a:89:89:38:7b:8e:54:ac:aa:f2:c4:f9:d8:23:52:
2d:12:41:a6:15:72:21:2e:77:f5:77:04:4c:cd:58:e7:dd:07:
73:01:16:58:47:4f:a8:dc:04:94:52:1b:db:f4:96:18:f4:70:
bd:54:25:f4:61:b4:13:ef:9f:f1:09:08:70:45:2a:f0:ad:bb:
9e:99:85:65:a8:08:03:be:34:04:33:76:01:47:4e:90:81:c3:
2a:eb:92:a9:95:cd:1d:33:1f:03:2a:ec:02:0e:cd:6e:96:8d:
3b:75:84:6c
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG
RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4
MTEzMVoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoNDVBOTUyMDlFNjhCMjk1
OTZFRkY4NTNEODNCNjU1OUEwRUZFMzU3ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALkQN99X9HirlQFc4vIdvuCnZfe1z/szvWXzXD7XucwlvijgvFMg
QywGG5ntlIVgiRH00Muj5PyBlgwuQJH5KdaYMYpt/gLrNdAW77aQDQNEh+BxXys+
MApT1bx7u9lSwxlXnErhT2UIn++OwLzoYPunIWQUAusNn0B/khwOTS+RE/Kf/hza
uLnO+pv+2dFU4CSfj/blCew6Xi5wpvchfdwjpdLs+TjZmePoN3tpYMWi9FMA3KqB
6eNWY2D3irwuAhKhOkxzS4Rj4qW0y8ln3ltzfiT8FFzKbd8BLs4swKToDqYYKixD
jFLi6C70MnThyEjEtG2qCdNfC/OAQQyiAp8CAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBRFqVIJ5ospWW7/hT2DtlWaDv41eDAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP
q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy
L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9SYWxTQ2VhTEtWbHVf
NFU5ZzdaVm1nNy1OWGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAJApAkAEgMA0GCSqGSIb3DQEBCwUAA4IBAQDLZvN3h8jUVZ4ToTonuSqRpN35
z2wzHFIXoJgLJwgAi+vjmtHst1XYSYee+tKHZbXZ0fU60x6NOBcPhvaR+Jl2j2Lg
IcP/kJiv3lwh+BhR9FeG7C8sv2STsB13fTS+o6zoMuZoRkiNl08vozUVfLWqjAZm
TmfowINHL7dq8IM6qKgwNr5V9KlirytwC3nli3E54/eKiYk4e45UrKryxPnYI1It
EkGmFXIhLnf1dwRMzVjn3QdzARZYR0+o3ASUUhvb9JYY9HC9VCX0YbQT75/xCQhw
RSrwrbuemYVlqAgDvjQEM3YBR06QgcMq65Kplc0dMx8DKuwCDs1ulo07dYRs
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:56:57 2025 by rpki-client