Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/VYaGeWkZ2DPxnfOizvMWLQkC8Bs.roa
File: VYaGeWkZ2DPxnfOizvMWLQkC8Bs.roa (raw, json)
Hash identifier: YtPvCpqQdoG9zygKvWA8vSnxvAEK+WI8Z0IFX1LMOyI=
Subject key identifier: 55:86:86:79:69:19:D8:33:F1:9D:F3:A2:CE:F3:16:2D:09:02:F0:1B
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 9F
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/VYaGeWkZ2DPxnfOizvMWLQkC8Bs.roa
Signing time: Fri 06 Jun 2025 01:46:35 +0000
ROA not before: Fri 06 Jun 2025 01:46:35 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 134810
IP address blocks: 240a:429c::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jun 6 01:46:35 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=558686796919D833F19DF3A2CEF3162D0902F01B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:b6:aa:d4:ea:a1:64:66:fa:c7:82:bf:b0:
0f:d0:b6:f9:67:d9:2f:98:ca:5c:6f:c8:7f:10:8e:
51:1f:0d:1c:99:d1:76:24:6b:73:00:cf:a5:6c:8f:
70:f6:24:22:2a:90:de:57:ee:e7:f1:e2:4d:28:eb:
28:b7:22:f2:09:d6:1f:48:4d:ff:ad:2d:00:3c:6c:
34:f0:e6:39:9f:a3:c9:1d:44:33:a4:48:98:ac:fb:
c3:d6:26:64:f8:b3:ac:68:13:ae:86:9e:0e:8a:3d:
62:d4:14:03:c3:21:32:34:94:e1:a6:53:fe:0b:a9:
5b:f0:2f:50:a9:f7:a1:fa:49:e5:d7:25:67:37:c8:
d4:86:2c:ea:9a:8a:63:d7:73:3c:0e:70:fe:6a:48:
ad:ef:6b:f8:59:5d:57:58:69:b8:86:d7:a6:c5:dc:
a6:6c:d4:33:35:fc:dc:49:4e:a4:4f:23:b5:2b:5b:
ee:9f:8b:f0:b3:8f:7a:7e:77:06:45:0c:e4:43:72:
de:3d:8e:e8:dd:8b:00:13:cd:74:95:67:54:38:10:
d3:65:65:1a:60:11:88:e3:52:24:67:d6:7d:6e:23:
e1:ca:94:77:7a:59:5c:cf:0d:cc:7b:83:c2:4a:25:
18:2f:49:a1:60:76:c9:c1:24:76:cc:61:79:d7:83:
ac:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:86:86:79:69:19:D8:33:F1:9D:F3:A2:CE:F3:16:2D:09:02:F0:1B
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/VYaGeWkZ2DPxnfOizvMWLQkC8Bs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:429c::/31
Signature Algorithm: sha256WithRSAEncryption
69:7f:d7:d1:a5:fb:26:65:0b:0b:2f:05:59:25:5b:07:d9:97:
7e:14:c5:3c:92:56:79:18:e0:ca:b5:f3:82:e5:63:cb:72:1c:
a1:1f:3f:38:98:0f:53:c0:a0:ea:ba:38:7f:ea:f1:be:d1:89:
a3:f1:18:bb:6b:6e:1e:aa:b0:24:b9:58:c7:3f:2b:11:13:cd:
1d:9d:01:36:9c:61:be:39:bd:a7:80:8c:3d:5c:f6:43:a2:6e:
e4:60:99:de:2a:ca:f0:6e:b7:b4:9a:47:ac:85:c2:cc:1e:e9:
34:f4:ae:c3:63:f2:d5:35:10:2c:02:c5:c1:19:21:e1:a2:76:
85:a8:fc:48:9a:1b:84:eb:c0:09:22:e1:7f:49:cf:06:fb:66:
cd:41:07:b4:7c:3c:6b:a3:be:da:2f:2b:8e:89:39:a9:4e:2d:
0f:73:40:d7:9f:09:92:b1:1e:d5:14:0c:b0:78:bf:9c:10:8e:
c7:f8:d7:77:94:0f:8a:02:b6:04:49:86:d3:92:aa:0b:7c:4e:
d9:15:63:9c:1d:d8:3a:39:79:fb:06:23:33:35:b7:a4:8a:9a:
30:dc:2a:9b:a9:70:e7:cb:01:6b:dc:33:85:5f:e2:e3:fe:8c:
8c:87:b8:be:df:f5:55:4f:9f:ce:08:a8:45:51:48:fc:4c:14:
d0:ac:25:9c
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF
RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw
MTQ2MzVaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKDU1ODY4Njc5NjkxOUQ4
MzNGMTlERjNBMkNFRjMxNjJEMDkwMkYwMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGo7aq1OqhZGb6x4K/sA/Qtvln2S+YylxvyH8QjlEfDRyZ0XYk
a3MAz6Vsj3D2JCIqkN5X7ufx4k0o6yi3IvIJ1h9ITf+tLQA8bDTw5jmfo8kdRDOk
SJis+8PWJmT4s6xoE66Gng6KPWLUFAPDITI0lOGmU/4LqVvwL1Cp96H6SeXXJWc3
yNSGLOqaimPXczwOcP5qSK3va/hZXVdYabiG16bF3KZs1DM1/NxJTqRPI7UrW+6f
i/Czj3p+dwZFDORDct49jujdiwATzXSVZ1Q4ENNlZRpgEYjjUiRn1n1uI+HKlHd6
WVzPDcx7g8JKJRgvSaFgdsnBJHbMYXnXg6xbAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUVYaGeWkZ2DPxnfOizvMWLQkC8BswHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7
j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3
Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvVllhR2VXa1oyRFB4
bmZPaXp2TVdMUWtDOEJzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFASQKQpwwDQYJKoZIhvcNAQELBQADggEBAGl/19Gl+yZlCwsvBVklWwfZl34U
xTySVnkY4Mq184LlY8tyHKEfPziYD1PAoOq6OH/q8b7RiaPxGLtrbh6qsCS5WMc/
KxETzR2dATacYb45vaeAjD1c9kOibuRgmd4qyvBut7SaR6yFwswe6TT0rsNj8tU1
ECwCxcEZIeGidoWo/EiaG4TrwAki4X9Jzwb7Zs1BB7R8PGujvtovK46JOalOLQ9z
QNefCZKxHtUUDLB4v5wQjsf413eUD4oCtgRJhtOSqgt8TtkVY5wd2Do5efsGIzM1
t6SKmjDcKpupcOfLAWvcM4Vf4uP+jIyHuL7f9VVPn84IqEVRSPxMFNCsJZw=
-----END CERTIFICATE-----
Generated at Mon Jun 9 19:49:41 2025 by rpki-client