Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/aUfFArMMGfnSmYqIG04h9NgqyTs.roa
File: aUfFArMMGfnSmYqIG04h9NgqyTs.roa (raw, json)
Hash identifier: YCOIn79L9+QY3ysaFZyoKSOR+zNxNJDXbZdqOPzeRBY=
Subject key identifier: 69:47:C5:02:B3:0C:19:F9:D2:99:8A:88:1B:4E:21:F4:D8:2A:C9:3B
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 04
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/aUfFArMMGfnSmYqIG04h9NgqyTs.roa
Signing time: Tue 27 May 2025 07:47:49 +0000
ROA not before: Tue 27 May 2025 07:47:49 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 146788
IP address blocks: 240a:4040::/27 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 07:47:49 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=6947C502B30C19F9D2998A881B4E21F4D82AC93B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:fc:4a:3d:c9:40:79:dc:88:79:57:cf:19:
98:63:76:ad:db:fa:d9:d0:97:f8:9e:6b:11:db:07:
b6:fb:92:ef:6e:86:e1:65:82:00:f3:2a:a7:a4:6f:
fb:ea:22:34:23:d9:cc:80:66:36:ba:cb:cc:b8:b1:
e3:ed:09:47:ac:2f:dd:d5:cd:5f:6d:e6:ec:da:9f:
4d:d6:7f:2d:30:16:37:42:fc:a0:3e:01:2f:f2:92:
83:a6:db:e6:61:99:1b:11:b2:9d:9f:a2:06:0f:77:
d3:3d:13:40:52:b1:ad:04:3a:33:a2:be:66:2d:ed:
a0:ff:97:61:f0:7f:f5:d6:ed:d6:fa:8f:61:96:dc:
bd:62:05:31:6f:cf:bb:0b:72:e3:94:72:30:f3:f0:
17:29:75:bc:91:f8:98:1c:4b:0b:f3:4b:75:38:f5:
78:4e:ad:ce:f0:39:3a:8a:93:eb:03:28:9f:af:30:
c0:18:b8:37:5c:93:aa:f9:bc:0b:f8:fb:57:ca:47:
9c:4b:7f:31:69:be:10:ca:17:b0:e8:0a:cd:42:fb:
67:09:05:bb:4b:22:b1:b9:29:7a:0d:e0:87:39:8d:
bb:eb:96:c8:fc:48:05:7f:d2:e5:41:23:55:6a:69:
d2:ef:d9:2b:95:ae:1e:e6:99:aa:30:e1:00:31:a0:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:47:C5:02:B3:0C:19:F9:D2:99:8A:88:1B:4E:21:F4:D8:2A:C9:3B
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/aUfFArMMGfnSmYqIG04h9NgqyTs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:4040::/27
Signature Algorithm: sha256WithRSAEncryption
a2:b7:ce:6d:d9:5a:39:7d:bc:0d:01:7a:03:85:da:9d:a9:71:
7d:08:e6:e1:32:f8:1a:bf:77:09:fe:48:14:c7:13:1c:50:60:
20:dd:f4:f4:0d:1b:b9:9f:8c:4f:3c:e7:ae:9b:1b:1b:c2:01:
a5:50:0c:69:4c:e1:57:76:3e:9a:85:62:7d:c6:aa:69:35:c6:
15:d9:4d:1d:45:2a:81:56:74:96:a0:06:76:65:51:a0:ff:8b:
a3:9f:3b:a8:54:c9:e8:4c:82:03:63:2e:d1:46:7e:7b:9e:b0:
4d:6f:5e:0b:2b:2c:80:52:7f:d8:25:ef:69:40:83:71:5a:18:
9a:b5:23:7c:ab:58:be:c9:99:6b:52:77:01:ff:04:5a:a5:b0:
d0:2f:7b:a0:93:8f:1b:4f:ea:0d:3d:e4:9a:5a:bb:9d:98:de:
71:3e:05:92:ed:c0:4c:33:b5:86:6e:96:37:ce:7e:7f:4a:37:
66:cd:7c:75:e9:aa:44:58:52:b7:d3:f0:ac:3a:aa:fb:67:a7:
96:db:b7:b0:89:36:5a:6e:09:44:d9:de:ec:80:43:0d:7a:18:
35:9d:d6:28:bb:cb:a7:52:fd:e8:3c:ff:4d:8b:21:66:0b:f5:
fd:94:88:82:26:23:86:90:9b:75:3c:37:1c:2a:ce:a1:6f:a7:
70:d1:f5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:17:47 2025 by rpki-client