Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/qclyFmCeB17UHVxq71Tpg1sgQyo.roa
File: qclyFmCeB17UHVxq71Tpg1sgQyo.roa (raw, json)
Hash identifier: yBogXmlC9p9F6kG48KRTA8Bdv06GAkMC3TbX4WHum+E=
Subject key identifier: A9:C9:72:16:60:9E:07:5E:D4:1D:5C:6A:EF:54:E9:83:5B:20:43:2A
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 40
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/qclyFmCeB17UHVxq71Tpg1sgQyo.roa
Signing time: Tue 27 May 2025 08:25:30 +0000
ROA not before: Tue 27 May 2025 08:25:30 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 9808
IP address blocks: 240a:42c0::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:25:30 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=A9C97216609E075ED41D5C6AEF54E9835B20432A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:57:75:77:2e:ba:c7:d3:72:35:1a:f2:50:
3d:25:0c:22:bc:0a:71:ac:9f:e9:11:cc:b4:06:34:
e9:41:68:03:16:b7:ef:9f:e5:b8:12:c3:25:c6:d5:
cd:f3:72:a0:17:e1:a5:07:99:c1:4a:e7:63:6e:ae:
71:76:80:38:2d:46:0b:94:eb:bc:bb:8a:de:8a:ac:
b1:46:28:8f:d0:ba:f4:f0:10:3d:09:1f:19:09:c7:
52:33:df:04:09:03:60:aa:da:9d:9e:33:73:45:23:
b5:4b:e1:e3:cf:7c:2d:84:d6:a5:38:30:ca:90:19:
4a:f8:b1:03:f2:5c:97:d8:d7:fa:a7:2e:62:6c:ea:
04:32:3b:43:d7:d4:eb:7c:9a:12:cd:0e:1b:a2:07:
d1:cd:76:17:15:55:97:a1:a1:2d:bb:62:1e:ae:af:
d7:ef:63:be:0c:ea:00:5a:6a:7e:66:a7:91:b1:77:
b3:ce:32:b6:af:55:38:56:0d:20:03:5d:62:1c:9c:
f2:71:97:05:6b:21:70:14:34:16:45:6f:68:83:7f:
11:e8:14:76:3c:67:0d:e9:e2:58:35:56:1e:26:c0:
17:9d:1e:3c:13:13:dc:c2:7b:59:eb:08:0c:f1:ff:
65:5d:b1:46:a8:5e:3f:60:20:83:6c:f2:8d:d0:60:
07:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C9:72:16:60:9E:07:5E:D4:1D:5C:6A:EF:54:E9:83:5B:20:43:2A
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/qclyFmCeB17UHVxq71Tpg1sgQyo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:42c0::/31
Signature Algorithm: sha256WithRSAEncryption
81:af:14:55:54:76:f8:4d:f7:88:98:fb:64:0a:84:18:16:e3:
62:8d:7b:5b:7c:89:e2:1a:13:46:cf:94:df:21:4d:4e:7d:91:
4c:ae:91:63:2a:b2:66:3e:32:cb:b7:74:f2:eb:ff:cd:3a:13:
bd:17:36:3f:e7:f4:99:e7:82:d6:cd:c9:b0:b5:d5:f3:d7:50:
18:97:f3:d7:fe:50:22:bd:1c:4d:36:9d:88:63:f7:00:c3:d6:
00:ef:13:b2:84:57:fd:5a:a1:60:e9:1f:aa:c9:b0:05:ac:fb:
02:f9:23:64:ac:55:f4:32:77:82:59:3b:12:a0:ba:2b:69:53:
80:76:07:20:35:f8:1d:e7:7e:d1:75:93:57:18:b0:73:29:96:
39:d7:de:17:df:33:35:21:79:b1:4e:b5:9a:12:20:73:4b:b8:
8f:3f:d6:3f:0b:90:67:56:34:1a:c3:44:f2:d9:33:57:73:12:
36:55:07:4d:b2:6e:15:f9:1b:3d:35:e0:b8:e3:8c:90:26:14:
7e:9b:cc:5e:62:b3:c1:d1:ab:9c:36:74:83:6c:c7:53:f0:e6:
14:e2:17:cc:f2:20:df:f2:b0:e0:64:02:70:2f:3d:72:0b:d2:
b6:dd:03:79:9d:53:a8:5b:40:a8:b8:2d:e5:7e:67:8c:7e:64:
75:99:81:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:21:45 2025 by rpki-client