Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/yKBP04h8aBmYOQTVHJ4Cs0uLu4E.roa
File: yKBP04h8aBmYOQTVHJ4Cs0uLu4E.roa (raw, json)
Hash identifier: di2H7lyXM4uJfb1VzsxNdbXEMP3hncixK4o6Lop/7EI=
Subject key identifier: C8:A0:4F:D3:88:7C:68:19:98:39:04:D5:1C:9E:02:B3:4B:8B:BB:81
Certificate issuer: /CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
Certificate serial: 1F73
Authority key identifier: 03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/yKBP04h8aBmYOQTVHJ4Cs0uLu4E.roa
Signing time: Fri 17 Jan 2025 01:29:10 +0000
ROA not before: Fri 17 Jan 2025 01:29:10 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 131484
IP address blocks: 2406:d140::/32 maxlen: 48
2406:d140:8000::/34 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8051 (0x1f73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
Validity
Not Before: Jan 17 01:29:10 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C8A04FD3887C6819983904D51C9E02B34B8BBB81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:4f:1f:c2:0a:14:9f:f1:ad:d6:4f:a6:0d:
2d:16:0b:28:a0:f7:24:99:8d:9c:90:55:ff:a4:1c:
f8:8e:45:35:13:09:51:0e:3f:96:7b:b0:ce:ba:97:
af:03:87:de:3c:1a:b6:b8:fa:6e:c3:da:4e:de:4a:
9d:8f:f4:cb:2a:1d:0d:da:04:ae:34:a4:c2:6c:6e:
55:cb:36:ee:c9:22:25:8e:54:9a:b0:8a:fd:b8:f8:
2e:7e:cc:30:be:ce:d5:6c:e1:ec:37:f8:db:64:c5:
98:40:9a:f8:3a:fb:38:d1:9a:5d:d6:2b:df:55:5e:
d2:f7:8d:2b:e8:6a:63:89:5f:a9:cf:ef:eb:13:08:
2e:fa:37:f4:bd:4b:3f:ba:fb:c8:ff:aa:c7:77:da:
f1:4f:6b:df:de:40:ba:61:75:f3:09:7b:7e:ea:1e:
40:c2:2b:eb:4a:39:f0:78:a3:53:94:d0:e0:65:c6:
04:61:d5:47:62:dd:87:a0:73:e4:92:b6:1b:8c:73:
17:40:08:9a:52:e0:61:bd:65:39:be:00:79:c0:a9:
e0:c5:43:a5:02:2d:d7:e8:aa:8e:8b:5b:72:b3:38:
a5:2b:28:af:82:15:ac:d8:e4:79:99:2f:f4:8e:cd:
4c:74:c2:dd:e1:3a:84:2e:28:c6:c2:72:07:18:ee:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A0:4F:D3:88:7C:68:19:98:39:04:D5:1C:9E:02:B3:4B:8B:BB:81
X509v3 Authority Key Identifier:
keyid:03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/yKBP04h8aBmYOQTVHJ4Cs0uLu4E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:d140::/32
Signature Algorithm: sha256WithRSAEncryption
22:41:32:4d:d5:2c:71:7f:d6:16:82:05:d7:3d:eb:30:bb:b2:
59:15:ad:8a:04:fe:94:03:0d:9c:94:89:73:32:90:21:11:a7:
78:46:34:20:3d:85:2e:d0:94:90:2e:59:5d:c6:9a:68:92:ad:
f1:7e:c6:66:83:31:ac:22:fb:64:bc:e2:ad:43:4c:06:2c:f5:
c2:d6:51:32:3f:e6:67:d2:aa:1f:8f:c3:4d:aa:83:ed:20:57:
82:b4:41:45:28:6e:68:63:01:52:6e:ca:ba:fa:c0:24:7f:8c:
16:51:8f:81:11:11:68:7b:77:03:a0:57:61:ef:ee:3f:f5:16:
95:53:a2:18:db:f0:36:a1:1b:b3:b0:90:00:5f:fb:4a:cd:11:
9b:f6:59:90:85:7f:44:c2:b8:bf:ef:b7:0c:89:10:ec:21:82:
08:12:45:ab:0b:2f:ca:9e:b2:28:6b:95:38:d0:4e:f7:31:eb:
ce:83:7e:e2:f3:54:df:8b:96:e2:3d:f7:7c:d1:98:74:ed:55:
62:83:bd:f6:88:60:5c:9b:f0:80:cf:6b:08:91:71:52:c4:78:
9f:44:2f:35:b8:c2:f0:24:64:0c:5b:8b:45:f6:2f:d1:1f:39:
a0:5e:29:95:95:9b:10:20:58:89:77:90:b2:7c:bd:5d:59:3d:
6d:ca:52:11
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICH3MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDNG
MDc1RDlDNkYxOERDMDlCREE2MkI3MDg3RUE4MERDNUI3MTFDNTAeFw0yNTAxMTcw
MTI5MTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM4QTA0RkQzODg3QzY4
MTk5ODM5MDRENTFDOUUwMkIzNEI4QkJCODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC20E8fwgoUn/Gt1k+mDS0WCyig9ySZjZyQVf+kHPiORTUTCVEO
P5Z7sM66l68Dh948Gra4+m7D2k7eSp2P9MsqHQ3aBK40pMJsblXLNu7JIiWOVJqw
iv24+C5+zDC+ztVs4ew3+NtkxZhAmvg6+zjRml3WK99VXtL3jSvoamOJX6nP7+sT
CC76N/S9Sz+6+8j/qsd32vFPa9/eQLphdfMJe37qHkDCK+tKOfB4o1OU0OBlxgRh
1Udi3Yegc+SSthuMcxdACJpS4GG9ZTm+AHnAqeDFQ6UCLdfoqo6LW3KzOKUrKK+C
FazY5HmZL/SOzUx0wt3hOoQuKMbCcgcY7mV9AgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUyKBP04h8aBmYOQTVHJ4Cs0uLu4EwHwYDVR0jBBgwFoAUA/B12cbxjcCb2mK3
CH6oDcW3EcUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0
MC9BX0IxMmNieGpjQ2IybUszQ0g2b0RjVzNFY1UuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0FfQjEyY2J4amNDYjJtSzNDSDZvRGNXM0VjVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDAveUtCUDA0aDhhQm1Z
T1FUVkhKNENzMHVMdTRFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQG0UAwDQYJKoZIhvcNAQELBQADggEBACJBMk3VLHF/1haCBdc96zC7slkV
rYoE/pQDDZyUiXMykCERp3hGNCA9hS7QlJAuWV3GmmiSrfF+xmaDMawi+2S84q1D
TAYs9cLWUTI/5mfSqh+Pw02qg+0gV4K0QUUobmhjAVJuyrr6wCR/jBZRj4EREWh7
dwOgV2Hv7j/1FpVTohjb8DahG7OwkABf+0rNEZv2WZCFf0TCuL/vtwyJEOwhgggS
RasLL8qesihrlTjQTvcx686DfuLzVN+LluI993zRmHTtVWKDvfaIYFyb8IDPawiR
cVLEeJ9ELzW4wvAkZAxbi0X2L9EfOaBeKZWVmxAgWIl3kLJ8vV1ZPW3KUhE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:20 2025 by rpki-client