Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/eLrXQ57ejOuVmcF3c7oJ-Rwg1yw.roa
File: eLrXQ57ejOuVmcF3c7oJ-Rwg1yw.roa (raw, json)
Hash identifier: wDYiB9vEDoWVVpBFrX7fJXvyF9LuVGXjJySkoc5K0Vg=
Subject key identifier: 78:BA:D7:43:9E:DE:8C:EB:95:99:C1:77:73:BA:09:F9:1C:20:D7:2C
Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Certificate serial: 0CBB
Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/eLrXQ57ejOuVmcF3c7oJ-Rwg1yw.roa
Signing time: Wed 09 Jul 2025 10:32:28 +0000
ROA not before: Wed 09 Jul 2025 10:32:28 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4837
IP address blocks: 2407:8f40:2::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3259 (0xcbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Validity
Not Before: Jul 9 10:32:28 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=78BAD7439EDE8CEB9599C17773BA09F91C20D72C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:54:84:fd:c9:a2:62:74:f8:b4:20:24:a6:4f:
20:ea:0a:98:62:f8:87:db:bf:b8:4a:01:13:53:9d:
91:57:51:ff:27:21:83:f7:9c:98:eb:40:ef:50:1b:
d3:b3:74:2e:70:27:c0:71:fc:3c:50:bc:d4:0d:41:
3b:d1:61:31:6f:d6:33:a4:e3:a6:70:08:8f:d1:a3:
37:50:fb:50:a8:40:a3:94:b4:34:20:0e:9d:e7:dd:
b5:ea:20:2b:20:4a:2a:fe:8f:80:3f:e6:75:cb:97:
ce:ac:88:c2:05:2f:13:47:8d:91:d9:4f:f6:e2:50:
fc:3b:e5:e9:28:a0:2f:a8:dc:71:e4:da:bc:63:28:
3c:b1:b6:7d:fa:95:9a:29:17:e2:96:8f:c3:b3:92:
04:ef:c8:ad:f6:b3:90:cc:fd:e7:64:db:fc:e2:7d:
6d:64:24:0f:16:73:cb:4a:bb:a0:ce:50:d4:56:0c:
7e:92:64:65:3b:1c:af:75:1b:df:05:c3:a9:37:a4:
92:5d:95:1f:81:75:1d:ef:83:71:5d:ff:8b:91:43:
33:33:31:31:15:43:13:40:33:45:b2:90:8b:06:70:
9b:63:15:83:5c:70:a5:ca:a3:16:6a:3e:5d:48:0f:
ad:05:b5:73:5b:77:c6:f7:85:e5:ba:a9:ed:65:07:
ca:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BA:D7:43:9E:DE:8C:EB:95:99:C1:77:73:BA:09:F9:1C:20:D7:2C
X509v3 Authority Key Identifier:
keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/eLrXQ57ejOuVmcF3c7oJ-Rwg1yw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:8f40:2::/48
Signature Algorithm: sha256WithRSAEncryption
16:cd:82:bb:02:85:0d:5b:31:5c:c0:dd:1b:a1:55:59:7b:9b:
cc:01:70:1e:cb:a9:95:89:7e:5e:6b:b7:62:11:15:a1:97:4f:
7c:3b:93:56:0c:f8:02:51:2f:0e:72:e3:ef:48:9a:da:d9:ff:
87:e8:d0:9e:98:84:93:77:77:8b:e3:a8:c6:d5:6e:e0:8b:38:
44:09:c2:ae:77:7c:03:f2:67:c5:29:b5:10:ce:45:a4:a5:9c:
47:61:6d:66:3e:34:12:8c:c3:f5:b5:3d:06:2c:bd:39:02:80:
7f:ce:28:0b:50:01:cd:a6:42:66:2c:1a:9a:8e:01:c4:ac:14:
24:57:79:88:e8:c8:43:14:29:ec:61:b4:f3:67:98:1d:4b:1c:
11:9a:6c:95:7f:bf:8a:fa:61:21:00:7b:7f:9b:5e:dc:be:b0:
78:eb:90:7c:25:67:c9:2b:70:9b:09:7e:5d:ec:34:04:84:bf:
13:d2:f8:ce:a1:98:ab:32:c8:a7:2d:ed:84:68:f9:04:84:92:
f4:d6:bc:37:18:d3:2d:c5:9d:9c:29:c4:67:65:a6:13:08:3f:
2c:8d:a1:b6:c6:96:0d:88:19:34:c6:84:98:44:b7:e6:8a:9d:
ec:03:d3:fb:c3:2a:bd:1b:35:b7:74:58:56:5a:b9:1c:b9:1e:
76:48:a3:1f
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICDLswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ix
NjcwN0VBRjBCREZEMTMyNkFGRDlCREVDNkFGRkE2RTYzQkE5ODAeFw0yNTA3MDkx
MDMyMjhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc4QkFENzQzOUVERThD
RUI5NTk5QzE3NzczQkEwOUY5MUMyMEQ3MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD2VIT9yaJidPi0ICSmTyDqCphi+Ifbv7hKARNTnZFXUf8nIYP3
nJjrQO9QG9OzdC5wJ8Bx/DxQvNQNQTvRYTFv1jOk46ZwCI/RozdQ+1CoQKOUtDQg
Dp3n3bXqICsgSir+j4A/5nXLl86siMIFLxNHjZHZT/biUPw75ekooC+o3HHk2rxj
KDyxtn36lZopF+KWj8OzkgTvyK32s5DM/edk2/zifW1kJA8Wc8tKu6DOUNRWDH6S
ZGU7HK91G98Fw6k3pJJdlR+BdR3vg3Fd/4uRQzMzMTEVQxNAM0WykIsGcJtjFYNc
cKXKoxZqPl1ID60FtXNbd8b3heW6qe1lB8qZAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUeLrXQ57ejOuVmcF3c7oJ+Rwg1ywwHwYDVR0jBBgwFoAUyxZwfq8L39Eyav2b
3sav+m5jupgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
NS95eFp3ZnE4TDM5RXlhdjJiM3Nhdi1tNWp1cGcuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3l4WndmcThMMzlFeWF2MmIzc2F2LW01anVwZy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTUvZUxyWFE1N2VqT3VW
bWNGM2M3b0otUndnMXl3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACQHj0AAAjANBgkqhkiG9w0BAQsFAAOCAQEAFs2CuwKFDVsxXMDdG6FVWXub
zAFwHsuplYl+Xmu3YhEVoZdPfDuTVgz4AlEvDnLj70ia2tn/h+jQnpiEk3d3i+Oo
xtVu4Is4RAnCrnd8A/JnxSm1EM5FpKWcR2FtZj40EozD9bU9Biy9OQKAf84oC1AB
zaZCZiwamo4BxKwUJFd5iOjIQxQp7GG082eYHUscEZpslX+/ivphIQB7f5te3L6w
eOuQfCVnyStwmwl+Xew0BIS/E9L4zqGYqzLIpy3thGj5BISS9Na8NxjTLcWdnCnE
Z2WmEwg/LI2htsaWDYgZNMaEmES35oqd7APT+8MqvRs1t3RYVlq5HLkedkijHw==
-----END CERTIFICATE-----
Generated at Sun Jul 20 19:04:57 2025 by rpki-client