Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/zhixem9-6PYgJNY_w_1_B0jvDlM.roa
File: zhixem9-6PYgJNY_w_1_B0jvDlM.roa (raw, json)
Hash identifier: E4u11bMmTcGT2Ci1KClDnhmnBBEiHD/3MK910DyWFwA=
Subject key identifier: CE:18:B1:7A:6F:7E:E8:F6:20:24:D6:3F:C3:FD:7F:07:48:EF:0E:53
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 186D
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/zhixem9-6PYgJNY_w_1_B0jvDlM.roa
Signing time: Fri 17 Jan 2025 01:25:03 +0000
ROA not before: Fri 17 Jan 2025 01:25:03 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59803
IP address blocks: 2406:1e80::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6253 (0x186d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:03 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CE18B17A6F7EE8F62024D63FC3FD7F0748EF0E53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:51:e1:f8:20:11:74:52:b9:dc:5a:45:97:
2d:3b:68:a5:c9:e7:4b:8c:85:36:54:56:d3:84:4f:
96:87:a4:e1:7d:d2:c2:aa:3c:bd:6e:69:6e:33:2f:
7c:a2:7a:b2:d4:80:a9:99:b7:0b:8e:c4:95:a7:f6:
93:38:a4:1c:60:1d:ba:ab:ae:f2:3c:a5:1f:62:81:
1c:8c:76:7e:e4:b2:90:8b:74:d1:ff:89:b7:aa:82:
0e:a6:ae:c5:7c:73:d3:d1:ed:cb:eb:cb:dc:4f:c4:
67:d4:c8:91:44:a9:ba:e6:08:7c:fe:2f:35:5d:5b:
2d:2d:b9:ff:5f:04:8c:93:4f:85:8d:f2:f0:b0:73:
b8:25:1f:79:be:5a:b3:48:d0:7e:27:97:6b:4e:f6:
97:11:00:d9:d6:02:80:c3:d8:8b:80:88:1c:fd:b4:
07:24:0e:cb:b9:05:6f:88:a4:22:2c:2b:61:23:d2:
ca:a4:4b:41:ca:78:aa:7a:71:d0:ff:19:06:18:e4:
de:08:9e:87:b8:8c:65:22:1b:66:ec:b9:b4:af:ad:
16:ec:ed:50:a4:f2:79:5a:88:02:b8:9e:63:51:cb:
18:a0:75:80:d7:a5:de:a5:3b:53:b2:6e:95:da:dd:
e7:57:1d:25:fd:3e:52:79:d1:33:35:79:06:24:ff:
93:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:18:B1:7A:6F:7E:E8:F6:20:24:D6:3F:C3:FD:7F:07:48:EF:0E:53
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/zhixem9-6PYgJNY_w_1_B0jvDlM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:1e80::/32
Signature Algorithm: sha256WithRSAEncryption
77:ad:d0:01:26:45:a0:d0:2b:26:10:1a:ef:4f:9e:0f:e4:de:
4b:a7:11:20:2a:48:1f:80:9b:97:7c:b8:f7:15:25:a5:f7:bf:
61:5d:49:e5:ed:95:71:a4:a7:fd:0b:8d:1f:08:9f:1c:c4:b3:
f7:98:c6:9e:f3:fa:77:05:69:f5:98:8a:fc:dc:84:ba:3f:b6:
8a:52:7e:e1:59:2e:46:53:fe:36:b4:a9:26:0a:29:56:eb:46:
ec:39:bc:08:eb:d6:fd:f1:ae:0f:b6:4f:ea:a2:a1:49:e4:89:
f2:2c:0d:40:87:fd:2f:2c:42:c8:03:c0:27:91:3d:15:fa:98:
d1:e9:87:e2:1e:28:22:e1:c9:9c:b4:bb:9e:05:a3:ca:28:e8:
ee:9e:c2:ee:bc:ee:40:62:bd:e9:dd:70:5b:e3:b3:63:d5:47:
5b:28:b4:53:df:56:d1:ce:89:2d:26:d0:d7:81:e4:40:04:e4:
21:b3:b5:13:89:a2:81:b0:6e:82:27:7d:8d:ce:53:56:d3:a7:
6b:b1:6b:40:84:c1:2a:01:32:30:bb:53:d3:b2:d1:72:ca:cd:
72:c5:78:4f:73:c2:7d:5f:59:2d:e4:28:02:7e:f8:96:93:32:
47:df:60:14:db:75:b7:00:40:2f:4e:86:29:ce:b9:bb:e6:39:
dd:b0:37:bc
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICGG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI1MDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKENFMThCMTdBNkY3RUU4
RjYyMDI0RDYzRkMzRkQ3RjA3NDhFRjBFNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFllHh+CARdFK53FpFly07aKXJ50uMhTZUVtOET5aHpOF90sKq
PL1uaW4zL3yierLUgKmZtwuOxJWn9pM4pBxgHbqrrvI8pR9igRyMdn7kspCLdNH/
ibeqgg6mrsV8c9PR7cvry9xPxGfUyJFEqbrmCHz+LzVdWy0tuf9fBIyTT4WN8vCw
c7glH3m+WrNI0H4nl2tO9pcRANnWAoDD2IuAiBz9tAckDsu5BW+IpCIsK2Ej0sqk
S0HKeKp6cdD/GQYY5N4Inoe4jGUiG2bsubSvrRbs7VCk8nlaiAK4nmNRyxigdYDX
pd6lO1OybpXa3edXHSX9PlJ50TM1eQYk/5M/AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUzhixem9+6PYgJNY/w/1/B0jvDlMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3poaXhlbTktNlBZZ0pO
WV93XzFfQjBqdkRsTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD
BQAkBh6AMA0GCSqGSIb3DQEBCwUAA4IBAQB3rdABJkWg0CsmEBrvT54P5N5LpxEg
KkgfgJuXfLj3FSWl979hXUnl7ZVxpKf9C40fCJ8cxLP3mMae8/p3BWn1mIr83IS6
P7aKUn7hWS5GU/42tKkmCilW60bsObwI69b98a4Ptk/qoqFJ5InyLA1Ah/0vLELI
A8AnkT0V+pjR6YfiHigi4cmctLueBaPKKOjunsLuvO5AYr3p3XBb47Nj1UdbKLRT
31bRzoktJtDXgeRABOQhs7UTiaKBsG6CJ32NzlNW06drsWtAhMEqATIwu1PTstFy
ys1yxXhPc8J9X1kt5CgCfviWkzJH32AU23W3AEAvToYpzrm75jndsDe8
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:23 2025 by rpki-client