Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/0TndRNQEMe_DTlEZVTo6v6Hslf4.roa
File: 0TndRNQEMe_DTlEZVTo6v6Hslf4.roa (raw, json)
Hash identifier: VlLc4HVSlHUJ6GzZC+Ze6bO6lva8zIX6lkxtt7eKg1k=
Subject key identifier: D1:39:DD:44:D4:04:31:EF:C3:4E:51:19:55:3A:3A:BF:A1:EC:95:FE
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B78
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0TndRNQEMe_DTlEZVTo6v6Hslf4.roa
Signing time: Mon 03 Feb 2025 03:25:39 +0000
ROA not before: Mon 03 Feb 2025 03:25:39 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2936 (0xb78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 03:25:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D139DD44D40431EFC34E5119553A3ABFA1EC95FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:f6:24:c5:53:4b:8f:99:55:31:58:f3:b1:
bc:4a:f6:db:69:ba:4c:51:f4:56:72:a3:30:24:83:
97:b9:c3:e1:e8:25:16:67:b1:3b:b1:a8:09:5d:b0:
30:6a:54:03:79:10:e3:d8:ea:fc:17:20:0c:f5:ef:
83:af:40:3a:4a:8f:85:ca:20:06:2b:01:54:4e:12:
93:34:38:a9:8c:31:7b:c3:2e:7e:13:a9:e2:e7:7a:
c7:3e:75:be:bf:9d:c5:4a:b9:4b:1b:1b:37:39:d1:
9a:18:7c:b3:f3:67:2a:6b:bd:06:d7:b9:5c:79:ed:
9f:ff:7c:64:c4:8d:aa:ae:c5:80:55:b2:ec:53:0e:
b0:3e:32:85:fa:4b:01:27:e3:87:d9:2d:54:65:74:
ae:f2:2a:45:06:ef:8d:ba:a0:17:02:a9:9c:47:2b:
b6:79:e5:7d:5b:a7:57:83:ba:fe:cc:42:75:e1:5e:
19:4a:f2:17:ac:15:12:ca:5b:06:5d:bb:2f:38:a1:
14:96:91:46:7c:6d:36:d6:1c:a0:a8:0d:9c:d8:cd:
64:e1:81:0d:d3:d8:3b:8a:fc:b5:a0:33:39:a3:4c:
2e:42:b0:70:45:9c:e0:37:19:c2:44:31:8f:30:d6:
c3:90:24:5c:c1:9c:93:48:80:e9:ba:49:2b:5f:c0:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:39:DD:44:D4:04:31:EF:C3:4E:51:19:55:3A:3A:BF:A1:EC:95:FE
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0TndRNQEMe_DTlEZVTo6v6Hslf4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
53:97:85:72:01:2d:0d:13:af:e9:5f:ad:c0:d0:7a:fd:5e:94:
ec:68:e0:f6:ab:a7:67:f3:f7:7b:52:d1:8f:e2:d9:ee:b2:82:
ba:db:45:b0:18:90:ea:1a:7f:7a:0f:95:76:3a:8d:d5:07:23:
5f:92:ed:17:3c:a6:4d:90:d1:5d:8c:ca:f6:c2:1d:2b:b2:d7:
ee:f7:fb:b6:e0:5a:5f:94:0f:54:6d:f7:75:f9:bc:29:60:84:
fa:1c:9b:80:03:16:21:40:71:ef:ed:34:a7:32:c2:03:a8:67:
e6:9c:55:55:db:52:77:42:ab:2f:cf:39:22:0f:59:b3:a0:78:
ad:39:c2:03:16:db:3d:bb:3f:e1:5a:82:f2:10:3c:5c:4f:61:
4d:2e:30:8a:fb:02:03:2f:f1:ab:49:bb:8e:c4:8a:a7:5a:47:
dc:10:1c:55:74:87:d9:2d:c7:50:aa:41:3a:35:b8:f7:45:f2:
34:e9:6d:8b:03:61:31:37:11:90:54:92:7a:5f:76:c6:44:c1:
b5:86:e5:b6:18:00:83:ac:f0:4f:f8:07:b7:ab:f1:b8:c0:13:
c4:ae:f6:0d:c4:61:d2:54:8b:25:86:e5:2a:9a:a8:57:4c:b9:
f3:39:67:1f:a5:d7:3b:c1:ab:72:03:eb:ee:49:a3:8b:26:a3:
95:23:86:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:10:47 2025 by rpki-client