Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/0wEVJ2YLD8loxqS_3sbYb1_8_ks.roa
File: 0wEVJ2YLD8loxqS_3sbYb1_8_ks.roa (raw, json)
Hash identifier: gGFf+Bh2pUKyDicCEQfPF81PI6uUdZhVVfCcyaVjvxo=
Subject key identifier: D3:01:15:27:66:0B:0F:C9:68:C6:A4:BF:DE:C6:D8:6F:5F:FC:FE:4B
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0DCA
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0wEVJ2YLD8loxqS_3sbYb1_8_ks.roa
Signing time: Sun 09 Feb 2025 07:55:53 +0000
ROA not before: Sun 09 Feb 2025 07:55:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3530 (0xdca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 9 07:55:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D3011527660B0FC968C6A4BFDEC6D86F5FFCFE4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e2:f1:9e:7f:d8:91:79:c2:79:13:f8:56:2c:
40:3e:44:15:43:a7:23:07:df:5e:cd:e0:54:f3:90:
e0:19:01:33:3a:3d:72:72:e6:61:00:1d:a9:7e:b5:
f2:b1:76:9f:7a:f3:6f:9e:76:70:f7:e2:64:62:50:
d4:93:f6:eb:2a:16:b1:09:b5:81:b2:d7:e7:72:bc:
0a:57:d7:f8:45:93:95:dc:b2:97:3e:f3:98:92:ba:
90:10:57:07:7c:f9:f6:03:99:0e:bf:68:f5:4e:35:
79:f7:50:42:07:b5:5e:fc:b8:9c:62:f2:63:0b:25:
e6:35:d2:15:80:e9:45:71:bd:21:0c:93:28:16:1d:
7c:98:af:67:53:1f:26:03:9d:f5:49:95:5c:d7:32:
60:7d:12:80:1e:03:1e:c9:76:75:ef:0d:bb:3d:53:
e7:3b:cd:75:e3:21:51:43:a6:60:b8:98:df:c6:8d:
45:bf:2d:2f:d3:f4:9d:7f:ba:ba:b3:e0:53:82:47:
f8:17:0a:71:d8:08:5a:d5:68:b9:33:b4:5a:db:9a:
83:ba:22:85:21:e2:f3:9b:c9:c8:ce:94:8b:b2:aa:
71:5c:ed:68:03:b2:5f:b0:86:c6:68:44:c0:9a:6e:
5a:46:13:b5:44:f2:5d:17:9c:ed:86:9d:01:fc:91:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:01:15:27:66:0B:0F:C9:68:C6:A4:BF:DE:C6:D8:6F:5F:FC:FE:4B
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0wEVJ2YLD8loxqS_3sbYb1_8_ks.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:f2:99:d7:a0:3c:ce:3a:09:82:a3:e3:0c:8c:35:0f:88:70:
23:15:9c:4e:3c:8e:c0:39:fc:9d:d9:56:1c:6d:c9:af:c9:f6:
5f:80:c9:57:63:af:6a:13:c1:d7:4e:bb:a9:ac:b0:27:24:49:
97:14:c5:35:d0:8d:bf:bf:ab:db:21:1c:62:b0:64:55:b6:4a:
e5:b9:c9:aa:62:45:1c:4f:34:74:62:64:3f:45:f2:d8:46:f9:
84:95:cd:2d:fe:7f:18:29:8e:b9:4b:59:f5:a0:0e:7d:90:70:
19:46:ba:4d:ae:8d:2a:13:17:a2:83:45:6d:d6:5e:b7:ce:9f:
1e:e6:cc:7e:f8:5b:3d:63:7b:75:bf:d6:bb:4d:43:6f:20:2d:
a9:55:82:6a:0a:c1:a1:18:5e:e2:16:db:ed:be:b5:55:59:87:
4b:66:41:09:7b:7e:73:e2:94:70:3a:bf:99:71:29:2f:8a:63:
c7:19:c8:cf:ee:fd:4f:86:7e:16:9d:63:e7:d6:e4:87:ba:d2:
c8:40:74:d8:13:43:a3:16:3a:ed:25:12:a2:fa:fb:93:fd:22:
23:45:bb:7a:5e:f5:a4:ad:63:bd:1c:3c:b4:93:e5:b4:40:7b:
ae:95:c5:02:90:61:5d:1e:ad:47:83:22:b4:3c:38:0b:f1:93:
fb:e9:73:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:12:47 2025 by rpki-client