Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/1tY0ta1OlOMcqNsw-Pme8lMwPIo.roa
File: 1tY0ta1OlOMcqNsw-Pme8lMwPIo.roa (raw, json)
Hash identifier: DSQffzs+yeFPDlUmU6F47aoAx1jMX6BncnMpFpVahsY=
Subject key identifier: D6:D6:34:B5:AD:4E:94:E3:1C:A8:DB:30:F8:F9:9E:F2:53:30:3C:8A
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CF6
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/1tY0ta1OlOMcqNsw-Pme8lMwPIo.roa
Signing time: Fri 07 Feb 2025 02:55:51 +0000
ROA not before: Fri 07 Feb 2025 02:55:51 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3318 (0xcf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 02:55:51 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D6D634B5AD4E94E31CA8DB30F8F99EF253303C8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:bc:46:60:c1:0d:a4:fe:b1:3b:bc:c7:0f:
38:94:c5:31:a8:1c:01:b2:d2:b3:b0:7a:66:3a:11:
43:0a:c1:6f:3e:20:6b:7d:0f:ec:c1:15:f5:28:fc:
13:6f:7e:7b:d6:e6:3e:f2:24:be:71:62:ae:ef:0a:
04:d2:a6:53:2b:46:56:d4:06:04:b9:94:c3:7d:f5:
52:f8:8a:c5:3e:de:24:d0:6e:e9:0c:61:dc:30:1e:
42:19:21:9b:9f:55:d4:a7:75:8e:fb:a4:2e:20:e4:
36:48:47:69:e3:52:3e:f5:56:dc:2f:f2:04:de:a9:
42:e9:fd:d4:7b:a5:8b:a8:2c:b2:b6:8f:7a:45:ae:
d2:f5:38:01:04:49:ff:64:6a:ee:d6:6f:cf:4c:4e:
d9:01:4d:45:24:b3:56:1d:e8:ef:be:64:58:f0:2c:
ce:e0:e5:3c:f7:fe:ee:17:6e:aa:52:51:e7:76:2a:
47:23:9f:20:00:23:dd:2b:30:51:37:d4:74:58:9c:
d5:da:fc:b8:e9:82:18:b5:65:3e:a5:a2:7e:ea:2f:
b3:4c:d2:ce:5c:89:aa:cf:07:3b:8c:66:1e:17:41:
b8:31:de:18:c8:b0:32:2a:92:9f:05:2c:bd:0e:43:
8a:67:1d:09:c8:ca:b9:10:59:0c:54:4e:9c:ca:9b:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D6:34:B5:AD:4E:94:E3:1C:A8:DB:30:F8:F9:9E:F2:53:30:3C:8A
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/1tY0ta1OlOMcqNsw-Pme8lMwPIo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:26:2c:34:cf:28:31:16:8e:98:b8:90:b2:b7:6b:8b:ea:83:
2f:d5:b4:e6:b0:9c:6f:9a:f9:cd:7c:64:36:92:8a:5e:33:49:
2a:5d:4d:ae:72:4c:dd:bc:44:4d:39:38:46:68:a0:c3:cd:ec:
17:4d:6b:23:ca:a2:5b:93:55:77:61:a8:48:0f:4b:d0:43:74:
ee:00:ad:93:de:70:f7:ed:a7:c9:42:f8:4c:46:8c:41:10:88:
fb:90:90:c2:e7:8c:c8:90:82:d1:21:ef:59:42:9b:95:6b:1b:
0a:4f:a3:e3:c9:15:70:56:51:1a:6e:ca:a3:ee:8e:53:26:cb:
33:2b:d1:b3:31:d9:52:3c:27:e8:91:ce:4b:0a:95:7e:e3:1e:
93:00:5e:d7:c7:ed:a8:8b:08:89:f8:1e:14:16:96:60:4d:ef:
73:10:74:01:23:80:aa:ea:28:4b:08:07:aa:46:02:b0:8d:78:
8c:49:6a:6b:3f:ab:82:8c:88:bc:28:8d:8a:17:74:f3:48:6c:
5b:21:51:0f:6c:7a:49:96:f0:b4:46:6c:ac:d3:c3:70:b9:b9:
18:d7:c3:1d:8d:95:74:e8:a4:82:18:b4:a2:77:d1:c8:8c:74:
56:c2:a5:6f:6d:24:c4:a2:b1:63:2f:b9:24:55:d4:f8:e1:db:
b3:55:5d:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:37 2025 by rpki-client