Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/BLG0qCoelwrA6t_u420UdrycidM.roa
File: BLG0qCoelwrA6t_u420UdrycidM.roa (raw, json)
Hash identifier: fzEL/e9H7PA+YL8KhkiZ50YgWYU1e4e7GnO6gbcTSBw=
Subject key identifier: 04:B1:B4:A8:2A:1E:97:0A:C0:EA:DF:EE:E3:6D:14:76:BC:9C:89:D3
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D2C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/BLG0qCoelwrA6t_u420UdrycidM.roa
Signing time: Fri 07 Feb 2025 16:27:45 +0000
ROA not before: Fri 07 Feb 2025 16:27:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3372 (0xd2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 16:27:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=04B1B4A82A1E970AC0EADFEEE36D1476BC9C89D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:23:1e:a2:31:4a:9c:93:79:79:6e:35:79:
0e:b8:0b:cd:61:51:2c:43:19:73:b9:12:ed:8b:86:
87:16:b8:15:c7:b3:3c:98:4a:23:3b:1e:ce:06:e9:
4f:ac:34:33:7e:b3:c6:29:71:4c:b0:07:da:4f:83:
ca:ae:7b:c8:ac:a1:19:51:4e:b8:a5:34:8c:14:8e:
81:1a:5b:51:81:59:ea:e3:48:2b:77:28:d1:8d:2b:
c9:6a:ea:fb:a9:4d:6d:75:f4:5b:71:8d:1b:80:0f:
7a:5b:82:00:3b:97:b0:c8:1a:e4:e9:f6:6d:4b:8f:
4d:69:d9:53:f7:6e:f7:62:14:80:10:75:01:cf:f8:
f3:7d:d7:75:49:f2:57:c0:9a:1b:38:c3:01:2d:6c:
aa:a1:93:19:6d:50:f4:3a:7c:2a:06:df:cb:c8:d4:
1f:71:f5:55:ef:f6:a0:cc:20:64:e1:df:52:1a:8a:
2e:68:53:80:47:3a:46:4b:7d:bd:6e:90:49:03:04:
95:de:dc:28:6e:5b:20:a2:7c:a5:3b:f2:1b:1c:f1:
5d:20:e8:93:9c:c5:f9:4b:9e:1e:45:8c:fc:9b:4f:
01:f7:64:fe:6c:4a:8a:04:b5:5b:c7:0a:dd:c0:f6:
06:e4:38:c1:d0:d5:3f:6f:f0:d9:eb:dc:54:c0:63:
7b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B1:B4:A8:2A:1E:97:0A:C0:EA:DF:EE:E3:6D:14:76:BC:9C:89:D3
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/BLG0qCoelwrA6t_u420UdrycidM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
31:33:75:27:fb:df:00:db:3a:11:f5:bb:99:1b:9f:e4:12:db:
a7:a0:3d:76:f0:be:1e:45:2f:fa:37:0e:ad:42:03:e0:59:30:
87:48:50:c3:9b:ce:0e:da:92:4f:78:b9:5e:51:21:c0:88:2d:
0b:33:ae:58:a7:d6:de:d5:3d:60:d2:14:40:48:62:c0:17:4c:
6f:b0:c1:0c:6e:cd:82:95:dd:49:6b:0a:3d:7c:98:73:3d:2b:
6e:2c:0c:08:03:f8:49:c5:f0:01:19:10:89:de:df:ad:c1:3d:
cf:0e:1e:35:e9:0c:a7:02:06:a2:0f:ac:2c:55:48:97:b7:a6:
0a:dc:2a:a5:8b:b8:40:bd:30:6c:93:f9:87:d5:1e:1c:e8:76:
9c:03:41:c7:83:b5:53:c1:ad:b0:24:de:06:9b:31:90:de:83:
7e:f9:2a:b9:de:03:6a:a2:07:77:bd:df:a3:cd:15:b0:05:9d:
e5:5a:54:80:1c:26:ae:32:d8:54:ab:6b:ad:66:c0:9b:40:07:
15:51:fa:e0:66:55:32:27:5c:8c:64:89:df:df:08:0b:e3:da:
9e:14:c4:fa:ed:e7:43:f6:36:85:fd:5d:2e:60:45:f6:a5:be:
26:0d:49:17:f9:41:47:a7:3f:77:55:67:e7:80:bd:b9:fa:b9:
0d:fe:90:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:00:22 2025 by rpki-client