Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/BtSytWfSuIeQMvn_7Jbm2QZW8II.roa
File: BtSytWfSuIeQMvn_7Jbm2QZW8II.roa (raw, json)
Hash identifier: 1xTiw1IB+T3HmYDSWtmcbweaGXvY3itwAgROPMR2EkE=
Subject key identifier: 06:D4:B2:B5:67:D2:B8:87:90:32:F9:FF:EC:96:E6:D9:06:56:F0:82
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D4E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/BtSytWfSuIeQMvn_7Jbm2QZW8II.roa
Signing time: Sat 08 Feb 2025 00:55:54 +0000
ROA not before: Sat 08 Feb 2025 00:55:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3406 (0xd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 8 00:55:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=06D4B2B567D2B8879032F9FFEC96E6D90656F082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ef:aa:ff:78:26:fe:34:da:f2:5a:e4:12:9b:
98:bc:ba:25:64:fa:1c:eb:14:61:ea:71:88:9a:51:
76:1f:5a:5f:19:a3:1b:4c:b0:b4:83:8a:72:a7:0d:
c5:a1:71:f4:83:a2:e1:52:ec:a8:6d:76:6b:34:b3:
07:a4:be:b7:5c:49:49:8c:bd:7b:ef:48:89:53:83:
e2:bb:10:02:5f:4b:0b:45:f4:34:23:78:09:94:ed:
1e:60:39:42:7e:3b:fe:2e:1d:f5:91:03:c8:94:d5:
ce:15:42:bd:59:91:f2:36:f5:02:ef:95:4a:2f:3f:
b7:b9:c9:d6:53:37:38:b2:dd:00:b0:91:6b:1c:d9:
e8:27:70:68:60:a4:7f:7c:05:ec:f5:a7:bb:4a:c2:
37:cb:32:45:6d:74:53:f8:c8:fc:2e:c8:38:03:f2:
df:77:99:e5:66:6c:92:2e:7e:63:b9:98:86:9c:94:
09:dc:19:db:99:58:10:f3:a4:13:b9:3b:1e:f3:26:
7f:6a:89:76:66:96:76:7b:7c:dc:dd:56:48:4d:23:
d0:47:c6:6b:c2:f2:df:c9:27:b0:58:57:ba:6e:ef:
57:e8:ce:20:dc:8d:c9:0a:9f:c6:d3:72:ea:f1:21:
00:d3:3b:42:2a:bf:96:10:f1:87:c9:b2:97:9c:17:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D4:B2:B5:67:D2:B8:87:90:32:F9:FF:EC:96:E6:D9:06:56:F0:82
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/BtSytWfSuIeQMvn_7Jbm2QZW8II.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:e5:d3:e3:9e:bd:ee:f7:48:c1:fb:67:ea:e6:a6:c1:1e:b2:
ff:cc:2f:b4:76:ad:9a:b1:00:cc:5f:1c:f8:d9:a6:cc:82:c0:
d1:8a:85:bf:7b:32:ed:da:b9:4b:59:84:68:ee:c7:e1:44:02:
c6:a8:36:aa:a4:d5:3f:b7:d3:cd:8a:0b:51:e2:7b:05:03:78:
08:dc:c7:c7:71:26:39:f6:06:3f:fc:fd:4a:0d:94:02:4a:e0:
e7:3b:c1:bb:ec:80:ea:ab:43:2d:aa:75:d4:19:ff:a6:91:c2:
a5:85:40:f1:63:17:42:36:7c:39:0d:bf:7a:15:3c:9e:0a:c8:
24:68:e0:f8:b2:a8:3b:d2:b9:c6:f4:6c:be:cc:01:e2:98:46:
02:76:f4:49:04:8c:68:86:8c:48:31:2e:66:07:27:60:28:d9:
da:e9:a4:bb:07:4b:c1:c8:ee:1b:af:91:95:3b:97:9f:2a:0c:
3b:10:66:c8:94:69:db:a9:17:45:03:42:ef:cc:fe:70:ff:78:
66:bb:b0:ac:1b:c6:63:44:39:c9:e2:bb:20:4c:2f:0d:cd:f1:
6c:90:8e:5f:d0:4d:3b:6c:9c:10:02:b3:f1:27:cd:bd:02:f7:
e5:5f:b7:56:17:7e:a7:d1:38:f6:4c:12:d7:3e:f4:b7:2a:d1:
bd:07:30:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:42 2025 by rpki-client