Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/CCFdJze-iav4Q48imiXdSVX3qls.roa
File: CCFdJze-iav4Q48imiXdSVX3qls.roa (raw, json)
Hash identifier: Yk4LkWMWyzI7WX0s9WhSWCB/n5QXu3d01DEp+LKjWjI=
Subject key identifier: 08:21:5D:27:37:BE:89:AB:F8:43:8F:22:9A:25:DD:49:55:F7:AA:5B
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BB4
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/CCFdJze-iav4Q48imiXdSVX3qls.roa
Signing time: Mon 03 Feb 2025 18:25:38 +0000
ROA not before: Mon 03 Feb 2025 18:25:38 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2996 (0xbb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 18:25:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=08215D2737BE89ABF8438F229A25DD4955F7AA5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:01:23:ea:9d:91:00:17:14:b8:85:c2:ae:0f:
88:aa:fe:41:14:c0:45:63:71:f2:ad:2d:62:5e:73:
04:ba:e0:e7:7c:09:0e:04:f7:03:88:81:76:5f:8b:
a7:78:0c:18:8e:89:d2:c2:a2:9a:a7:45:d2:8e:5e:
b4:1c:4b:63:1a:8f:99:ae:6c:94:e1:db:ae:a4:69:
67:f1:9f:e5:f4:a1:2c:66:be:2c:b0:77:8c:45:65:
9b:3c:23:c4:cd:87:a9:69:04:d5:e7:56:16:c4:5a:
73:9c:34:96:8a:15:2f:14:ae:94:13:f4:19:81:48:
65:58:b1:d8:e3:b7:b6:74:30:82:61:56:cf:18:81:
67:e8:14:29:05:d3:bb:fb:fe:d8:35:ca:53:44:ea:
32:0a:f1:bd:15:85:e2:13:89:53:3a:6a:ac:03:b9:
5b:95:9e:12:d3:0a:db:29:93:bf:1d:8d:20:8a:27:
55:87:c3:13:86:f1:1d:8b:95:9b:3b:96:6b:dc:78:
84:87:0b:f9:f1:42:d8:fa:f5:da:32:62:53:18:36:
f4:13:a3:2b:3b:31:f5:6a:72:5a:88:74:80:2c:06:
bc:3e:3b:07:a2:77:28:4b:0e:6c:a6:04:b2:f0:00:
4a:2b:02:3f:4c:75:18:20:9d:80:24:7f:07:74:1a:
35:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:21:5D:27:37:BE:89:AB:F8:43:8F:22:9A:25:DD:49:55:F7:AA:5B
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/CCFdJze-iav4Q48imiXdSVX3qls.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:a8:43:e8:d4:4a:e0:5b:ac:59:9f:67:0c:26:19:a7:e8:a3:
0c:45:bc:13:d6:be:d1:7d:4a:97:75:18:4f:27:54:d9:0c:32:
ee:be:32:3c:28:ba:b1:44:19:fc:ef:4f:60:1f:6c:3c:3e:b0:
82:72:72:53:3c:c5:94:f9:70:68:51:be:26:6a:24:4f:fa:42:
50:dd:bd:06:ac:03:c6:30:e1:5e:9f:82:f4:3e:bb:e6:69:48:
95:9e:a8:bc:cf:af:99:b5:aa:f5:ad:6f:50:bd:13:06:1f:b5:
aa:4f:1b:d7:44:b3:c4:a4:04:5b:9d:bc:74:00:95:b5:45:3e:
95:fa:cd:b3:ea:ff:b2:42:14:90:74:bc:45:94:04:58:0c:63:
a4:45:6b:8d:6a:0a:85:4b:ef:af:34:78:e8:2b:3a:b5:d4:33:
9b:80:dd:bb:a2:d8:12:14:5e:4e:d2:60:1d:fe:32:d8:e3:01:
74:d9:41:da:59:49:32:53:cc:98:76:c3:62:0a:09:5f:89:a0:
86:82:bc:77:29:2d:c8:2f:cc:75:17:0f:96:ea:de:66:61:50:
6a:6a:34:01:3b:7e:06:38:21:a8:8d:c4:ea:8c:12:6a:b3:e6:
fa:dd:50:67:ad:97:7a:27:91:34:d4:08:fe:f5:c7:88:2d:e3:
d9:97:4f:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:26:08 2025 by rpki-client