Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/CgR6EiYj6N0JZHLVwI7DT97fuZ8.roa
File: CgR6EiYj6N0JZHLVwI7DT97fuZ8.roa (raw, json)
Hash identifier: qIMl9QWU2HgWGSpp7AbNdLoXK0t23fhmB9uwO8OHa8M=
Subject key identifier: 0A:04:7A:12:26:23:E8:DD:09:64:72:D5:C0:8E:C3:4F:DE:DF:B9:9F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BE4
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/CgR6EiYj6N0JZHLVwI7DT97fuZ8.roa
Signing time: Tue 04 Feb 2025 06:25:38 +0000
ROA not before: Tue 04 Feb 2025 06:25:38 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3044 (0xbe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 06:25:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0A047A122623E8DD096472D5C08EC34FDEDFB99F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:4e:98:ef:96:d8:a4:3b:8a:b0:a8:5a:d4:
13:bf:04:02:ba:79:09:6e:85:09:be:be:4a:cd:a2:
6c:b3:1e:e0:70:c2:80:ff:3c:25:df:05:9e:62:60:
d9:9d:25:e1:ca:4d:96:ad:3a:f5:e6:34:33:2a:c1:
25:66:40:22:c3:86:0c:9f:3f:29:e4:91:96:0f:55:
2f:e4:20:08:39:a5:88:88:7a:f6:1e:e4:dc:47:be:
87:ff:b7:fe:1e:3e:a1:3a:7f:75:55:a6:88:3e:1e:
4e:18:9f:d9:62:cf:47:18:2a:22:b5:f0:2d:f0:74:
6e:2a:9c:ee:27:d6:ee:2e:e6:31:05:ef:0a:d9:a1:
ef:f9:7a:02:a8:19:9c:91:cf:b2:e7:1c:4f:7e:10:
36:76:eb:a0:26:ed:45:62:75:bc:19:7f:e0:d0:3f:
b7:96:ce:a9:98:c0:d5:af:de:6b:c5:b0:f7:e3:d7:
8a:f1:49:d1:89:88:a0:0e:ef:4d:bb:df:9d:18:6e:
64:ab:62:1f:3f:10:98:44:b2:81:fb:ff:bd:18:95:
35:8a:46:9b:c2:3c:0d:d4:bb:3f:e8:51:df:e5:8b:
8a:f4:3c:e5:5e:63:cc:fe:50:85:f2:81:46:f2:d3:
f8:67:c9:fb:e9:94:f5:f6:c6:51:7d:40:e1:53:ff:
a3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:04:7A:12:26:23:E8:DD:09:64:72:D5:C0:8E:C3:4F:DE:DF:B9:9F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/CgR6EiYj6N0JZHLVwI7DT97fuZ8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:f0:94:39:b4:28:3b:7c:54:15:3e:a2:1b:69:8e:65:7f:64:
f9:b6:ad:23:c8:ce:a5:50:48:06:cc:05:55:a9:7a:67:0c:ca:
18:10:b6:8f:2e:45:27:f1:4d:95:81:63:0d:78:d9:cf:52:d2:
71:9e:69:62:61:cf:21:c4:06:3c:66:84:9e:2b:89:5c:c3:86:
1a:6d:bc:0c:e1:d2:47:91:82:cd:34:72:de:ae:1d:ad:d3:d2:
94:c3:5f:bf:69:bc:48:de:8b:2e:63:39:75:8d:7d:3b:8d:c3:
b7:ec:73:61:ce:13:8b:f3:e5:ab:25:cb:03:21:33:f6:ea:32:
35:7a:7f:af:3e:7e:4f:51:02:60:fd:10:77:29:cd:3d:f2:18:
77:65:46:b8:46:bb:df:20:88:e8:4e:90:14:d6:cb:5a:de:36:
43:8f:81:93:67:01:86:53:dd:36:ef:1e:0b:3d:4d:e4:11:56:
ea:03:dc:32:a9:ac:16:4e:97:bd:84:11:1e:ff:40:a6:4e:9f:
41:1a:92:03:d6:4f:6c:0d:63:d2:fb:c0:e3:c1:f9:89:1e:47:
b2:9a:3d:b4:3d:43:79:cd:9c:54:f5:aa:c4:5e:08:05:74:7c:
ab:60:96:92:ed:c9:26:f3:d5:9c:f5:12:04:54:e0:bf:63:e7:
b9:56:d5:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:28:59 2025 by rpki-client