Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/DHEtmNn9HiiPOFuMiOY1Sy3I0f8.roa
File: DHEtmNn9HiiPOFuMiOY1Sy3I0f8.roa (raw, json)
Hash identifier: NXPeHW7eQS71c3wqX5DDueS2V5/62D9NOrrOogroxnQ=
Subject key identifier: 0C:71:2D:98:D9:FD:1E:28:8F:38:5B:8C:88:E6:35:4B:2D:C8:D1:FF
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0860
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/DHEtmNn9HiiPOFuMiOY1Sy3I0f8.roa
Signing time: Sat 25 Jan 2025 21:25:11 +0000
ROA not before: Sat 25 Jan 2025 21:25:11 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2144 (0x860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 25 21:25:11 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0C712D98D9FD1E288F385B8C88E6354B2DC8D1FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:f1:50:a6:b2:1d:a8:ab:50:00:7f:9c:3b:
a5:cb:e0:5c:9d:56:b9:4e:6c:07:6b:0c:81:21:f6:
40:86:fa:66:e9:72:1b:06:95:f3:85:aa:35:d1:b4:
2e:8b:43:68:82:a7:d4:35:b4:a1:5f:1c:d4:57:84:
27:41:2c:7c:62:f9:23:8a:9d:99:01:3a:26:f8:e7:
2e:e4:1b:66:b9:63:5b:0c:9e:bb:00:76:76:67:13:
ba:c9:51:3c:d3:82:56:a6:86:34:94:0f:6f:b8:fe:
ce:4a:87:54:53:e7:06:16:be:7e:d8:73:54:5d:ed:
7b:4c:b3:df:64:0d:2f:34:ff:b2:fc:0a:13:7d:1d:
ac:66:37:08:bc:38:16:3a:05:b6:7e:9e:32:12:69:
6c:9e:f0:1a:10:fc:a2:a8:2b:c5:ad:9a:43:63:19:
fd:4b:21:6e:b4:30:59:c6:4e:18:8e:fa:f3:de:fb:
8b:1d:03:b8:ed:78:b0:c0:e6:65:89:14:88:2d:95:
7c:f8:fc:39:04:24:27:f5:ea:1a:0e:4d:27:d3:73:
13:b5:c6:bd:45:fe:a5:36:e0:c2:34:58:e0:6e:40:
be:f4:83:db:58:3a:77:36:da:ce:28:aa:3b:e8:ca:
b4:36:5d:69:9c:a2:a1:36:01:b0:21:21:f9:52:c8:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:71:2D:98:D9:FD:1E:28:8F:38:5B:8C:88:E6:35:4B:2D:C8:D1:FF
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/DHEtmNn9HiiPOFuMiOY1Sy3I0f8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
20:f0:7e:81:80:32:5e:6c:0c:99:07:8b:9f:64:73:fe:ad:36:
b2:a1:a9:dc:d4:19:1a:fb:ee:26:b4:7e:7c:0b:db:d9:d8:0b:
45:41:27:c8:e7:30:6e:22:2a:ad:e0:f7:be:b9:ac:ce:5f:4d:
e0:d4:fa:78:69:8e:e4:04:50:7a:ad:66:04:e8:5f:03:23:01:
5b:0a:0b:cf:39:ac:8b:53:b2:ee:0f:33:d0:16:5c:17:cb:72:
f4:22:f1:6e:4a:bc:de:9d:12:72:87:54:d9:b2:ca:c5:e3:bb:
60:21:d1:25:a3:a5:09:e0:74:60:77:50:f4:6f:19:36:c3:95:
b0:3a:8c:de:9e:eb:fe:89:ca:42:7a:77:35:1c:57:c8:15:ce:
fa:3d:f1:f4:ef:67:77:11:72:cb:58:d9:1a:31:64:8b:be:af:
28:d1:4a:b1:17:fd:95:4a:8d:0a:22:c6:5b:9f:8b:95:cc:13:
48:f4:ed:26:ee:fe:20:ed:62:2b:f3:db:5b:3a:51:08:05:fa:
eb:3c:48:e5:6c:94:2b:1a:e8:31:b2:35:c5:03:7c:4e:f0:82:
8a:37:8a:61:37:c0:53:53:11:4e:96:74:be:5a:f4:de:9e:ce:
36:dc:20:fa:af:f7:f8:78:2c:ba:a4:fc:dc:c1:4c:94:07:3d:
e2:60:81:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:11:05 2025 by rpki-client