Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/ED9aJGHJlPBiCxS9VLHQkJJ_ENs.roa
File: ED9aJGHJlPBiCxS9VLHQkJJ_ENs.roa (raw, json)
Hash identifier: rmxtWMP7RQwkQJR0Si0c7VUM1kAv/pzNn22i7vFX5QE=
Subject key identifier: 10:3F:5A:24:61:C9:94:F0:62:0B:14:BD:54:B1:D0:90:92:7F:10:DB
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 061C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ED9aJGHJlPBiCxS9VLHQkJJ_ENs.roa
Signing time: Sun 19 Jan 2025 20:24:49 +0000
ROA not before: Sun 19 Jan 2025 20:24:49 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1564 (0x61c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 20:24:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=103F5A2461C994F0620B14BD54B1D090927F10DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:4e:73:19:21:5d:d9:0a:8b:ca:54:17:78:
49:1f:17:ef:ec:f9:69:80:48:c4:21:d2:84:a3:df:
17:6e:ac:3e:2c:cf:c7:39:1d:0c:df:6b:f1:91:46:
99:72:ea:c5:09:d3:ce:41:28:84:de:9f:ba:2e:f8:
db:4d:81:73:fa:03:0b:a0:30:87:42:69:31:88:3f:
45:55:ac:42:de:5b:6f:a1:e2:b3:3f:94:ed:bd:2f:
71:a1:cd:57:10:59:9a:da:8f:f7:11:6f:aa:95:9f:
21:94:71:d2:4e:5c:83:56:3a:57:d8:1d:20:74:69:
20:e8:bc:e6:39:29:85:29:1c:90:da:ba:ac:ba:41:
15:06:10:d9:18:57:20:19:0b:2c:81:70:03:6f:c8:
3b:6d:bf:41:24:28:e4:f9:02:21:c2:a5:5b:18:e7:
23:93:7a:81:c9:2e:b8:7d:15:0f:90:ff:a6:ea:4a:
5e:8d:18:64:45:4a:91:47:e7:77:d9:98:aa:b3:8d:
bf:fa:14:72:a9:c4:b9:8c:11:1c:d4:67:f6:7b:97:
fe:dd:1f:71:0f:a0:6b:f4:d9:6e:0b:6f:36:ac:2b:
94:fb:0a:4a:ac:49:19:a5:7e:de:7c:97:73:50:60:
23:8c:67:7b:fc:d3:79:6e:7a:6c:30:71:61:73:37:
c5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3F:5A:24:61:C9:94:F0:62:0B:14:BD:54:B1:D0:90:92:7F:10:DB
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ED9aJGHJlPBiCxS9VLHQkJJ_ENs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
15:30:7f:7d:e4:d3:0b:7b:16:1f:51:01:ff:5c:2d:0c:a7:e4:
61:5b:44:76:31:e1:eb:0d:39:9d:a2:2f:4a:e2:ad:e5:d6:04:
13:5a:07:2d:24:ca:bc:c3:cb:c4:84:6d:b7:b6:97:f0:42:7b:
d4:b3:80:79:49:e1:24:40:56:fe:17:c2:78:3b:97:5b:c7:5a:
77:ab:5a:9a:c2:8d:8a:19:b7:54:1e:c3:c7:04:87:ec:16:aa:
53:81:6f:76:c0:19:a8:e1:5d:e0:83:a4:9d:e4:05:57:ca:fa:
9b:05:07:51:d2:f1:8d:0d:5c:18:2b:4a:0c:07:e5:23:47:4e:
00:0d:8f:d5:5e:cd:33:0c:26:ed:58:a6:29:73:6f:11:cd:06:
c5:ec:ac:04:46:e3:e1:c9:ee:10:06:95:9d:44:44:ab:d7:53:
b0:2e:bc:8c:7a:3e:26:fb:40:22:f5:d9:41:01:38:1c:4c:dc:
fe:52:23:80:7a:81:35:3f:ab:33:e6:04:65:e6:0a:08:35:48:
c8:0a:e5:3d:ff:59:6c:bb:de:d0:35:47:92:29:7d:43:cb:ce:
99:6a:ab:31:7c:4e:f5:a1:8c:33:cd:13:5b:5e:07:09:d3:29:
2d:bb:80:bb:62:ed:52:88:16:9d:83:93:b9:65:1d:1c:e2:ed:
60:35:59:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:18:35 2025 by rpki-client