Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/ERjrcj6FKDtCeFcKIGTeCAqjlKA.roa
File: ERjrcj6FKDtCeFcKIGTeCAqjlKA.roa (raw, json)
Hash identifier: CKm7xRYN4eLhIXMF6LVg6uqBmAffic+AxWewOqWg1S4=
Subject key identifier: 11:18:EB:72:3E:85:28:3B:42:78:57:0A:20:64:DE:08:0A:A3:94:A0
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D6A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ERjrcj6FKDtCeFcKIGTeCAqjlKA.roa
Signing time: Sat 08 Feb 2025 07:55:51 +0000
ROA not before: Sat 08 Feb 2025 07:55:51 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3434 (0xd6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 8 07:55:51 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1118EB723E85283B4278570A2064DE080AA394A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:27:c4:ba:a1:7f:ed:c0:fc:32:e1:8a:6a:
57:59:ce:ea:2b:b1:d1:e4:f1:0a:c8:0d:e3:e4:5e:
66:af:8e:db:10:9f:9f:15:75:bd:2b:bf:a0:5c:3c:
0e:b2:68:6b:f8:57:8f:67:90:ff:8b:aa:6c:eb:48:
b3:d0:a0:eb:21:1d:29:b9:28:8e:e6:79:57:d9:95:
6b:a6:ac:a4:cf:a9:c2:8d:2f:8b:1c:d1:8a:3c:5f:
c5:78:99:15:1b:49:9f:2c:83:6f:05:19:44:4e:54:
99:50:1d:05:60:32:01:d1:2b:2d:c8:55:f5:3d:4e:
4c:57:58:5e:46:8d:99:a6:c4:90:1b:00:c9:4b:c0:
95:7f:8b:8f:a9:c0:17:59:35:88:a9:51:7b:d4:14:
e5:62:5e:d1:52:f2:43:03:cf:ae:1f:13:81:5e:b9:
42:11:3e:b5:f5:79:5f:a9:22:87:d1:f9:4c:8c:cc:
cc:66:a9:77:23:4e:a8:d1:14:53:01:8d:c8:66:ee:
96:b5:c2:80:d5:f7:09:c8:c7:d2:50:90:7e:6a:23:
67:b4:6e:c2:74:f2:a2:8f:46:ad:d8:25:68:be:c5:
32:25:26:56:4e:16:41:91:de:9f:f1:fa:ba:ba:79:
63:b9:f6:81:d6:fe:71:60:ff:aa:46:64:9d:b6:77:
d2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:18:EB:72:3E:85:28:3B:42:78:57:0A:20:64:DE:08:0A:A3:94:A0
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ERjrcj6FKDtCeFcKIGTeCAqjlKA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
36:19:55:27:e5:e9:ba:43:db:fe:9e:3a:b6:f8:32:88:22:98:
f3:66:d4:5d:15:36:74:73:86:e1:7e:84:c0:77:da:5d:2c:a0:
ec:cb:7c:31:91:7d:d0:81:d4:ef:6e:83:e1:9b:11:20:71:ca:
c6:cc:60:79:ac:a9:2e:fe:db:d7:58:58:ac:e9:df:e4:4e:a2:
03:a4:17:99:9c:21:d5:d8:51:95:a2:f2:74:be:ab:38:03:d4:
ae:7e:ca:e9:1f:d9:64:ff:2e:9d:aa:a4:99:13:3c:bd:d0:aa:
72:50:7c:c8:3a:b8:6e:30:4f:88:c0:52:cf:b9:f5:14:6f:1b:
28:4d:18:ce:53:5d:68:14:60:58:a8:19:6c:c1:ec:44:93:4f:
21:ae:76:bc:2f:5b:98:01:d3:55:2b:9e:32:c9:cd:21:59:4e:
9d:60:bf:cb:21:f3:fc:c0:3b:23:a0:25:c9:ab:0a:f2:a8:f2:
23:fd:c0:1f:40:12:26:35:5c:62:d0:72:67:ef:f5:2d:ca:e7:
5e:84:84:88:ad:52:fb:98:c4:81:ab:5d:5c:c9:48:0f:75:dc:
98:8e:bc:b0:33:67:ca:48:95:eb:60:5a:d4:a5:ec:a7:d5:1f:
81:8d:7b:07:61:b7:50:e0:c8:af:42:4f:50:af:87:48:9a:a5:
fc:f2:39:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:14:59 2025 by rpki-client