Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/F5XRYonnVWip9RYaKdtWcPulwIY.roa
File: F5XRYonnVWip9RYaKdtWcPulwIY.roa (raw, json)
Hash identifier: AGDQIXGlyjZaBNFau1j8SgSKXlRZ/2S+Zj4BQ3/yYG4=
Subject key identifier: 17:95:D1:62:89:E7:55:68:A9:F5:16:1A:29:DB:56:70:FB:A5:C0:86
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D88
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/F5XRYonnVWip9RYaKdtWcPulwIY.roa
Signing time: Sat 08 Feb 2025 15:25:56 +0000
ROA not before: Sat 08 Feb 2025 15:25:56 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3464 (0xd88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 8 15:25:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1795D16289E75568A9F5161A29DB5670FBA5C086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:9c:74:3f:77:2b:a7:72:ef:b4:28:ef:c9:
0b:2b:83:e4:70:2a:8d:3c:e4:d9:47:a8:f7:fc:9c:
65:31:7c:c3:0a:89:8e:9c:c2:e1:90:37:14:83:e0:
d9:86:52:53:39:ef:8c:18:b6:b1:97:57:fe:02:e6:
b2:b0:0d:d0:55:d6:94:72:15:89:f6:22:69:6c:1c:
30:9a:31:6c:52:fa:3b:98:6a:01:96:4c:14:20:e2:
c7:a8:f6:a7:b7:db:4f:2c:5b:15:b5:b0:fb:91:a1:
d1:25:34:90:46:97:d4:82:2a:d4:d2:96:41:a9:22:
af:2c:d2:db:34:3c:ea:b8:43:b8:0d:76:9d:2c:ad:
65:01:92:01:25:86:33:9c:21:d5:d1:35:e2:a5:c4:
3a:73:22:51:a8:0a:69:47:d1:d2:c5:ea:50:77:6f:
dd:95:f9:4b:6f:6e:71:e4:4a:cc:16:d7:6c:6a:34:
7e:53:3a:7a:31:6f:c4:72:e0:99:a0:b6:3b:e5:72:
86:28:b0:a8:9c:85:1f:7c:f3:20:31:73:db:1d:a3:
17:be:14:8f:bd:bb:a1:16:17:e5:f8:dd:42:20:5d:
ad:63:b0:3c:c1:7e:af:6c:25:d0:03:19:48:58:6f:
3e:44:2c:1f:be:cd:3f:8f:60:9e:84:6f:80:19:28:
0d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:95:D1:62:89:E7:55:68:A9:F5:16:1A:29:DB:56:70:FB:A5:C0:86
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/F5XRYonnVWip9RYaKdtWcPulwIY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
66:d6:6c:f8:07:72:71:41:b0:9b:94:11:f4:7d:9d:0a:56:18:
fc:6a:42:e6:c3:91:0c:5c:a7:98:2b:f1:77:76:74:c8:53:8d:
3f:27:d0:82:a5:a7:07:e4:7f:14:07:ea:2b:08:b3:da:7b:88:
28:a9:62:2a:4d:5f:1e:56:d9:3d:83:97:e8:17:14:5e:d7:fb:
a6:92:b7:61:02:f2:15:ca:3d:9c:2b:73:87:f3:fe:af:0b:1d:
46:72:6f:58:b2:b0:6d:a6:47:d2:74:19:38:96:bb:fe:1a:cc:
42:52:0c:59:a8:ff:72:e4:62:b6:d4:1f:b8:fe:fd:8f:57:3c:
dc:c5:61:ee:cf:b8:d0:17:89:00:44:13:52:41:9b:47:e4:e5:
75:f3:ba:31:1d:da:6f:9d:20:11:6f:15:4b:67:f0:35:cf:03:
20:23:72:5c:85:54:b9:45:4b:92:2f:9f:2a:bd:c6:77:cb:84:
ec:14:a1:d5:aa:80:84:e6:09:48:5c:96:e1:48:ac:7b:18:ad:
d7:fe:81:22:44:ac:ce:e7:92:d3:09:28:5c:dc:88:5b:61:1e:
74:e8:01:75:36:74:1a:ba:e5:03:d9:23:bb:3e:ca:5a:b0:11:
50:0d:c3:5e:5c:8c:ac:f5:96:be:87:fd:1f:53:20:30:fe:c0:
37:fb:34:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:34:01 2025 by rpki-client