Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/MthwaKyXzkWglCCmdLR_UQP1aFs.roa
File: MthwaKyXzkWglCCmdLR_UQP1aFs.roa (raw, json)
Hash identifier: iiZUGSTOM5D5dP/uT5SBoKPSxits4jDBuqtvOQU+Nb0=
Subject key identifier: 32:D8:70:68:AC:97:CE:45:A0:94:20:A6:74:B4:7F:51:03:F5:68:5B
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D76
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/MthwaKyXzkWglCCmdLR_UQP1aFs.roa
Signing time: Sat 08 Feb 2025 10:55:52 +0000
ROA not before: Sat 08 Feb 2025 10:55:52 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 8 10:55:52 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=32D87068AC97CE45A09420A674B47F5103F5685B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:9c:55:e0:24:fd:71:1c:42:95:43:df:63:
6c:94:de:a9:0d:01:35:b3:08:11:5c:0d:38:c5:3a:
61:1b:20:36:eb:e9:8e:c0:2e:b8:3b:3a:ea:3b:89:
c5:13:b8:fe:97:ef:77:8d:66:09:c1:d6:e9:d8:a8:
24:a8:d8:65:74:8a:44:28:83:35:2d:30:1b:04:32:
85:34:38:54:f7:e1:73:46:84:24:33:64:62:df:b5:
4b:4e:bf:ca:0d:7f:37:93:fe:97:5c:07:ab:7a:1a:
6c:6d:0b:eb:01:00:b9:39:e3:99:1b:ea:5c:f8:50:
52:5e:70:59:31:63:da:7e:07:80:71:8e:29:27:89:
f1:f5:e7:7d:0a:18:d7:ba:e9:0d:f7:56:78:f3:34:
00:c0:34:30:b1:2c:e3:ca:09:7e:27:89:6d:43:07:
8d:ad:b0:77:8b:62:d0:f9:4e:0f:24:09:eb:ce:81:
16:e2:55:24:3b:25:b7:b3:6c:ec:bb:f2:31:b8:0d:
79:3e:63:59:4f:a3:f6:69:f7:fd:42:82:a7:ac:df:
d6:e1:97:a6:3f:5a:ff:04:e6:e6:06:ca:44:25:bd:
0b:30:1c:ea:b1:12:5e:4b:e9:1d:bd:1c:5f:c9:e3:
3a:1f:8d:4a:ec:cd:65:de:a7:aa:a2:a5:24:55:97:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D8:70:68:AC:97:CE:45:A0:94:20:A6:74:B4:7F:51:03:F5:68:5B
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/MthwaKyXzkWglCCmdLR_UQP1aFs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
49:90:07:69:30:16:9f:53:0b:43:e8:d4:74:05:97:25:07:88:
19:e5:35:d9:04:08:c1:30:6b:a4:48:b9:08:c2:ad:03:85:cd:
18:34:a7:d6:e1:3b:26:be:df:c8:77:22:4d:57:16:10:df:f8:
ea:a4:25:15:e9:44:c1:35:48:66:ea:51:db:53:28:14:e8:d3:
cf:71:d0:56:22:ce:e3:a0:1f:0b:8b:c3:af:a7:3d:2e:18:7f:
48:c4:5e:16:30:0f:a4:c4:70:3d:ff:40:4e:21:34:f4:3f:63:
ec:03:9d:ad:26:6e:25:12:64:94:55:92:26:44:87:a2:75:f6:
55:b7:37:44:8b:86:d0:49:cd:ad:24:7c:5f:31:36:0b:1f:f5:
a0:5d:87:4d:63:2b:4d:d9:4a:8a:b0:ac:73:0f:d7:5c:e7:ad:
51:65:85:35:fe:d4:43:b8:9e:24:83:dc:2c:71:51:a8:3f:d7:
05:11:46:63:38:5b:a2:5f:c2:e0:a8:a3:34:5a:48:4a:31:c8:
ed:e1:1c:02:54:5d:fe:6a:57:25:76:46:42:2b:46:8b:b5:46:
fd:00:01:18:72:71:61:a0:69:1d:24:fe:8d:15:59:d0:e2:24:
33:3d:8e:c3:39:fa:f6:ac:6c:1b:fb:54:6e:40:5e:7d:50:74:
d2:3d:4d:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:02:11 2025 by rpki-client