Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/NDSCR9ftPk9VJw4wVp1iOxTCGrA.roa
File: NDSCR9ftPk9VJw4wVp1iOxTCGrA.roa (raw, json)
Hash identifier: LRpR1PbAPwB6XFi6bmP8OnBWeWU6wCHVVAJxFG2WmQE=
Subject key identifier: 34:34:82:47:D7:ED:3E:4F:55:27:0E:30:56:9D:62:3B:14:C2:1A:B0
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 081C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/NDSCR9ftPk9VJw4wVp1iOxTCGrA.roa
Signing time: Sat 25 Jan 2025 04:25:07 +0000
ROA not before: Sat 25 Jan 2025 04:25:07 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2076 (0x81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 25 04:25:07 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=34348247D7ED3E4F55270E30569D623B14C21AB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:03:e2:1c:a1:a6:51:80:a5:24:10:f5:fa:
97:ca:d4:f3:40:ab:8c:2d:3f:9f:59:99:69:b7:a0:
8b:d3:c9:83:fc:42:ff:2f:ad:9a:ac:d6:a7:57:39:
8c:79:ca:d6:32:3a:b1:4e:b0:d4:a7:9f:91:e6:6e:
8e:32:a3:ac:9c:3e:81:9c:22:8c:78:b6:ef:de:d2:
b6:c7:45:7e:0f:8f:af:a9:dd:f0:55:00:83:f3:95:
17:22:5a:8e:e4:5e:0c:7e:1e:7d:8f:1c:d0:62:bf:
72:98:fb:a5:b4:dd:1e:ab:78:1d:d2:e6:f2:05:a7:
f0:d1:d9:84:fa:9b:01:c8:c3:ba:1e:90:58:2a:9a:
d1:bd:60:bd:9e:14:1c:e5:30:e5:6d:a9:b4:63:8d:
c1:d3:07:10:11:ba:30:13:9c:b2:f2:d6:a8:e3:19:
f8:cb:72:65:d8:7c:d7:8f:a1:84:5a:a6:3d:90:9e:
80:2d:0c:c9:82:39:ce:0f:7a:a9:ea:3d:e1:93:56:
6b:de:7f:82:b2:a6:fe:27:fe:9a:63:11:17:b4:ab:
22:a5:48:3a:09:95:e2:17:20:59:0e:71:8d:0f:5e:
ad:56:12:e4:d9:bb:98:93:3c:c8:93:07:09:56:bd:
e7:84:b9:17:19:84:45:eb:0a:3c:8e:2e:80:1e:00:
d8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:34:82:47:D7:ED:3E:4F:55:27:0E:30:56:9D:62:3B:14:C2:1A:B0
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/NDSCR9ftPk9VJw4wVp1iOxTCGrA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:89:51:bc:d9:01:e5:3d:54:30:24:ab:34:30:8e:0b:68:46:
e3:bf:8f:3a:00:49:af:75:9f:4a:1d:16:f9:97:08:1b:97:d1:
6c:e0:61:ee:15:9a:3c:01:32:f7:fc:88:7c:ad:58:53:f7:0f:
d1:6e:cc:52:77:dd:15:b9:af:88:8d:d2:11:af:b1:da:42:20:
b2:33:da:b3:ed:b0:8b:1d:54:0d:b8:31:6f:7b:6e:08:d2:90:
20:b2:7e:14:a3:a8:98:70:0e:6c:e4:ac:b6:60:1d:82:ee:44:
97:78:6f:e2:b6:2c:9f:f0:3d:23:51:71:e7:9c:e1:9a:0d:4e:
7c:4d:30:5c:bf:7b:2a:74:e4:23:ac:33:e4:3c:23:33:df:67:
b4:e8:47:d2:df:b6:9d:02:b1:dd:cf:11:9c:15:00:3f:5e:2a:
2c:32:03:5b:ea:e7:30:2b:77:b3:5c:d5:fd:73:55:ba:40:5a:
10:9e:e2:16:83:70:87:c9:b2:6d:64:08:fa:86:5f:d9:bd:13:
99:b5:ae:3a:9d:30:d1:7d:0c:50:df:78:95:cb:2a:01:f6:37:
fa:c2:29:f6:bb:a4:79:45:30:c5:4f:96:3a:42:68:5c:be:5a:
0b:f7:9c:7f:6c:8e:8e:db:aa:56:0b:d7:fa:c1:ab:68:2a:7c:
be:68:af:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:28 2025 by rpki-client