Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/OuFK5ND1LqgFcTnieaaKr3rmzd4.roa
File: OuFK5ND1LqgFcTnieaaKr3rmzd4.roa (raw, json)
Hash identifier: kOKmHIiNLx+Mal20GQQnFMGHoS1Qn3UjZWqv4t54/P0=
Subject key identifier: 3A:E1:4A:E4:D0:F5:2E:A8:05:71:39:E2:79:A6:8A:AF:7A:E6:CD:DE
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C4A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/OuFK5ND1LqgFcTnieaaKr3rmzd4.roa
Signing time: Wed 05 Feb 2025 07:55:43 +0000
ROA not before: Wed 05 Feb 2025 07:55:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3146 (0xc4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 07:55:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3AE14AE4D0F52EA8057139E279A68AAF7AE6CDDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:5d:57:59:05:ea:5b:ea:24:89:37:15:c2:
af:66:f8:ad:6d:9d:85:b7:d2:1a:ae:77:59:94:a8:
7e:52:cd:14:03:81:52:c2:67:c0:19:ee:4a:e3:55:
04:b2:d1:e6:66:7e:cd:c0:70:dc:2b:41:21:92:bf:
70:a2:bf:65:e7:db:7a:66:33:f4:aa:54:90:0c:24:
3e:57:12:87:3b:1c:3c:4d:0a:27:e0:44:20:f2:72:
d5:2a:86:4c:32:cb:14:6d:2a:01:63:81:ce:86:38:
9d:ca:b2:be:78:63:c6:09:57:b0:9d:f0:d0:7a:73:
85:78:ca:e6:0e:4d:6b:57:32:ec:b9:5b:a3:f7:b3:
fe:dd:29:cd:5e:03:2f:8d:ac:a1:66:46:7a:b8:b4:
77:87:3d:a2:42:e2:00:08:8c:c6:1f:3b:dc:17:70:
c6:ff:db:16:ba:13:ba:dd:ea:fb:69:33:14:05:36:
3d:88:ff:be:9e:1e:a8:67:db:7f:f5:75:9b:c0:8f:
dc:1f:ad:b9:7d:3e:22:ad:bb:50:f4:67:b2:ee:ed:
f4:37:5e:96:a2:6a:bc:02:53:72:36:81:07:b7:72:
58:07:9f:e7:fd:10:d3:5c:f3:47:13:1e:7b:a2:0a:
bb:f2:b7:23:76:87:83:90:51:cd:b7:21:53:a9:93:
c6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E1:4A:E4:D0:F5:2E:A8:05:71:39:E2:79:A6:8A:AF:7A:E6:CD:DE
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/OuFK5ND1LqgFcTnieaaKr3rmzd4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
38:d8:4a:93:97:db:10:e7:d7:eb:73:83:e9:97:23:66:65:27:
b6:6b:c8:80:92:03:85:b3:19:2d:25:2a:94:19:f4:c0:1c:32:
42:f3:9b:30:79:52:ec:19:b8:e0:f6:bd:ee:7e:f7:c9:2b:30:
74:97:ed:4e:53:52:a0:95:9b:a0:d9:62:53:e3:d4:66:5f:ac:
38:8a:8a:66:37:81:c0:2b:99:96:7f:57:d0:30:06:b7:59:4c:
31:66:e5:00:6d:a9:71:5f:a7:1d:36:91:f9:9a:5c:64:0d:45:
9a:7f:9a:90:03:15:a5:92:7b:6b:97:71:27:9c:84:91:0e:dd:
58:2d:e3:b1:86:f8:f0:30:7c:d3:a7:e8:6f:a1:3b:f3:55:14:
5f:78:a2:f6:77:92:55:0c:07:70:90:57:4e:44:8d:4f:6f:7d:
ef:c0:f1:05:9e:68:f2:17:61:56:92:02:ab:e7:fa:e4:6c:b4:
05:9e:49:91:a0:68:07:78:96:b8:fc:63:b6:60:5d:1a:ab:b1:
3e:96:57:7e:0f:c4:f6:8c:71:59:4e:e8:9f:13:a8:f4:16:c3:
5c:07:0d:fb:4b:0f:21:b6:48:fa:31:2b:d1:e5:2a:f7:f8:1f:
13:30:96:1c:bc:f2:ff:a6:85:af:4f:13:a5:b7:9d:43:12:d3:
67:3c:3e:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:25:43 2025 by rpki-client