Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/PQYnQF7VxuwCH5uqAbkWnCRJCfg.roa
File: PQYnQF7VxuwCH5uqAbkWnCRJCfg.roa (raw, json)
Hash identifier: HTSxhtKRxw0VxeENwn3gtM8CQ8Ch0FLvqnOVccpfW6g=
Subject key identifier: 3D:06:27:40:5E:D5:C6:EC:02:1F:9B:AA:01:B9:16:9C:24:49:09:F8
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 05B2
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/PQYnQF7VxuwCH5uqAbkWnCRJCfg.roa
Signing time: Sat 18 Jan 2025 17:56:14 +0000
ROA not before: Sat 18 Jan 2025 17:56:14 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1458 (0x5b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 18 17:56:14 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3D0627405ED5C6EC021F9BAA01B9169C244909F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:80:b3:85:8b:e0:4a:05:1f:c6:2a:a8:78:dc:
7c:8e:62:55:0d:2f:e8:1e:f2:ee:f3:e4:8c:dc:a7:
98:16:03:5c:f5:4e:aa:3c:b5:68:fb:7c:7a:2c:c1:
bf:87:7c:9d:21:eb:54:68:70:2b:34:79:6c:03:1f:
37:90:ab:8a:22:b9:10:2c:62:ac:84:a7:8f:ea:33:
0d:e5:ec:a2:c3:31:72:52:e5:de:38:42:e8:c3:03:
da:ae:46:66:95:a5:5d:88:a0:ac:dd:e4:dc:3e:50:
a3:56:3e:5e:c5:98:de:cc:98:60:5e:a6:a8:fa:ee:
e6:65:10:92:d3:f0:f8:03:d5:64:5c:ce:41:21:4e:
4a:29:c0:02:eb:ef:b0:64:38:ad:e4:2a:0f:39:29:
4f:84:e4:44:08:b9:2d:f5:bb:aa:12:7b:10:5a:11:
c0:27:ca:98:9a:8e:15:c1:4f:a8:bc:c4:13:c9:7f:
73:d0:9c:27:3c:03:eb:91:0a:a3:1e:67:50:c7:8e:
00:86:7f:09:3b:87:d2:cf:29:21:7a:93:b2:d8:10:
5a:e3:77:7c:d2:87:a4:97:ac:5d:8c:a6:3c:0a:f1:
83:4f:36:07:d8:ff:ee:49:e8:f6:3f:4d:de:24:e4:
46:fa:f9:a1:19:56:66:3c:c9:7a:19:80:a0:01:29:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:06:27:40:5E:D5:C6:EC:02:1F:9B:AA:01:B9:16:9C:24:49:09:F8
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/PQYnQF7VxuwCH5uqAbkWnCRJCfg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:a5:ec:d8:03:2d:ef:84:12:96:17:af:5e:6c:0d:33:d7:d9:
68:8a:d2:53:08:2f:e1:3a:17:c8:65:8d:62:d0:7c:56:c6:da:
80:2a:b6:95:1e:1d:79:05:ca:80:71:57:d3:75:25:50:99:7b:
88:82:d1:40:31:09:d9:4a:24:31:4a:31:40:06:ce:e5:53:f4:
92:fe:13:a0:1b:85:4a:d4:8c:f4:9c:f6:dc:9a:ff:9f:5c:58:
50:9d:7b:4c:53:6b:24:e0:b5:2a:90:88:89:4a:7f:ed:eb:74:
8a:07:22:32:69:8b:65:20:5f:2a:9c:26:cc:75:03:cc:4c:34:
16:34:e8:f2:42:4e:c6:23:2b:18:3b:1f:a7:77:40:88:d1:46:
42:f0:e0:c1:81:8e:0c:d6:1a:9c:c5:3c:23:de:3d:ee:09:1e:
24:87:88:b5:1c:53:cf:61:2f:29:16:70:bb:12:06:9a:9d:c0:
9d:1d:d6:6a:63:29:e3:e8:5d:37:fa:1c:42:2b:b7:fc:e6:97:
06:4e:b5:df:3c:e3:a5:3b:3c:d6:25:ec:67:ac:34:79:0b:e3:
ee:5c:11:aa:3f:ba:11:76:1a:27:50:44:38:fa:73:d3:89:c9:
6f:74:ba:7a:99:2d:4a:d3:dc:ef:8f:51:fd:c3:37:9e:be:a9:
7f:3e:33:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:12:52 2025 by rpki-client