Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/QUp71gK96Ad2zI200shHL5_NE8g.roa
File: QUp71gK96Ad2zI200shHL5_NE8g.roa (raw, json)
Hash identifier: S7wfxIIm1ISS/+9OvUoelCUuBQBlWoxQD8AuhPhomWI=
Subject key identifier: 41:4A:7B:D6:02:BD:E8:07:76:CC:8D:B4:D2:C8:47:2F:9F:CD:13:C8
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 05EC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/QUp71gK96Ad2zI200shHL5_NE8g.roa
Signing time: Sun 19 Jan 2025 08:26:17 +0000
ROA not before: Sun 19 Jan 2025 08:26:17 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1516 (0x5ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 08:26:17 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=414A7BD602BDE80776CC8DB4D2C8472F9FCD13C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:77:95:46:eb:ec:27:84:06:5b:47:be:33:
be:42:1c:01:b0:59:53:71:5f:3a:87:8b:8f:9f:1b:
9c:f1:f8:20:56:b6:06:b6:13:b2:c4:6d:5d:29:99:
f2:00:47:ad:ec:0c:d9:96:df:88:d0:a0:72:40:c1:
d6:56:98:13:f6:b2:23:fd:fa:bb:80:86:65:da:2a:
ba:72:3f:d3:c8:a0:b3:00:c8:49:bd:9e:06:7e:03:
a6:ed:4e:db:8f:2e:f2:ff:26:00:c1:50:1c:04:b9:
03:ac:88:84:da:20:8c:3f:65:7e:91:d7:99:2a:29:
69:8e:16:ba:3f:33:68:2a:b6:12:b7:ad:6d:96:d9:
fd:50:c8:cb:73:3e:69:3e:86:2c:b9:4e:26:1c:41:
88:ee:21:f4:39:3d:41:62:25:76:82:bc:25:5e:c8:
18:8e:2b:05:82:60:cb:4f:81:e2:de:46:61:cf:0f:
6c:61:1c:9e:bb:9c:a3:58:17:b9:f7:08:f1:e1:3f:
f9:07:3c:a8:c2:1a:a8:6a:02:94:2b:e8:38:de:b0:
4f:93:c7:e5:df:e6:76:0b:62:7e:80:69:16:c3:fd:
6c:39:3c:92:a8:f6:3d:e5:87:8e:fc:88:d8:70:ac:
e8:19:0f:56:73:8d:fb:11:76:e6:28:08:8c:56:94:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4A:7B:D6:02:BD:E8:07:76:CC:8D:B4:D2:C8:47:2F:9F:CD:13:C8
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/QUp71gK96Ad2zI200shHL5_NE8g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
49:6e:bf:db:13:d1:65:e1:1f:ae:24:fb:6c:31:63:f9:5a:2b:
7b:50:eb:ba:92:33:cb:14:e7:69:be:96:05:6e:f0:5e:7c:39:
86:b1:12:84:07:6d:6e:7b:9c:bd:45:37:77:24:9d:30:9a:48:
68:e4:99:42:49:d8:c5:bf:be:4b:5a:2e:ec:4f:43:c1:f8:8e:
2b:70:f5:a0:0f:da:a2:6e:39:5c:55:f0:b9:b9:22:a6:ec:cd:
3d:71:0c:46:0d:a8:e7:e2:bf:50:1c:34:2e:f5:b1:c7:fa:6a:
a9:53:19:98:16:07:30:b8:fa:45:20:50:d5:ff:1a:2e:72:59:
79:c7:bc:b3:4a:e7:dd:1a:c7:69:73:cb:ea:3e:af:12:ff:fb:
aa:40:6c:44:6d:f8:74:1c:0c:00:24:5f:99:72:1d:31:6a:98:
f2:83:96:9a:8d:9b:b0:06:1a:0a:e0:63:8a:71:5a:e0:34:13:
27:35:d3:8d:c5:91:0c:1a:b1:92:96:e1:cf:e7:c7:e2:88:88:
17:a5:0d:02:96:60:61:e3:26:72:f9:12:63:f0:55:85:a9:2c:
ec:95:75:33:c4:4b:1a:bb:d9:84:1f:ad:35:16:2d:36:18:59:
84:3a:5e:41:99:72:fe:07:8b:4f:88:7b:a4:fd:9d:5e:c0:cf:
4a:18:8a:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:07 2025 by rpki-client