Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Q_F3ED8X0XJDKiPMI_nXPtbHbX0.roa
File: Q_F3ED8X0XJDKiPMI_nXPtbHbX0.roa (raw, json)
Hash identifier: sDKExAfibT50D6NPFsr4n3rogocqtePDV3SAIkcOKAU=
Subject key identifier: 43:F1:77:10:3F:17:D1:72:43:2A:23:CC:23:F9:D7:3E:D6:C7:6D:7D
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0DCE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Q_F3ED8X0XJDKiPMI_nXPtbHbX0.roa
Signing time: Sun 09 Feb 2025 08:55:54 +0000
ROA not before: Sun 09 Feb 2025 08:55:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3534 (0xdce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 9 08:55:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=43F177103F17D172432A23CC23F9D73ED6C76D7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:46:a0:78:db:50:e1:cc:76:01:b3:be:ce:
dc:d2:bc:09:91:82:58:33:fb:11:8c:58:d2:74:58:
98:83:52:d8:36:f6:a3:40:09:8b:78:47:c4:31:00:
78:e0:d4:da:55:25:63:65:05:4b:00:3d:a7:ab:26:
2c:54:f5:08:ec:c4:79:a2:de:db:ca:2c:17:de:86:
d5:89:98:28:5d:9b:b4:36:1c:61:74:55:a6:67:4e:
4e:9a:ad:8d:9d:b7:43:8a:8a:4d:dd:9b:4b:61:c0:
6f:d5:f8:99:bf:10:54:8f:73:f6:68:94:ee:86:52:
75:94:62:3d:05:f2:05:b6:0f:f6:df:7b:51:c2:dd:
6e:6e:fb:32:55:0d:b6:8d:64:07:98:8f:a4:e4:28:
e0:7b:68:95:00:05:cc:42:bb:89:8b:b8:2d:f7:1d:
48:bf:f9:fa:10:52:71:f3:b6:00:e9:6c:1f:0d:7e:
ca:12:c8:16:00:04:5a:0b:a3:66:62:c0:d9:8e:0c:
59:ad:7c:00:31:eb:5a:9d:11:f2:2d:87:c5:15:6d:
ba:68:d9:55:fc:10:8d:a3:43:ee:74:7f:ce:4d:1c:
64:a8:bd:d6:8d:ba:6f:bd:98:8a:de:48:96:d8:89:
39:f8:49:a7:09:0c:10:97:7a:99:b3:a3:aa:9e:2f:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F1:77:10:3F:17:D1:72:43:2A:23:CC:23:F9:D7:3E:D6:C7:6D:7D
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Q_F3ED8X0XJDKiPMI_nXPtbHbX0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:a2:d7:20:e7:b5:5a:8b:f0:0e:7e:45:2e:e3:b2:b3:ed:4a:
64:f1:da:f8:2b:73:ac:91:b4:7a:52:7c:86:88:f2:81:88:c2:
4a:8d:17:30:7e:1a:94:13:41:86:c8:6d:fa:8b:90:53:8d:c8:
bf:c0:61:ef:ec:55:1d:1d:e1:cc:7e:49:b6:b2:37:02:31:01:
82:f7:7e:0b:a4:87:9a:ad:eb:a7:a6:ce:0b:2c:44:3b:97:16:
9c:20:89:4b:c5:6b:40:74:0a:31:46:5d:95:aa:00:95:32:d3:
3f:18:9b:be:e2:40:7f:e0:30:a3:78:28:02:32:df:f5:40:ab:
09:28:fa:c1:68:a6:df:a6:1a:8c:03:de:5c:42:75:1e:54:20:
2f:9b:b8:a4:90:52:e0:cd:80:8e:89:bc:47:ec:dc:5f:44:f2:
5a:18:e5:ac:3f:07:ab:a1:33:f1:41:f0:85:9d:b1:8c:44:e4:
92:04:cb:9d:ad:b1:be:4c:6e:6d:17:9b:0d:62:17:ee:2b:ef:
59:4e:25:f4:c2:b7:be:de:a4:fc:1c:f6:fb:b0:69:ac:67:62:
b2:13:58:cf:e9:cb:a2:93:e8:90:40:9c:3d:46:76:98:4d:c0:
9e:1c:73:27:9c:e2:a1:31:ba:35:6f:92:af:72:76:6b:55:c3:
51:fe:4b:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:18:34 2025 by rpki-client