Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/QvT8mLc9iIwxUN9TUB6rqfRWJdk.roa
File: QvT8mLc9iIwxUN9TUB6rqfRWJdk.roa (raw, json)
Hash identifier: g8/EsFGmPOPqbL3+XcdmgY5VRKqQieY0xC50nssU66I=
Subject key identifier: 42:F4:FC:98:B7:3D:88:8C:31:50:DF:53:50:1E:AB:A9:F4:56:25:D9
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 084C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/QvT8mLc9iIwxUN9TUB6rqfRWJdk.roa
Signing time: Sat 25 Jan 2025 16:25:09 +0000
ROA not before: Sat 25 Jan 2025 16:25:09 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2124 (0x84c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 25 16:25:09 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=42F4FC98B73D888C3150DF53501EABA9F45625D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:7b:ed:f7:41:77:6d:ad:03:0d:d7:bd:c4:
b4:3e:c6:fa:d0:6a:ce:77:27:41:6e:83:c0:5e:a7:
e6:9e:fb:f7:a1:93:37:ed:e9:a6:bd:06:18:71:80:
ad:55:c0:0e:12:2b:61:8b:c3:77:3a:75:89:d6:f4:
e9:b3:86:6f:20:de:8b:ef:ab:36:09:4e:f0:d9:57:
09:2e:8a:4a:ac:11:cd:83:14:05:7f:49:00:ed:1f:
6b:d7:5f:d2:18:cf:c4:85:f5:18:01:60:52:3f:67:
49:8a:2d:4f:e3:77:80:94:f9:be:f5:15:5e:ae:c8:
cc:35:2b:8e:8f:4c:16:ba:a2:d4:0e:da:29:8e:31:
e8:ba:4e:11:ba:55:56:dd:0f:e7:09:c6:b2:9e:48:
2c:0a:b9:52:40:99:c1:25:de:f0:95:9c:e0:60:41:
71:5f:3a:64:4d:3e:eb:a5:3e:7e:61:cc:a0:b3:20:
2d:6d:24:9d:4b:60:fa:f8:5e:6f:e4:17:1e:1e:91:
15:32:c6:f0:2f:dd:10:74:c5:e5:f8:61:f3:85:75:
ad:92:74:1c:e8:e4:32:5f:fb:fa:c2:e3:f0:b3:a3:
df:11:4f:a5:eb:d4:f7:fc:49:0e:dc:c8:b4:95:d1:
37:2e:3c:93:7b:81:44:a9:83:6d:c6:9a:c7:ca:47:
1e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F4:FC:98:B7:3D:88:8C:31:50:DF:53:50:1E:AB:A9:F4:56:25:D9
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/QvT8mLc9iIwxUN9TUB6rqfRWJdk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:71:b1:87:68:18:e4:1d:73:c1:57:05:53:aa:42:60:8b:ae:
14:4a:ed:05:4b:1e:8e:aa:65:30:34:29:27:45:1f:67:15:c6:
1a:d6:b9:42:54:7b:d5:b3:e4:1f:97:a2:ed:b4:fd:81:c0:31:
a1:d0:81:b6:b0:fd:a0:25:4f:e3:f7:4e:bf:e9:9b:5b:7f:11:
dd:1a:1a:8c:13:dc:9b:b2:75:d7:ff:15:5b:fb:fb:30:7d:ff:
07:c3:e8:be:bb:ce:93:85:13:79:6e:9b:47:6d:0b:61:03:34:
ee:3d:3f:93:0c:a3:95:08:57:76:17:2e:bb:3a:1f:6e:ca:46:
51:e3:e9:53:89:f0:c1:96:c6:49:da:20:22:61:4b:f8:2e:8c:
cc:6f:6e:e8:b9:62:f6:70:a9:58:15:19:d0:88:d1:43:bf:42:
99:5f:b0:b6:2f:61:f7:ab:e9:a4:07:58:e5:ab:6f:a7:38:92:
76:6b:6b:c0:7c:45:09:ad:35:30:c8:d3:20:1c:06:b0:af:46:
38:dd:3f:64:49:41:7e:c9:29:c6:fc:c1:21:45:7a:4e:c1:60:
d9:e9:36:bf:d8:f4:45:3c:14:e4:3b:45:ff:6e:7b:c6:38:fc:
fc:ca:6b:50:b6:67:15:94:a1:a9:15:75:b2:54:fe:a2:fa:8a:
19:2a:2e:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:18:49 2025 by rpki-client