Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/RCnYnKQWKptCcpxv6MTjAUbb2Tw.roa
File: RCnYnKQWKptCcpxv6MTjAUbb2Tw.roa (raw, json)
Hash identifier: PrXhyiqcmHc5K5JRO5372oe3L3VFZK1xLdzDjhg/Tw0=
Subject key identifier: 44:29:D8:9C:A4:16:2A:9B:42:72:9C:6F:E8:C4:E3:01:46:DB:D9:3C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 09E8
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/RCnYnKQWKptCcpxv6MTjAUbb2Tw.roa
Signing time: Wed 29 Jan 2025 23:25:28 +0000
ROA not before: Wed 29 Jan 2025 23:25:28 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2536 (0x9e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 29 23:25:28 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4429D89CA4162A9B42729C6FE8C4E30146DBD93C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:00:5b:f0:ff:05:3c:57:2b:48:58:8e:e3:3a:
cc:e8:9e:9d:9f:29:73:38:51:61:2a:43:dc:41:a0:
01:64:22:ec:18:77:c8:df:34:17:b7:fe:c7:80:d9:
24:f1:38:cf:fe:51:89:08:1e:63:09:c0:ec:6d:8d:
c7:46:06:46:4c:3a:69:88:65:0c:91:61:5e:46:fd:
44:87:7b:ed:f6:f4:36:13:0d:ce:df:a6:9c:45:73:
7d:18:b9:c2:ee:e2:87:ce:36:97:99:63:d0:22:ac:
1b:49:bb:3b:ab:ef:e2:30:15:ae:0f:ca:55:89:7d:
d1:77:e0:d4:ec:ad:1b:67:d6:95:90:ca:67:50:6e:
8d:74:1b:5c:8a:57:02:f1:d4:9f:9e:e7:84:fa:11:
b6:3d:0e:4e:1f:c9:d1:79:69:eb:19:78:79:86:53:
78:7b:c2:6d:93:a8:91:36:58:3c:c9:8a:b0:e8:16:
a8:7b:69:da:85:cf:46:9c:69:0b:4a:a1:a3:2f:54:
d7:e0:86:a6:64:e7:00:c4:f5:6d:0d:8a:20:79:6f:
c6:44:49:18:48:a7:ff:ff:84:4b:bd:93:6f:9b:a3:
81:08:92:f0:99:ac:b7:6a:aa:25:6d:6f:41:75:31:
7f:d8:9b:06:11:b3:d3:96:67:dd:52:98:27:10:cf:
45:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:29:D8:9C:A4:16:2A:9B:42:72:9C:6F:E8:C4:E3:01:46:DB:D9:3C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/RCnYnKQWKptCcpxv6MTjAUbb2Tw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
30:04:f1:9d:6e:1a:9b:56:98:63:6f:b9:62:17:ba:8d:e7:d3:
67:de:08:3c:f1:9f:04:18:7b:d2:d1:9c:c0:2c:45:1e:0c:21:
24:b0:88:5e:38:fa:72:e9:f4:96:64:e3:27:66:63:3e:86:e0:
7b:ba:0a:53:4f:ae:2f:35:af:90:60:1a:fe:e5:97:0c:ea:64:
6d:c4:05:77:72:17:89:af:a2:71:95:27:2e:15:ed:4e:93:89:
0c:55:86:ac:b1:a0:0f:57:8b:b0:7e:e0:f5:ec:f0:08:ef:38:
5d:f7:3a:b5:d3:7c:24:80:b5:8e:38:4f:6e:7f:9a:8d:d2:b8:
51:9e:3c:a3:a0:d4:62:1b:58:42:79:ad:83:c1:20:68:17:1e:
bf:8a:93:4a:5c:e2:cc:90:04:7f:0d:b1:f5:17:5e:45:85:d3:
90:88:cd:29:9a:93:eb:cd:95:d2:1f:10:63:f5:dc:8c:07:17:
fc:80:7f:55:63:82:26:b6:b7:c4:bf:c0:b0:ad:09:c0:8e:05:
fe:df:19:df:9a:15:a1:6d:5c:d5:4e:d1:d8:13:cd:ba:e5:7d:
ca:e3:a3:eb:64:6b:06:bb:9c:49:b0:d5:b1:63:c0:a1:59:e3:
68:79:86:ba:7d:ae:0d:c0:2a:ce:61:a6:55:48:78:b0:bd:39:
72:5a:ef:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:01 2025 by rpki-client