Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/UPxicPW-0ZSwqnYI1yhkGVp7Tek.roa
File: UPxicPW-0ZSwqnYI1yhkGVp7Tek.roa (raw, json)
Hash identifier: wEPZ7TFGUrJOg7+9sITeLfXNYAN74+904/IrI9U6njw=
Subject key identifier: 50:FC:62:70:F5:BE:D1:94:B0:AA:76:08:D7:28:64:19:5A:7B:4D:E9
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CAE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/UPxicPW-0ZSwqnYI1yhkGVp7Tek.roa
Signing time: Thu 06 Feb 2025 08:55:43 +0000
ROA not before: Thu 06 Feb 2025 08:55:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3246 (0xcae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 08:55:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=50FC6270F5BED194B0AA7608D72864195A7B4DE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:34:6a:fb:65:47:ca:63:58:99:b5:b1:6b:
37:7f:94:cd:98:de:f7:94:f9:48:1f:cc:df:f4:c5:
20:64:30:1b:0e:37:62:37:25:3f:05:70:90:43:7d:
e6:1c:b3:1c:4e:ad:0f:05:79:eb:f8:c5:1b:39:6b:
e6:20:ce:4e:8e:22:8a:ec:7d:ec:21:24:31:1f:6d:
07:b5:39:80:ec:ff:84:da:f3:6c:a8:e8:8c:0f:c6:
cc:b7:25:0b:83:7a:95:ec:80:f1:8e:14:b5:6c:15:
98:c3:ca:4d:34:c2:c1:89:e0:46:33:17:4c:28:d3:
f6:cb:74:63:4a:58:56:1f:fe:a1:a5:1d:cc:47:e3:
53:df:d5:5a:db:e3:91:fd:06:6e:03:ad:18:cd:5e:
a1:c5:40:26:c2:a1:c9:56:ba:ca:35:82:d6:fe:f6:
8e:59:fe:d1:0e:45:ed:82:bc:15:33:5e:e6:ee:4a:
17:d0:bd:e2:8a:61:5f:1e:a5:02:0f:d5:11:15:27:
86:e6:56:48:0e:e5:6f:81:43:9d:72:1e:60:8a:97:
88:9b:bd:b8:5b:48:74:4c:3f:ad:f9:40:1f:91:bd:
f8:aa:b2:4f:80:a4:0e:23:98:3f:f4:84:c8:7b:8a:
5c:58:37:43:54:8d:a4:36:40:44:13:a5:96:a7:35:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FC:62:70:F5:BE:D1:94:B0:AA:76:08:D7:28:64:19:5A:7B:4D:E9
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/UPxicPW-0ZSwqnYI1yhkGVp7Tek.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
96:06:98:73:ac:c0:f5:d7:b7:0b:6c:74:9c:67:f5:d4:83:6f:
86:4a:9a:04:2e:6d:a7:1a:29:17:e0:a6:b7:06:6f:50:09:b3:
ac:7c:53:2f:14:c9:3d:2b:b2:30:f6:99:16:8e:a0:1f:a3:8f:
18:c3:b4:16:52:bd:ab:45:b2:c0:b0:03:7b:89:e0:14:66:df:
fe:0e:ee:c4:56:6f:0b:5b:4c:5b:79:3f:99:ab:5b:f2:e4:a5:
52:90:57:29:d5:85:49:4e:71:a5:4c:f0:f6:e7:9a:eb:c9:a9:
b4:93:b7:da:6f:e2:85:79:fd:4c:df:f4:56:ff:1c:34:4b:50:
56:5c:6f:56:4e:4e:07:87:c8:37:9d:66:89:ed:96:c5:c7:50:
16:f9:71:a7:d6:2d:76:c7:7f:7a:f3:de:14:e3:1e:32:50:c8:
b3:4c:d1:53:2a:a2:22:7f:6e:5d:ba:e5:59:e4:b4:dc:6c:0b:
7f:75:af:61:2b:7f:27:62:20:60:80:00:82:07:ae:21:ad:e3:
97:fd:c9:4f:0e:72:ec:a5:12:37:8b:03:81:44:6a:a1:1e:ce:
1a:5c:50:c1:86:33:8c:91:aa:74:ce:46:9f:d2:ef:c1:0a:08:
96:f2:ac:2d:b5:3c:49:15:b1:8a:18:09:52:5a:69:74:e4:74:
63:cc:c3:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:14:51 2025 by rpki-client