Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Vc6lkyUzvOvogll0NUa5sSDfJnA.roa
File: Vc6lkyUzvOvogll0NUa5sSDfJnA.roa (raw, json)
Hash identifier: CRpJ6AAm7q3acrcHtVEGOVkSkTiVsxp9H1zClF9qFQY=
Subject key identifier: 55:CE:A5:93:25:33:BC:EB:E8:82:59:74:35:46:B9:B1:20:DF:26:70
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B58
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Vc6lkyUzvOvogll0NUa5sSDfJnA.roa
Signing time: Sun 02 Feb 2025 19:25:36 +0000
ROA not before: Sun 02 Feb 2025 19:25:36 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2904 (0xb58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 2 19:25:36 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=55CEA5932533BCEBE88259743546B9B120DF2670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:09:95:32:d3:3c:ea:a9:ab:72:9c:c6:2e:
a3:23:9f:cb:b5:a2:12:0d:64:97:98:68:38:7d:9c:
9a:eb:df:f4:80:41:11:aa:64:98:0a:23:c4:a8:ed:
dc:91:a0:c2:c2:8f:df:8f:58:da:d8:7d:d9:f1:75:
56:6a:5d:8d:07:3c:85:de:24:ce:f8:a8:63:60:33:
98:29:f3:34:84:17:2a:72:65:bc:de:8c:b1:c6:56:
65:01:29:82:9b:db:9a:a7:a0:5d:e3:41:00:44:48:
0e:1c:81:aa:03:ab:05:29:c7:0c:0e:48:40:1d:56:
76:ff:d2:a8:a7:8f:60:a8:b6:bb:c5:c1:76:f8:3b:
19:ca:96:28:20:7e:54:9b:37:91:67:37:30:d3:7e:
fa:8c:96:02:7d:3f:ab:92:55:ed:56:93:08:9d:56:
53:b4:3d:c4:a5:49:2c:01:30:18:f5:9e:c4:d3:07:
a9:11:81:50:0f:ae:d4:b2:8e:40:28:09:c0:5a:56:
8d:49:18:cb:36:ad:d8:4c:87:54:9d:d1:3b:32:76:
e3:59:44:96:19:a3:9b:ca:55:d1:68:d5:36:38:c9:
9a:a0:7b:98:64:a4:bc:38:0e:90:87:95:bc:8c:77:
15:f6:b5:66:e0:5c:1e:95:6a:6b:82:5c:ef:82:75:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CE:A5:93:25:33:BC:EB:E8:82:59:74:35:46:B9:B1:20:DF:26:70
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Vc6lkyUzvOvogll0NUa5sSDfJnA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:e4:71:2f:e9:8d:88:ca:59:7d:f4:92:86:a5:49:8f:c1:50:
4a:30:97:3a:7b:b1:8c:14:8e:a8:14:31:df:29:6d:27:01:3c:
b6:c4:a0:47:59:b6:d6:bb:54:a6:cb:a2:dd:aa:15:95:03:c5:
8e:49:d8:87:0e:17:4f:69:b0:42:e9:2f:5e:85:02:7f:18:36:
95:1d:98:6b:fa:6d:71:d9:f9:87:83:24:64:96:d9:9a:ea:85:
de:d2:cb:8d:8a:4e:26:57:c8:3f:a3:2b:83:13:9b:55:22:dd:
48:16:b3:08:8b:1a:22:21:50:91:aa:61:b9:e4:74:15:d5:6b:
28:0d:37:fa:38:f3:92:87:00:68:c0:20:f5:71:2a:6d:0a:14:
39:12:29:70:b1:d1:bf:18:bb:e3:ee:73:05:0a:e7:91:c2:1b:
06:36:e5:63:a1:c4:93:c5:67:4c:f0:ed:4d:c7:b0:95:41:25:
95:5e:76:41:b2:61:90:3f:a3:e5:3c:cf:37:56:49:ce:68:0b:
e2:33:90:1c:de:82:b0:1f:28:3d:a1:fb:ed:11:97:9e:a8:c7:
89:c6:e4:cf:88:7c:44:0b:15:7c:3b:39:7c:17:dc:45:c4:70:
f1:49:85:32:30:b4:c2:00:4d:b1:3b:44:d6:2d:2b:18:82:04:
1b:81:39:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:14:05 2025 by rpki-client