Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/YPqc92uWASjcwhk9-PBcdPDzY6s.roa
File: YPqc92uWASjcwhk9-PBcdPDzY6s.roa (raw, json)
Hash identifier: 8i1LReDrzqqXJ2nuAjJ137GimfwwAn5u6A2eQvPoQXc=
Subject key identifier: 60:FA:9C:F7:6B:96:01:28:DC:C2:19:3D:F8:F0:5C:74:F0:F3:63:AB
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0830
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/YPqc92uWASjcwhk9-PBcdPDzY6s.roa
Signing time: Sat 25 Jan 2025 09:25:11 +0000
ROA not before: Sat 25 Jan 2025 09:25:11 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2096 (0x830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 25 09:25:11 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=60FA9CF76B960128DCC2193DF8F05C74F0F363AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:b5:63:1f:14:c5:ab:d9:8e:c1:88:47:c7:
e1:3d:05:95:b6:fd:f2:57:be:bf:e4:54:fa:d4:c1:
59:46:a9:a7:0d:fe:57:5a:60:ad:d6:2d:52:6e:1d:
21:09:83:45:1c:18:0c:df:5c:06:be:81:1b:bb:d1:
82:aa:13:8a:fc:84:20:26:d3:48:e3:44:7d:cf:71:
7e:9e:39:49:ac:22:4c:52:2f:b8:88:32:cc:f6:d3:
ed:eb:cc:6a:78:5f:4f:0d:86:6d:a3:33:1e:f6:13:
77:b0:1b:85:5d:5a:ab:90:3c:d6:f5:c9:36:11:93:
06:8a:a4:bf:cf:eb:ec:6a:c1:e8:91:77:bb:b3:e3:
ea:c0:e1:f1:a2:03:e8:4c:e7:04:b8:e5:05:3d:d2:
c1:bf:d0:96:ad:0c:de:a3:b7:ac:d4:e1:ec:28:99:
c4:40:bc:7a:0f:cc:99:c2:6c:13:c3:90:4b:8a:4b:
4a:c7:2f:6d:64:76:7f:e0:56:2e:6a:7f:3b:16:a5:
8f:8c:66:e2:1d:35:f6:b7:7b:d1:74:d3:a8:26:41:
19:7b:95:c1:ab:e0:13:fc:ec:a2:9f:e6:0c:1d:cd:
78:84:6b:f3:ad:94:b0:50:d6:97:f4:27:d9:75:47:
fe:38:5e:64:2c:83:f0:87:0a:fa:5d:d0:d6:43:f6:
f9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FA:9C:F7:6B:96:01:28:DC:C2:19:3D:F8:F0:5C:74:F0:F3:63:AB
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/YPqc92uWASjcwhk9-PBcdPDzY6s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:e6:97:c6:61:cd:fd:78:88:15:b4:86:9f:2c:86:18:db:7e:
de:d0:97:c6:57:18:0f:f7:06:ba:56:90:cc:4e:7a:7e:a1:03:
b0:cf:81:85:10:ad:60:03:f5:4e:58:68:4b:3a:fa:26:7c:a0:
59:97:92:36:b0:6a:fc:6b:cb:a8:4a:2f:a7:8c:43:d3:e7:b4:
9f:07:2e:c6:6e:5d:b8:48:b6:37:a4:45:ad:2b:bb:e6:f0:cd:
75:86:00:8c:f6:72:4d:3f:0d:51:86:49:5d:46:b8:a0:46:ac:
0d:72:39:29:38:29:58:08:0e:ec:22:dc:28:41:67:b5:bb:18:
18:19:7d:46:22:34:b0:da:98:9b:d3:c7:08:7c:bd:29:2f:28:
56:84:ea:34:c1:94:90:a5:b3:2a:af:9f:0b:74:61:c7:01:b4:
f2:e9:72:70:15:f2:f6:00:be:0a:3b:2b:ae:b4:3f:bb:1c:a8:
62:22:ac:9c:28:7b:21:91:9a:93:1d:ec:08:98:a4:50:cf:42:
de:45:8b:2b:be:f5:b4:af:19:88:29:ae:d4:d7:e0:16:d6:1e:
3e:07:4b:e5:57:41:55:66:39:fd:33:ad:a1:cc:5a:8f:2c:a0:
d8:90:0c:13:09:3d:6c:bb:72:e0:04:f2:ac:8e:69:51:8a:8b:
d8:7b:0d:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:12:11 2025 by rpki-client