Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/_KUC4J-1RPkMr-3BKDkgx0DrleQ.roa
File: _KUC4J-1RPkMr-3BKDkgx0DrleQ.roa (raw, json)
Hash identifier: oJiB4sK7p5nBPSzpI09Vv5Xwy4vcsh+cBmOsSfY3GY8=
Subject key identifier: FC:A5:02:E0:9F:B5:44:F9:0C:AF:ED:C1:28:39:20:C7:40:EB:95:E4
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0636
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/_KUC4J-1RPkMr-3BKDkgx0DrleQ.roa
Signing time: Mon 20 Jan 2025 02:54:50 +0000
ROA not before: Mon 20 Jan 2025 02:54:50 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1590 (0x636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 20 02:54:50 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FCA502E09FB544F90CAFEDC1283920C740EB95E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:f5:aa:f2:8f:a9:2f:7e:49:af:97:74:8c:
ed:ea:fc:d6:0d:9a:b2:ae:ac:b9:c8:e1:2f:45:2c:
80:86:c0:09:81:42:76:8d:d4:1a:88:13:e2:fc:a9:
89:47:14:a1:bf:88:eb:f2:71:f3:d4:e5:76:c0:4b:
aa:67:17:73:fd:09:02:8d:db:f9:81:e3:90:8d:cf:
71:99:e9:84:e1:4b:21:75:68:94:ba:96:19:db:d7:
85:4e:77:cf:f4:d7:31:b9:fe:c0:1d:ae:48:d9:7b:
aa:13:59:3e:71:c0:5e:71:fe:ab:60:27:c9:aa:e0:
51:78:8e:85:d2:38:2d:93:be:10:3c:1d:ba:e6:35:
97:96:6c:68:69:76:81:ce:aa:c6:e4:53:ed:9b:10:
3d:b7:ab:a5:83:54:5f:a5:a1:a6:97:bf:24:fe:66:
45:bd:d9:94:7d:81:9f:5b:9a:7e:43:aa:16:6f:7b:
6b:6a:1a:92:aa:e6:41:53:46:a4:c9:75:78:dd:fa:
48:1e:d8:36:16:82:da:13:92:2c:f4:86:0f:5b:e4:
d0:a7:7a:c7:e7:9b:66:2c:dd:f9:72:e3:9e:b9:3a:
a0:b8:db:0e:88:03:8c:b6:53:d8:a8:16:3a:63:8c:
0e:32:0a:59:ea:e5:14:73:ff:bf:fc:24:27:bc:32:
80:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A5:02:E0:9F:B5:44:F9:0C:AF:ED:C1:28:39:20:C7:40:EB:95:E4
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/_KUC4J-1RPkMr-3BKDkgx0DrleQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
41:8a:07:85:a5:1f:02:98:e3:1a:f0:f0:51:2a:af:5d:9d:a0:
14:88:ad:a1:62:99:ce:7f:78:57:d4:f4:3c:54:a7:1f:e2:0b:
03:e2:d2:f2:a7:a8:52:53:15:26:f2:e8:1f:e4:1c:fc:d6:3a:
5c:63:d5:bd:73:e8:e1:dc:65:8a:2c:f1:9f:5f:0e:fe:9c:20:
d7:20:40:9e:ac:5b:92:4e:12:3e:04:16:04:0c:be:73:4c:b1:
72:65:34:5d:90:fe:1e:e2:dd:cc:93:2b:d1:1f:f2:51:68:68:
d2:a7:6d:62:c2:91:cd:55:db:5d:00:ae:ca:8e:9c:91:e3:6c:
57:c8:6d:ee:13:7f:7d:db:bd:1d:3d:23:67:70:d4:3c:cd:4a:
9b:02:ee:52:f9:68:a9:21:78:2c:ff:31:58:e4:b1:0b:88:7d:
d3:90:28:4c:d2:79:76:d2:c3:f5:e6:cf:42:16:dd:8f:68:a8:
d9:f4:ba:17:ff:7e:ce:01:f8:2e:3c:8a:e0:aa:40:1b:aa:26:
0c:ec:61:4a:7f:8a:04:43:04:83:f8:e5:0f:c8:67:79:45:50:
15:7f:85:7b:db:13:f4:d4:2a:7a:b3:7d:ae:4f:79:8e:15:91:
b9:f1:03:35:06:5e:3a:a5:41:78:81:00:36:bf:34:ee:a4:0a:
b9:82:32:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:14:49 2025 by rpki-client