Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/a9B1UIoQGLTRf_lfK9BvtjpU8S4.roa
File: a9B1UIoQGLTRf_lfK9BvtjpU8S4.roa (raw, json)
Hash identifier: rgKZAFtNzQd0c+Ki1jtBOXJOgb0hgIvIooUq4Ae6cDA=
Subject key identifier: 6B:D0:75:50:8A:10:18:B4:D1:7F:F9:5F:2B:D0:6F:B6:3A:54:F1:2E
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C4E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/a9B1UIoQGLTRf_lfK9BvtjpU8S4.roa
Signing time: Wed 05 Feb 2025 08:55:42 +0000
ROA not before: Wed 05 Feb 2025 08:55:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3150 (0xc4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 08:55:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6BD075508A1018B4D17FF95F2BD06FB63A54F12E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:e1:cc:be:1f:e3:e6:2e:98:51:ba:43:8c:
6d:9b:b3:74:46:fd:09:c1:71:bc:11:e4:25:73:ff:
34:e2:46:aa:9e:30:43:d3:8d:28:cf:f1:71:c9:af:
da:3a:fc:b1:21:1f:9a:f8:fb:fa:61:58:1b:94:e1:
1d:37:64:ac:38:36:bc:e1:f4:5d:c8:b4:f4:c3:a5:
c6:ad:fc:68:b2:fc:b6:0e:9a:aa:e2:56:12:fa:e7:
3e:28:f2:b9:99:3a:e9:de:91:5c:2b:91:df:56:b1:
7a:ce:cd:b9:d2:af:34:ae:0c:b3:df:6e:30:ba:17:
91:33:84:ab:dc:ef:5e:93:19:7d:4b:e3:e6:d1:11:
0a:44:c6:21:fb:42:dd:b0:fd:b8:c1:2b:16:95:fc:
4b:30:b0:87:25:20:f8:bf:8d:12:a5:22:fc:6d:39:
9c:b2:b9:8d:e2:0e:ce:4d:9c:f2:45:1b:3a:d4:ab:
6b:6f:66:1d:55:42:d0:cf:30:6d:7e:15:bc:09:50:
c8:78:d9:6a:d9:02:16:61:41:cd:30:b8:af:bf:79:
e0:d6:82:21:bb:57:a0:89:61:e7:db:9b:c8:7c:fb:
c6:4d:fa:2b:1a:bf:ab:e2:a5:65:dd:ba:82:04:d3:
f4:ae:19:cd:55:cd:c2:10:06:c4:9a:28:90:9d:f5:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D0:75:50:8A:10:18:B4:D1:7F:F9:5F:2B:D0:6F:B6:3A:54:F1:2E
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/a9B1UIoQGLTRf_lfK9BvtjpU8S4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
28:6f:56:20:d1:74:b6:3c:4f:8f:88:5e:76:23:a5:1d:ed:de:
c9:4a:20:b9:51:8e:97:8d:4c:90:03:48:78:03:bb:e1:ab:69:
4c:88:c7:81:ce:50:85:30:dc:b3:71:aa:30:79:a2:0c:f2:58:
b5:b3:21:63:8d:22:2d:1d:85:60:cf:21:92:7e:5b:00:93:bc:
45:97:6a:7c:b5:95:09:cf:71:f0:92:8b:81:2a:14:7d:da:98:
6b:1f:66:fb:64:44:9f:fc:3a:74:93:e8:27:ac:94:d1:ae:0f:
7d:4e:93:01:10:0c:60:7c:5e:61:a6:53:47:b7:13:c6:3f:15:
d8:2c:8a:d9:d3:82:a1:b7:57:e8:a9:45:7b:88:58:c4:0e:0e:
3c:d7:ae:a0:00:aa:89:02:4b:be:43:76:13:a6:3e:2e:b8:00:
53:ae:28:1b:74:89:5a:35:f1:d3:3f:e2:42:3f:9e:5b:30:a8:
42:6c:52:0a:35:74:82:b8:76:02:bf:3b:e4:48:5c:83:f2:d0:
e0:0f:30:92:e2:7f:ea:71:fc:fa:c5:88:6c:d1:0c:f8:52:96:
98:5d:70:8c:51:24:2f:fa:40:10:65:99:30:d7:c6:72:2d:e0:
b2:af:1f:d2:54:e0:25:99:6b:92:90:db:9b:fc:61:6b:aa:d3:
43:18:af:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 21 12:25:22 2025 by rpki-client