Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/aLvVfIdu64XpnnDHxBMV-ugxO1w.roa
File: aLvVfIdu64XpnnDHxBMV-ugxO1w.roa (raw, json)
Hash identifier: nRTHWkyFCNt7ky8Nnp/CXBjWVaFkALjbtIQlFziKytY=
Subject key identifier: 68:BB:D5:7C:87:6E:EB:85:E9:9E:70:C7:C4:13:15:FA:E8:31:3B:5C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D24
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/aLvVfIdu64XpnnDHxBMV-ugxO1w.roa
Signing time: Fri 07 Feb 2025 14:25:48 +0000
ROA not before: Fri 07 Feb 2025 14:25:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3364 (0xd24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 14:25:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=68BBD57C876EEB85E99E70C7C41315FAE8313B5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:09:b6:77:12:f5:00:6e:f3:31:0c:b1:ac:
47:36:5b:8c:39:16:ce:c0:a8:c6:8f:84:1a:0c:f2:
e2:ec:a1:33:23:26:1f:59:7d:37:72:0e:7a:45:3c:
db:3f:24:6f:08:2c:b4:7b:a8:12:96:07:65:a3:1c:
31:99:bd:75:f7:b3:64:08:4d:a0:36:0d:47:4a:b5:
ce:65:3b:b7:e5:e7:78:45:4b:b0:8b:4f:70:0b:90:
fd:52:b4:23:35:1f:a4:a7:ae:58:fd:44:03:6c:94:
d5:83:67:01:37:75:60:3e:48:3d:bf:17:e1:89:26:
34:0d:c7:b7:ae:4c:07:6e:a4:34:23:90:62:ab:fe:
12:03:d0:d6:00:15:77:d5:62:d2:59:34:d9:52:48:
ad:50:e2:aa:66:ba:dc:70:82:87:ad:ea:95:b5:49:
da:75:e3:d7:f3:1d:05:e0:a0:2e:7d:65:e9:41:67:
29:d2:55:f1:7b:8a:12:8b:44:7f:57:a1:f9:2b:d3:
c0:5f:35:78:fe:f8:26:41:2f:78:7e:8b:b9:9c:82:
ff:56:f5:4a:5e:c9:f4:3b:26:91:6d:e9:63:86:65:
c0:88:f3:a5:26:82:8b:92:e3:60:0c:96:ed:95:dd:
51:8e:4e:20:10:f4:c4:54:f3:18:cf:06:a3:12:53:
f6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BB:D5:7C:87:6E:EB:85:E9:9E:70:C7:C4:13:15:FA:E8:31:3B:5C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/aLvVfIdu64XpnnDHxBMV-ugxO1w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
61:3f:1e:37:d9:08:47:a0:23:6e:e5:e0:bf:d5:45:02:21:6b:
91:23:98:d9:c4:96:a1:03:80:58:cc:2f:94:6c:de:9a:ba:98:
28:f5:f4:57:75:71:68:6f:31:8b:6e:9d:bc:22:99:72:9f:93:
b4:b7:b9:d2:8e:8c:bc:38:5f:20:e8:43:94:65:77:4b:9a:44:
7f:86:ba:93:c4:a9:58:25:49:93:07:4f:bb:ca:04:92:3c:6f:
99:ea:e9:1f:c1:ff:6b:69:9e:9b:26:6d:db:f3:83:a2:ac:18:
4a:49:de:fb:65:43:2a:c2:6a:a9:3c:0f:eb:99:c5:b1:c8:34:
1a:c9:90:d5:7c:a9:f1:43:1d:5f:ac:b9:01:80:57:38:63:5f:
19:b8:32:ed:6c:c4:b3:ef:95:b5:9b:bc:85:cf:b4:3f:ba:ca:
71:3e:c6:eb:2b:3e:00:f3:dd:3f:e1:3b:85:3c:10:ac:be:5b:
ce:a5:ed:46:03:8e:15:07:0e:99:ce:c9:85:97:af:5f:33:0d:
50:01:e7:2f:2b:60:bd:6f:5b:e8:12:32:58:05:01:ce:e6:56:
e4:a1:4f:f0:5c:2d:7f:c4:fc:4d:6e:e3:cd:a5:d3:85:7b:80:
4e:cf:0a:ab:a0:ea:33:72:a7:12:3a:8a:75:00:f3:5c:63:15:
b1:ea:97:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:14:06 2025 by rpki-client