Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/aWePKzeKBtHDpCTiTlt88fxvfxE.roa
File: aWePKzeKBtHDpCTiTlt88fxvfxE.roa (raw, json)
Hash identifier: wv6CqhpWDOtZznzDHDTfLZF7ZFExRhJWbk/7F59us40=
Subject key identifier: 69:67:8F:2B:37:8A:06:D1:C3:A4:24:E2:4E:5B:7C:F1:FC:6F:7F:11
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 094C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/aWePKzeKBtHDpCTiTlt88fxvfxE.roa
Signing time: Tue 28 Jan 2025 08:25:27 +0000
ROA not before: Tue 28 Jan 2025 08:25:27 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2380 (0x94c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 28 08:25:27 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=69678F2B378A06D1C3A424E24E5B7CF1FC6F7F11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:a1:fe:c1:1a:bd:b5:60:47:19:39:28:f8:
ff:d4:9a:ef:58:9d:8e:f1:f9:88:f6:48:cd:f2:95:
e8:65:bb:c9:10:d3:10:8a:1b:d9:7a:24:62:d5:0d:
56:79:3c:4f:dd:70:1c:3d:b0:0b:93:8f:b3:1d:f2:
5b:5b:25:4b:1a:0f:54:e3:0f:fe:2c:9e:77:d0:a6:
37:1e:ab:4c:60:48:69:a8:d9:ce:60:4b:c5:87:fe:
fa:6f:9c:49:3d:4d:60:85:9c:1b:7f:91:68:dd:bb:
bb:b5:70:e8:b3:f9:0d:98:5c:a2:59:46:6d:f3:7a:
80:74:aa:62:59:57:81:9e:81:1b:08:34:bc:dd:48:
29:3e:e0:66:88:90:a7:32:44:d9:33:26:29:8c:19:
3e:36:18:93:b9:6f:61:6a:1e:b4:45:c8:86:90:00:
82:d7:c4:e7:7e:f0:b1:2f:93:d9:fb:f9:e7:f3:2e:
2a:3e:0d:f4:47:99:af:3a:f9:47:a0:df:24:a9:0b:
b3:42:1f:97:77:b6:4f:8c:c8:65:32:80:e3:bb:b2:
50:42:86:4c:cc:75:1e:7d:ae:63:a7:f0:cc:8b:e2:
f0:91:59:1d:9f:7f:05:d0:93:2a:8d:53:bd:83:53:
6c:08:67:2e:cf:3e:a7:a6:07:59:e6:f4:a0:f8:93:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:67:8F:2B:37:8A:06:D1:C3:A4:24:E2:4E:5B:7C:F1:FC:6F:7F:11
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/aWePKzeKBtHDpCTiTlt88fxvfxE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
72:a5:3c:40:6b:e2:8b:e5:60:8c:f6:bf:b1:6b:54:26:e7:ee:
16:0d:37:87:aa:7c:b1:d9:95:3d:5d:77:7e:d2:c5:a9:ae:fb:
0c:10:b0:29:14:fd:6c:f1:3d:81:e6:e4:74:71:24:ba:66:1c:
42:7d:dd:15:41:c5:64:60:a2:75:94:42:db:60:59:10:ad:7b:
78:45:8f:bf:73:1d:ee:99:24:8b:75:52:1c:df:3b:a2:99:ed:
a4:bb:0b:ab:f0:f4:9d:16:5a:4e:76:e9:c8:a0:5d:21:b7:96:
9e:3c:69:be:31:4b:35:dd:da:cc:9f:bb:a1:c8:90:0d:24:7f:
97:93:a7:5f:83:49:e5:1d:99:0a:40:30:ba:22:81:b0:be:f3:
93:b3:b9:6b:94:f5:56:37:ae:42:97:98:da:e3:d9:f7:55:bb:
7c:b0:5b:1f:88:5a:a6:82:1c:90:e4:e5:94:a9:6a:f3:08:e8:
55:be:cd:d3:33:55:b6:f4:fd:04:73:80:0d:6b:c5:47:2c:b9:
c9:f8:cd:20:f7:e9:41:5b:78:b9:99:9f:8b:4e:0c:39:be:74:
56:06:7b:39:4b:e9:01:bf:1d:c8:e9:8d:b4:0e:1f:c9:ff:d1:
99:2b:c5:a7:81:d2:d1:cf:f2:4e:49:ea:9d:4f:90:8f:3c:38:
0b:11:3b:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:33 2025 by rpki-client