Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/e2RlLGXt_iEKflLX_0q-qDwELRk.roa
File: e2RlLGXt_iEKflLX_0q-qDwELRk.roa (raw, json)
Hash identifier: Iinulc+/+QI+QBWirqb27OIlvAhiEhsRaXZYZDnmkjg=
Subject key identifier: 7B:64:65:2C:65:ED:FE:21:0A:7E:52:D7:FF:4A:BE:A8:3C:04:2D:19
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D4A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/e2RlLGXt_iEKflLX_0q-qDwELRk.roa
Signing time: Fri 07 Feb 2025 23:55:51 +0000
ROA not before: Fri 07 Feb 2025 23:55:51 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3402 (0xd4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 23:55:51 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7B64652C65EDFE210A7E52D7FF4ABEA83C042D19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:00:89:0f:aa:75:0f:bb:82:7b:f8:c4:e1:
01:b0:15:2a:78:05:99:11:5f:67:b0:46:d7:40:4b:
09:7e:5b:79:c4:b5:b8:35:8e:f5:c6:69:d2:3e:1b:
fb:90:90:ca:ac:60:eb:d4:f4:26:28:25:ca:61:90:
9c:70:fa:81:44:45:81:01:27:d6:00:61:ef:58:00:
1b:bc:49:31:22:9f:50:2a:5d:65:ca:00:df:ce:0a:
ec:79:21:2c:63:2d:4b:1b:cd:52:40:f6:7b:1b:3b:
9e:ee:27:53:35:77:f7:c4:10:64:7e:e8:7f:0b:78:
a4:49:ec:90:13:90:ec:0b:5e:31:5a:af:4e:58:2f:
67:0a:54:8e:79:40:83:f6:94:86:df:a1:7c:3f:b4:
1d:8e:61:48:73:d8:ce:6d:2d:6c:43:ae:4a:0f:5a:
63:76:d2:7e:8c:c2:63:e3:f4:b3:76:b5:ed:f3:b6:
51:4a:5e:20:b1:6f:44:79:2a:57:7f:27:d8:55:81:
2d:10:b0:1b:18:30:18:ab:91:28:17:2b:e6:5c:64:
f2:51:94:a5:1c:73:b6:a2:27:73:ae:4b:0c:83:17:
57:54:31:61:c5:af:42:1c:dc:07:2c:f7:61:0a:b6:
ee:58:74:d4:9f:1a:c3:bb:a6:4e:35:c9:76:aa:91:
d2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:64:65:2C:65:ED:FE:21:0A:7E:52:D7:FF:4A:BE:A8:3C:04:2D:19
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/e2RlLGXt_iEKflLX_0q-qDwELRk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:e8:96:30:cd:12:7b:1b:90:3e:f1:07:50:ef:62:1a:6c:43:
57:fc:0f:94:34:54:6a:fa:f9:ac:39:01:8b:b0:80:23:c1:4b:
3b:03:30:24:e9:bc:58:e0:d2:b7:01:71:a1:f1:d1:d8:8c:15:
96:fb:15:ef:3b:f7:b5:85:aa:af:39:64:b7:a2:53:ba:38:e4:
b7:90:78:42:c0:16:77:c7:80:43:3d:20:db:fc:aa:00:d9:f1:
0d:b3:0e:2d:bd:eb:44:13:5a:ad:5e:64:2c:68:48:a5:47:9d:
30:05:bc:bb:2d:f5:0b:da:7c:04:49:52:9f:f9:fb:5c:ae:9d:
6b:f3:18:7c:0b:ea:58:b0:cf:54:67:4f:00:f6:ef:84:cb:56:
50:f7:ff:c0:b4:ff:86:f2:d0:32:b6:27:63:06:d6:a4:ad:85:
a2:c4:71:32:e3:5f:90:96:d5:8a:44:09:97:52:71:ba:42:07:
be:77:ff:90:82:c1:06:db:71:98:da:6e:9e:36:7f:8e:91:49:
e8:87:35:42:a6:5d:db:1f:e3:cd:1c:e0:8b:c7:e3:1e:c6:e2:
50:39:44:a9:a6:21:7c:70:3a:97:85:a5:11:13:df:eb:6b:59:
4a:69:fe:e9:1d:18:ea:4a:b6:97:68:ea:fe:df:c3:5c:99:2a:
ce:a8:84:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:09:38 2025 by rpki-client