Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/j9E6kX90hAnagD4TPWKkFEhaWIA.roa
File: j9E6kX90hAnagD4TPWKkFEhaWIA.roa (raw, json)
Hash identifier: J482+inMrtfYqNmYnQSIFTNjJ5I6x4NziZGQ54uzF9o=
Subject key identifier: 8F:D1:3A:91:7F:74:84:09:DA:80:3E:13:3D:62:A4:14:48:5A:58:80
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B9C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/j9E6kX90hAnagD4TPWKkFEhaWIA.roa
Signing time: Mon 03 Feb 2025 12:25:36 +0000
ROA not before: Mon 03 Feb 2025 12:25:36 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2972 (0xb9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 12:25:36 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8FD13A917F748409DA803E133D62A414485A5880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c8:4a:15:9e:9c:88:35:d3:98:b4:3b:b0:00:
0f:b5:75:23:d4:40:d1:a6:d5:f0:bf:46:e2:75:00:
63:22:c9:5a:69:8c:1c:36:aa:ec:d0:5e:bd:fe:24:
6b:12:55:62:08:9e:2b:99:db:c4:5a:dc:35:4f:d2:
aa:78:4f:5e:66:eb:2b:b5:5c:f0:08:c9:30:97:c9:
44:44:61:4e:c0:25:28:4b:5f:28:1a:6d:a8:99:66:
ee:c9:32:c6:79:0e:9b:78:75:ff:8f:d6:bd:12:d4:
86:81:0b:8e:48:a6:c5:2e:b9:69:64:5b:f1:48:bf:
fd:f2:10:d6:f3:ae:e5:f9:f9:e1:90:10:d0:27:9a:
db:5e:13:45:c7:1f:71:f4:87:1c:59:64:13:3f:9b:
14:5f:ef:77:88:33:3b:9c:c6:e1:fa:e8:23:7d:44:
d2:9a:2b:5f:cd:20:8d:6c:b2:11:91:41:71:c5:46:
35:1d:b7:cb:c0:c3:90:af:59:20:13:a7:9c:74:d4:
19:72:e0:84:98:4b:18:2c:dc:5a:ed:f7:1a:d0:b3:
e1:f6:f4:82:74:db:42:ae:1c:80:cf:8c:f5:63:a8:
0b:10:7b:ef:85:76:c2:3f:e9:6c:47:48:0e:72:8f:
55:65:e6:2b:fd:5f:16:7e:c2:ef:85:83:e0:82:65:
89:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D1:3A:91:7F:74:84:09:DA:80:3E:13:3D:62:A4:14:48:5A:58:80
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/j9E6kX90hAnagD4TPWKkFEhaWIA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:74:86:f4:2f:62:b5:99:8f:54:5c:2a:48:99:44:5e:55:4f:
51:cb:e7:41:2e:e5:b7:c9:47:78:94:65:1b:35:a1:e7:e4:c2:
7f:98:3e:3e:07:a8:f4:78:fe:59:e7:93:a0:fe:78:fa:63:9f:
7f:e6:03:c9:27:80:54:ab:27:f6:52:0d:ee:11:b5:0a:d2:75:
d6:36:0b:62:1e:27:63:45:98:34:d9:d1:36:4b:1a:e5:d3:03:
d0:b4:70:18:d5:9c:c0:e6:3a:64:32:77:c9:63:d5:77:17:26:
02:93:59:8c:84:15:00:83:d5:25:86:25:12:bd:38:27:06:dc:
b7:09:56:89:31:3c:48:af:4a:0e:d1:14:7e:40:79:37:db:cc:
53:ad:25:99:5d:87:1b:4c:76:c3:d5:97:ec:33:c9:79:c8:ad:
7f:cb:80:4c:3e:51:0a:2f:9c:5e:58:75:27:cd:13:a7:3c:a2:
02:65:fa:92:3d:a8:9d:2e:36:05:ee:16:07:18:82:6a:2a:ac:
eb:b5:a4:2e:14:d2:77:7c:ba:3f:4c:14:3a:8e:1b:ba:76:3a:
d2:79:9c:c4:48:95:be:b0:72:df:ed:11:75:c4:5a:98:d1:18:
73:65:f5:7c:96:d9:fe:73:33:18:8c:af:a3:b9:9f:a4:fe:c4:
58:ff:85:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:11:07 2025 by rpki-client