Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/kVk3rdxWMIPKw8--LADFt7qgvaE.roa
File: kVk3rdxWMIPKw8--LADFt7qgvaE.roa (raw, json)
Hash identifier: IC1OnI/1oSLYro0ORwppq5UGodfwok16QqY1RBndLuk=
Subject key identifier: 91:59:37:AD:DC:56:30:83:CA:C3:CF:BE:2C:00:C5:B7:BA:A0:BD:A1
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A6E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/kVk3rdxWMIPKw8--LADFt7qgvaE.roa
Signing time: Fri 31 Jan 2025 08:55:32 +0000
ROA not before: Fri 31 Jan 2025 08:55:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2670 (0xa6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 31 08:55:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=915937ADDC563083CAC3CFBE2C00C5B7BAA0BDA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:33:05:b9:0b:13:db:fe:29:58:b3:83:47:
58:dd:c7:8a:77:60:ca:8d:17:24:59:24:e1:52:a1:
9a:ec:8f:88:5c:82:13:26:b3:6e:ac:f2:a4:56:f3:
af:bc:fc:1c:2c:8c:84:19:91:03:5e:7d:06:86:a0:
56:98:99:d8:50:06:52:63:5b:3d:ff:ff:cf:ae:d3:
9c:12:fe:49:5f:0a:7e:cd:72:19:18:ba:e3:bb:70:
d7:28:d9:f8:88:89:25:0d:13:ad:24:4a:af:34:0d:
16:e3:43:02:e9:4a:59:55:e3:09:ae:29:be:e0:98:
73:7d:7b:14:4f:00:56:39:fc:a6:cb:3e:55:6c:05:
51:e0:48:0e:cd:d8:bd:6c:ef:45:d8:71:63:e7:fd:
32:19:99:4e:cd:41:ff:4f:57:4a:92:12:cd:a6:ec:
29:30:2c:af:4e:e6:a4:a4:ea:af:00:3f:bc:1f:5c:
d3:02:a0:60:ec:9c:74:10:14:a4:92:ce:18:93:f9:
ea:4b:7e:1b:07:05:ea:1e:e9:fc:0d:b7:22:ed:f6:
5b:df:51:17:9b:82:3e:a4:ed:a6:1e:9e:bf:c3:6f:
a8:d4:a4:b3:b1:c1:da:68:9f:3d:99:8b:9f:1c:c8:
c0:be:71:4f:28:01:e7:48:62:ac:e3:de:ea:62:ed:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:59:37:AD:DC:56:30:83:CA:C3:CF:BE:2C:00:C5:B7:BA:A0:BD:A1
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/kVk3rdxWMIPKw8--LADFt7qgvaE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:1f:e2:47:7a:9d:12:86:30:6b:65:b8:ec:21:2a:db:7f:b5:
13:1c:e6:76:15:4b:7c:d6:dd:a7:e0:f4:ba:5b:e2:b8:fb:d3:
23:51:17:d6:d5:d5:b9:5c:d4:60:4a:fd:4b:d9:af:77:09:70:
31:1c:43:9a:ef:09:b1:3c:ce:39:62:7c:f4:d8:79:b8:00:69:
9d:28:44:39:2f:f9:3d:76:4b:8d:dd:8e:cb:70:2c:6b:34:f2:
f0:df:a0:59:65:a3:31:bf:9e:25:41:17:e3:a1:31:09:60:19:
f7:3b:17:21:cd:bb:9f:db:9b:a2:fd:ba:ed:17:0f:f9:9f:2d:
0a:10:a6:c7:4b:0e:48:14:aa:fb:dd:64:31:54:f2:5c:04:52:
e1:ab:4f:d8:b0:6a:7a:39:13:8b:6d:88:96:94:f4:f5:58:c2:
1e:cd:00:07:2a:7a:7d:ee:04:06:a6:e0:8b:a9:bb:36:59:56:
18:f9:c0:5c:1d:41:fd:26:72:c7:ec:13:e5:95:71:e2:db:a1:
b7:42:ca:4b:38:29:f8:1e:2e:af:86:87:a0:06:25:bb:49:23:
12:00:a8:42:ac:b5:f5:6f:25:fa:db:87:2a:c9:52:77:4a:bf:
54:cf:8b:85:96:2e:d7:78:73:9a:70:bf:5a:e1:bd:be:db:a4:
35:a1:d0:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:06:12 2025 by rpki-client