Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/knqCXbTVGNUvmj5ZgvHdlR2cOU0.roa
File: knqCXbTVGNUvmj5ZgvHdlR2cOU0.roa (raw, json)
Hash identifier: yNZfn1E1DOI60ymJKR2gZHNCqSzwxmB5byLvxi/sEI4=
Subject key identifier: 92:7A:82:5D:B4:D5:18:D5:2F:9A:3E:59:82:F1:DD:95:1D:9C:39:4D
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0DD6
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/knqCXbTVGNUvmj5ZgvHdlR2cOU0.roa
Signing time: Sun 09 Feb 2025 10:55:54 +0000
ROA not before: Sun 09 Feb 2025 10:55:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3542 (0xdd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 9 10:55:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=927A825DB4D518D52F9A3E5982F1DD951D9C394D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:21:22:b1:7f:b2:d2:9c:78:10:3b:d0:f9:
94:7a:f7:52:16:2f:27:b7:7a:57:23:96:a7:0b:5c:
af:66:d4:e0:32:f6:f7:5c:4c:a5:4b:8a:60:1d:07:
3f:e7:26:34:a2:0e:cd:37:0d:a5:ba:e0:c5:96:77:
71:c3:82:80:7a:a7:f7:05:35:ba:5e:68:30:f5:fc:
7f:55:36:52:d0:b1:63:1e:60:b9:46:3f:06:75:c7:
42:7d:25:4f:c2:1f:01:f8:80:97:01:7b:52:3b:96:
8e:1d:06:e3:93:da:a2:df:41:af:bd:ab:36:e4:a2:
80:f8:f7:a6:ec:70:d4:dc:a7:d6:39:da:8e:1b:4b:
29:09:61:99:c0:26:b1:7f:06:52:62:38:9e:0c:f9:
02:56:79:2f:77:20:35:53:72:dc:c0:89:02:71:62:
d9:13:6a:54:21:64:23:1c:61:88:f2:29:1d:82:ea:
04:de:59:41:56:c9:98:e1:0c:ba:fe:31:fc:b1:5d:
c5:b1:e6:ab:61:20:12:19:51:3f:1a:6f:d1:d0:d9:
e9:38:23:19:7a:e0:b4:43:da:b5:59:07:e4:da:d5:
74:3c:26:15:5b:2f:ed:1a:ac:b2:a6:ce:ce:3c:f6:
ce:fc:dd:ae:3d:3e:98:6a:e4:d3:88:b9:80:3d:6b:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7A:82:5D:B4:D5:18:D5:2F:9A:3E:59:82:F1:DD:95:1D:9C:39:4D
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/knqCXbTVGNUvmj5ZgvHdlR2cOU0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:bf:45:c5:0a:f7:47:9c:ff:f6:4a:82:f8:c1:4a:1e:ed:dd:
28:75:1c:1a:8b:3d:f3:d0:2b:09:ac:7e:dd:c9:99:f0:2e:40:
64:3e:99:3f:17:0c:e1:aa:c6:d7:91:93:65:6e:07:16:b0:b3:
71:4a:52:21:64:c2:0a:47:3d:bd:15:89:e3:38:88:8a:95:b9:
60:76:6a:7a:cb:d5:3c:bb:1f:c1:19:6c:c9:e1:fe:95:a1:3d:
1b:25:03:81:76:d8:4a:bf:4e:80:a0:57:c0:3f:80:ed:64:2b:
b7:b8:5b:bd:68:6a:ed:ad:9b:a9:69:c2:91:bf:25:dd:b8:3e:
65:3f:d8:8e:10:9c:fc:bd:23:85:40:59:96:9b:38:51:8a:4a:
72:9f:19:ef:56:5d:c1:42:e5:6c:58:52:1e:4f:1f:b4:c6:4e:
a1:f7:2e:ce:81:8d:98:be:f8:b6:a9:b4:1b:8f:af:3e:c9:e0:
0c:18:ea:67:97:ae:61:d4:76:e4:95:37:78:b5:ad:87:67:ff:
76:e1:e1:59:f3:ed:c9:cd:13:71:05:f3:c7:83:b6:e1:9a:af:
04:b9:8b:13:58:30:1f:c1:6e:67:87:59:6b:c3:a5:4b:14:4a:
55:a0:df:66:dd:7b:79:f3:f9:e2:f0:3e:bb:13:88:82:37:d9:
c2:db:1a:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:21:40 2025 by rpki-client