Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/lJR2bxHhML8eUXL0sFJLZDDg20g.roa
File: lJR2bxHhML8eUXL0sFJLZDDg20g.roa (raw, json)
Hash identifier: PufUrAR67dCV6J0l4tAramEoULLdDSuwOnxdNX6yLX4=
Subject key identifier: 94:94:76:6F:11:E1:30:BF:1E:51:72:F4:B0:52:4B:64:30:E0:DB:48
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 09EE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/lJR2bxHhML8eUXL0sFJLZDDg20g.roa
Signing time: Thu 30 Jan 2025 00:55:29 +0000
ROA not before: Thu 30 Jan 2025 00:55:29 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2542 (0x9ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 30 00:55:29 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9494766F11E130BF1E5172F4B0524B6430E0DB48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:81:49:ad:0a:73:3c:90:5a:a9:bf:32:f5:
34:74:3b:d0:ef:53:2e:38:07:05:ea:53:82:fa:bf:
aa:34:40:4f:f9:28:d4:3f:c0:80:92:4b:89:88:43:
5b:49:12:88:e0:c7:7b:85:62:ae:8b:4e:67:58:21:
a9:d9:2b:a4:5e:40:a2:20:47:10:15:c9:89:20:23:
8b:25:82:8e:a2:f2:a8:20:57:fb:ae:1c:24:30:7a:
31:54:b6:e4:53:7a:ce:f9:13:ac:28:cf:e9:4b:61:
c9:6b:f6:14:8f:8b:6c:52:d3:f9:c4:34:0e:01:71:
45:1b:d8:68:63:77:42:a4:6d:ae:58:19:b9:c0:e5:
02:24:84:38:1e:69:27:61:e9:f3:1c:c2:a0:2f:e8:
d0:7d:2e:e1:8b:ae:37:0f:9b:13:d3:0d:8e:bd:f0:
71:4b:e9:0e:aa:e4:3a:48:d3:22:c4:e4:38:13:33:
00:39:c8:8d:60:d1:40:7b:a6:74:2b:c5:4d:a0:53:
aa:1f:cb:7b:8c:ed:7a:30:c7:f1:5c:59:e9:3e:39:
e7:05:1d:50:60:b6:e7:9f:e8:8f:55:6f:f3:34:cb:
48:00:7e:29:6c:9c:70:03:97:46:16:84:71:54:fc:
d6:06:f0:68:9c:eb:b4:6d:48:5d:3d:e5:73:b0:cf:
86:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:94:76:6F:11:E1:30:BF:1E:51:72:F4:B0:52:4B:64:30:E0:DB:48
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/lJR2bxHhML8eUXL0sFJLZDDg20g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:4b:0a:fa:f8:5f:41:ac:5f:5d:b4:63:3e:60:6a:ed:12:7e:
b8:96:59:98:f6:24:c9:a1:a5:4c:1f:09:b3:2d:e9:19:37:02:
f6:8d:49:58:37:12:02:1c:69:44:68:6f:56:1a:0d:5b:15:46:
47:d4:35:8f:78:f7:ca:a5:98:44:9a:11:d7:90:1f:c6:da:8b:
b7:9c:21:7d:86:68:70:bb:d0:43:74:ec:72:1b:7a:74:55:1e:
2d:ff:5b:6a:83:0f:e1:32:8d:b9:57:b8:ca:63:e1:f0:a7:f1:
ea:2a:60:d4:49:34:69:1b:0c:5b:94:c0:ed:59:c9:27:60:c4:
72:a0:1e:63:e9:50:74:fa:ad:67:bd:4b:4b:4c:14:32:b9:e5:
46:00:83:03:f8:26:0c:b5:27:13:4e:47:87:b9:7c:a2:7f:6c:
9c:b1:44:d1:ec:97:a0:fd:3b:f2:d9:26:5d:e5:ff:35:0c:dc:
6a:44:4a:38:13:26:55:8e:e4:da:95:ab:20:a5:38:c8:05:ea:
5b:b8:c6:cc:2a:c3:8e:96:62:84:ef:54:92:a1:ce:20:d1:60:
a1:78:31:c6:ba:ab:aa:09:08:b3:38:d2:e6:89:0a:11:84:67:
63:86:48:70:1a:3d:0e:76:19:f7:ff:7f:ef:fb:1d:9c:13:13:
1a:8a:af:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:00:32 2025 by rpki-client