Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/p3N-db9VbP5tkJrxwH8asl8Vaew.roa
File: p3N-db9VbP5tkJrxwH8asl8Vaew.roa (raw, json)
Hash identifier: rceaC8+IZv4w5k7N94nER5xSNIYErnJ5gMhL/Uv+8Vs=
Subject key identifier: A7:73:7E:75:BF:55:6C:FE:6D:90:9A:F1:C0:7F:1A:B2:5F:15:69:EC
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0DA2
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/p3N-db9VbP5tkJrxwH8asl8Vaew.roa
Signing time: Sat 08 Feb 2025 21:55:52 +0000
ROA not before: Sat 08 Feb 2025 21:55:52 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3490 (0xda2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 8 21:55:52 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A7737E75BF556CFE6D909AF1C07F1AB25F1569EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:6c:9b:cd:34:a5:c0:8a:fb:b5:2b:24:89:
2f:84:39:01:77:d9:5c:3c:02:1f:d6:2d:b2:a1:fd:
6e:2f:ce:73:9f:cf:76:85:e4:39:7c:57:13:f9:ea:
1a:5d:37:d5:bb:04:00:08:7e:49:aa:09:87:ce:ee:
76:28:76:61:45:2d:56:0b:3d:05:d2:f7:eb:fb:9b:
b5:73:e5:6f:18:e2:c9:71:f1:12:6a:bc:10:db:6c:
9e:23:3c:a0:de:f4:14:ef:1a:94:b9:b1:3b:59:67:
37:86:f3:3e:93:78:8c:c1:d8:88:3e:ef:87:09:0b:
bf:bd:20:4a:a4:bf:b3:92:61:45:4d:43:ad:aa:c9:
2d:20:9b:b2:0d:72:a0:4b:36:c7:a4:30:e2:02:c5:
af:79:de:32:11:c1:d7:dc:bd:bf:01:e2:87:de:33:
e6:46:07:bc:da:d8:fb:5f:8b:68:28:c8:18:be:35:
a3:31:ef:0d:a1:b0:21:49:c5:30:ef:db:d7:6a:3d:
93:bf:0d:1b:54:ee:63:46:c3:9b:eb:e1:0a:9a:ae:
4a:c1:06:17:46:f6:2b:a9:ce:c5:53:3f:19:ca:a3:
77:31:ae:30:95:77:7c:12:0e:c7:e4:ed:fe:69:ab:
31:50:8a:51:1e:3a:59:5b:c9:44:58:f2:33:b4:d5:
51:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:73:7E:75:BF:55:6C:FE:6D:90:9A:F1:C0:7F:1A:B2:5F:15:69:EC
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/p3N-db9VbP5tkJrxwH8asl8Vaew.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:31:26:f5:87:9e:e1:48:9b:0f:17:4c:96:fe:52:94:1f:68:
e4:34:c1:af:ef:e1:0b:01:b6:95:fa:4b:43:fe:8b:cd:68:d4:
ea:7e:8c:be:b5:39:8b:fc:fb:62:5e:5b:b4:77:90:55:95:2f:
b0:e5:66:f9:b0:0b:49:37:73:ba:e9:79:e0:dc:ab:74:09:bc:
5c:40:6d:48:a6:9d:14:bb:28:a8:09:db:d3:ab:76:e2:1f:9b:
d6:f4:ee:67:d0:3f:0f:6d:26:27:23:bd:6c:79:58:9f:ec:13:
53:6f:a9:18:e4:5f:0e:89:91:fa:be:5d:4b:bc:67:c2:90:d1:
dc:df:60:f0:48:a4:f0:b9:14:30:25:61:7e:5b:10:dc:38:09:
58:82:a6:b9:f1:e7:6d:d5:36:bf:41:d3:cf:15:15:01:d1:1c:
03:d1:ee:35:63:4c:f4:54:30:e4:f4:a6:a5:ea:61:af:de:56:
35:1f:7f:ac:18:81:62:2a:a9:89:29:88:52:52:52:4f:d1:61:
e1:f1:03:6d:74:b6:29:2d:74:c4:bf:fa:e6:cd:70:26:6a:8d:
60:eb:ff:25:91:7f:f1:f8:92:b8:69:d5:07:02:e1:d7:37:1e:
b9:3f:5e:a8:f9:a2:91:84:99:0c:9e:a5:b8:ea:61:f0:eb:33:
e9:16:90:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:27 2025 by rpki-client