Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/swr4wVIc_vN_avxQ1snJ3SbDrSw.roa
File: swr4wVIc_vN_avxQ1snJ3SbDrSw.roa (raw, json)
Hash identifier: D4uXvbrGx0ZGCBhbnit8ArUKW2429Q/3bXe2WfGGPok=
Subject key identifier: B3:0A:F8:C1:52:1C:FE:F3:7F:6A:FC:50:D6:C9:C9:DD:26:C3:AD:2C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C28
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/swr4wVIc_vN_avxQ1snJ3SbDrSw.roa
Signing time: Tue 04 Feb 2025 23:25:42 +0000
ROA not before: Tue 04 Feb 2025 23:25:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3112 (0xc28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 23:25:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B30AF8C1521CFEF37F6AFC50D6C9C9DD26C3AD2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:98:8a:b1:66:68:1c:cf:8b:55:45:0c:52:04:
d3:a5:2e:ec:13:36:91:db:fd:c0:5b:ad:08:b3:89:
2f:a5:1d:0f:40:83:64:2e:53:fc:5b:81:a8:af:ca:
c7:75:17:6c:ab:aa:c3:d8:e0:73:87:9b:62:07:e5:
55:27:fd:b5:f7:e8:5f:9f:86:d4:37:77:e9:57:30:
33:3b:6b:29:57:a4:bd:10:4f:53:a7:e9:bb:36:56:
dc:d2:03:2d:31:d9:0f:6e:36:15:33:3a:40:65:4e:
84:46:44:91:c2:9b:f5:54:a1:76:a5:79:34:9f:e2:
19:9e:e5:0c:af:d9:7a:44:df:94:24:7c:5e:7a:97:
64:30:f2:2a:62:f3:0a:29:49:15:60:4f:74:48:4b:
37:1f:e7:39:96:b9:c2:6e:da:8b:46:94:e7:4c:c9:
35:ae:7b:5d:71:0b:6d:c1:01:31:e3:c6:cb:d7:35:
78:d8:68:97:00:9b:95:2f:ed:c0:51:25:92:c9:e2:
33:ff:3e:54:a7:54:aa:11:04:24:6e:a9:ac:cd:a1:
bc:fd:a1:bc:f0:57:e1:d0:f2:40:36:c8:a4:c8:f5:
6b:0d:74:56:32:c8:13:5a:5d:9a:ce:44:45:d8:fd:
77:27:ff:83:38:03:0c:18:08:aa:ee:6d:3e:40:89:
14:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0A:F8:C1:52:1C:FE:F3:7F:6A:FC:50:D6:C9:C9:DD:26:C3:AD:2C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/swr4wVIc_vN_avxQ1snJ3SbDrSw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
06:61:3f:0d:dd:dd:70:91:b5:74:6a:98:e1:a4:9c:b9:5d:90:
1e:55:b7:ed:f2:64:85:57:33:43:2a:79:24:c1:6a:84:fa:62:
89:98:a4:b7:32:f7:32:6e:48:de:25:ae:80:f5:88:37:f3:7b:
fd:84:56:ff:0f:9d:fd:3c:fd:a5:3f:60:8f:92:38:68:b1:2f:
2a:b6:5c:89:c2:b7:59:4a:73:ed:5f:77:75:b4:4e:13:13:68:
75:e3:a0:2a:85:13:ed:ee:eb:c9:f3:c7:8f:00:1a:37:05:c6:
d3:3b:70:b3:b3:b2:bf:37:36:ce:4b:c8:f8:92:e7:cb:a0:4d:
da:32:eb:30:b2:52:6a:62:c0:6a:56:14:40:9d:17:55:47:f9:
ba:1a:e1:c7:1c:73:83:6f:85:63:04:5b:26:cf:96:7e:22:62:
af:0b:6b:01:1d:e4:30:38:2f:69:ea:26:91:97:a0:06:fe:d2:
08:7f:a6:5f:8f:54:56:4a:f6:d1:1d:a9:22:75:e8:45:7e:39:
76:83:54:28:6d:ac:f8:7c:85:43:26:4e:ac:98:5c:e2:db:4f:
a9:1b:52:52:1d:e3:16:08:d6:74:bb:5e:9f:87:19:26:e3:3c:
00:ac:35:f6:7c:0a:96:22:b5:b7:49:f3:f7:31:8d:02:74:ef:
06:0d:a6:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:07:23 2025 by rpki-client