Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/t_vIqrIr3jL6C6UD_CkoNjNHmqo.roa
File: t_vIqrIr3jL6C6UD_CkoNjNHmqo.roa (raw, json)
Hash identifier: 4pKjhiXfjXX7IqHg3HoXzx0+NnXmJWyWI5JGMTXJYLE=
Subject key identifier: B7:FB:C8:AA:B2:2B:DE:32:FA:0B:A5:03:FC:29:28:36:33:47:9A:AA
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C72
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/t_vIqrIr3jL6C6UD_CkoNjNHmqo.roa
Signing time: Wed 05 Feb 2025 17:55:44 +0000
ROA not before: Wed 05 Feb 2025 17:55:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3186 (0xc72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 17:55:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B7FBC8AAB22BDE32FA0BA503FC29283633479AAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4a:e1:3a:25:31:ad:14:13:6c:05:cb:7b:c5:
97:71:d4:d9:ad:8b:d1:9b:70:79:3b:d3:12:2b:e5:
cb:c1:7b:d4:a4:78:4a:05:55:76:07:67:bf:31:11:
8f:cf:97:7b:fe:71:7a:1d:68:c3:22:7a:aa:2b:b9:
f3:99:83:50:50:86:8e:e9:f2:9b:41:2e:c1:bb:53:
5d:e1:22:88:11:00:74:42:c5:cc:a6:46:43:9a:d1:
9d:ca:f7:bc:24:40:4f:e9:ed:0d:52:eb:56:5a:ac:
85:0f:be:c0:28:31:9a:41:de:e9:3f:0a:3b:cc:1c:
a3:7e:4f:56:81:d2:a0:ba:9b:98:d2:e2:5c:3f:ca:
99:ae:e0:ae:a6:1b:0c:83:42:ad:5f:42:85:6c:de:
5a:19:25:8b:d3:37:e2:73:03:c8:7b:58:05:d8:ec:
42:60:42:26:1b:f7:b8:9f:42:2a:40:a5:7d:4d:a2:
c8:fa:97:aa:8b:b3:0b:2a:c3:f8:c4:97:7c:c2:c6:
20:6b:3d:f5:fa:06:74:31:92:46:08:f0:f8:1f:e1:
77:ae:7e:5e:51:5b:19:e7:d7:81:3d:b0:79:07:30:
08:d1:bd:7a:72:cc:88:a8:ae:06:bd:3d:80:49:f5:
d8:8b:44:04:37:3f:d8:2b:f5:8a:c0:2f:e8:3a:f1:
76:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FB:C8:AA:B2:2B:DE:32:FA:0B:A5:03:FC:29:28:36:33:47:9A:AA
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/t_vIqrIr3jL6C6UD_CkoNjNHmqo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:99:43:df:d2:16:bd:46:39:5f:84:7e:a0:0f:7c:55:2f:13:
69:2b:4c:81:e5:99:ef:e7:76:47:2f:c2:d5:ce:05:9d:c9:ce:
44:72:f2:8b:9d:b5:04:b4:35:63:11:f6:e2:8a:a9:f8:ca:6f:
32:88:55:ef:06:f2:d8:22:b5:12:65:da:88:16:c6:ae:4f:24:
bc:64:75:d3:e4:0f:4b:ba:35:5d:9b:f5:58:7b:fc:1f:a5:21:
b5:4b:40:f0:55:98:39:97:76:31:b9:51:c6:1f:11:b4:7a:9f:
e5:88:3c:25:e2:9b:27:60:13:4d:82:8c:54:5a:2a:1e:73:c9:
ec:18:ea:e1:0d:56:1a:c7:0c:e6:37:76:ff:0b:8f:c8:f9:f3:
7a:13:d0:0b:da:a8:fd:55:a3:b9:81:8f:01:8d:9d:73:32:95:
ee:68:aa:c5:39:93:02:d2:e2:1f:f8:f9:8c:94:c9:ca:4f:81:
6e:41:dd:f3:02:60:04:a6:d2:49:44:ca:a5:f6:1d:13:9b:e3:
c3:24:20:1d:9c:fe:0f:7c:99:93:a6:09:37:fe:be:ac:56:e4:
6d:40:76:6d:e0:6e:6b:99:7d:8f:36:ad:05:8f:7d:32:a9:e8:
34:65:a2:9b:a6:ef:ec:9c:c3:29:d2:64:8b:9a:59:f0:7c:62:
86:93:ff:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:09:41 2025 by rpki-client