Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/u0SjWVOi92NT1yNcYxOxsVpubrQ.roa
File: u0SjWVOi92NT1yNcYxOxsVpubrQ.roa (raw, json)
Hash identifier: Si93Yb/Ldl2fFVhw4CzDzkrIqpjb2a8TYDMZdt5h6Wo=
Subject key identifier: BB:44:A3:59:53:A2:F7:63:53:D7:23:5C:63:13:B1:B1:5A:6E:6E:B4
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0928
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/u0SjWVOi92NT1yNcYxOxsVpubrQ.roa
Signing time: Mon 27 Jan 2025 23:27:24 +0000
ROA not before: Mon 27 Jan 2025 23:27:24 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2344 (0x928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 27 23:27:24 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BB44A35953A2F76353D7235C6313B1B15A6E6EB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3e:b8:62:72:58:69:76:b4:4f:f6:c1:55:97:
98:61:d0:ae:d3:a9:3c:f2:48:b8:07:ef:66:06:cf:
e8:36:91:7b:5b:f2:fc:cb:f3:46:3a:1d:fd:42:34:
0e:98:c4:fe:32:65:ca:ae:f5:0c:01:32:43:14:bf:
67:71:66:7d:e8:52:5d:ad:53:59:ff:0b:37:2a:f1:
ff:36:53:b1:ea:91:27:8f:ac:e4:40:42:af:9f:24:
dc:65:36:22:2e:d9:08:ad:37:75:56:fb:64:e1:ca:
2e:be:18:1c:72:f0:2b:f9:b6:3b:a9:b8:dd:f4:10:
11:a8:4e:94:6c:0c:22:95:68:08:5a:1f:dd:20:57:
41:82:52:1d:f7:be:c4:e8:5d:3e:2b:45:66:de:de:
91:c2:0c:31:bc:6d:61:da:81:a4:a5:d1:fd:ce:2d:
49:33:9e:31:f0:63:c9:32:a5:ba:fe:fb:51:e6:f7:
ba:bb:de:38:cc:b6:4d:98:74:79:ce:a1:dd:ab:83:
a5:77:92:52:c6:b4:c7:4d:87:1f:90:d3:81:20:8e:
6d:00:7f:13:dc:ef:f5:47:70:12:63:bd:25:90:b6:
51:62:8a:a9:7d:28:9c:12:12:e2:2a:57:e7:5d:b6:
26:c1:8c:1f:ff:d5:e9:aa:1d:94:19:d4:fa:5e:fc:
37:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:44:A3:59:53:A2:F7:63:53:D7:23:5C:63:13:B1:B1:5A:6E:6E:B4
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/u0SjWVOi92NT1yNcYxOxsVpubrQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
74:6b:f4:4b:da:dd:db:46:83:f7:0b:26:92:73:de:d5:80:ea:
ff:10:b5:fe:e3:40:c0:e0:1a:3e:47:8c:0b:e7:e1:4f:0c:52:
fc:8e:12:e7:cd:92:85:aa:36:91:a0:e1:bb:18:81:23:53:91:
75:23:9b:e3:26:13:c4:fc:55:82:d1:87:20:e2:bc:53:a3:9c:
25:5a:09:0d:eb:83:2c:3e:70:cb:0d:a0:59:86:a6:db:ad:aa:
c7:91:f7:6e:24:f1:4a:78:7d:87:5f:62:f1:18:d4:4f:26:11:
58:31:0f:d5:0e:36:a5:f6:40:7b:68:ef:b6:70:1d:4d:55:c5:
49:ed:80:e1:82:df:88:2d:38:b5:97:a0:48:4d:6a:78:50:f7:
85:8e:9c:fb:34:0e:51:b6:49:dd:75:e4:d2:eb:2f:24:3b:56:
c1:ed:c1:25:3a:a4:a6:ab:ba:66:d1:f9:d5:c1:c3:a5:31:72:
e4:3e:e8:a8:d2:7d:1d:57:3a:68:83:98:44:43:e3:e3:31:42:
35:de:94:6c:00:5c:ce:5b:4f:23:ec:0a:7e:dc:5b:fb:e1:0c:
be:0b:1c:ae:e5:4b:57:f5:57:cc:19:2a:7d:5d:65:a4:a5:1f:
c1:3c:04:ea:1d:8e:51:71:b1:0d:eb:59:cf:12:2b:59:3f:41:
49:52:cb:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 22 18:30:02 2025 by rpki-client