Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/unr7z1_AQjaBwv1BxSe2b1AVpy0.roa
File: unr7z1_AQjaBwv1BxSe2b1AVpy0.roa (raw, json)
Hash identifier: Mynq5d8+49SBOO2qiL+FW4fi8uhp6mtquKTAq/zkKyg=
Subject key identifier: BA:7A:FB:CF:5F:C0:42:36:81:C2:FD:41:C5:27:B6:6F:50:15:A7:2D
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BE8
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/unr7z1_AQjaBwv1BxSe2b1AVpy0.roa
Signing time: Tue 04 Feb 2025 07:26:56 +0000
ROA not before: Tue 04 Feb 2025 07:26:56 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3048 (0xbe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 07:26:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BA7AFBCF5FC0423681C2FD41C527B66F5015A72D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:ad:89:f0:77:78:9a:fc:0b:77:06:84:f8:
40:67:a7:02:84:ee:45:8a:8f:e6:34:91:af:51:6d:
32:5d:ec:e8:ff:b5:31:6d:d9:66:98:94:7a:19:aa:
6d:b6:27:f6:3d:71:7a:72:2b:b2:e2:42:d7:c5:3a:
b7:af:f0:fa:f8:24:93:ff:fc:2c:3b:c5:d2:62:c3:
22:04:e1:1a:af:53:14:f3:f6:74:54:be:4e:b7:6e:
5f:53:14:de:62:33:78:29:8d:b9:06:47:bb:14:9d:
85:2e:be:64:9f:dd:03:0c:50:9f:50:4b:0d:b2:c4:
4b:f6:59:24:8d:e0:51:64:13:e7:6b:d8:5a:81:69:
75:48:e5:17:9a:cd:96:11:7f:c6:1d:5e:21:af:90:
e9:b4:37:ec:fd:0e:4c:61:3a:c4:91:05:32:59:13:
84:4b:ba:a5:11:68:0c:ca:bb:72:48:49:9b:cd:aa:
2e:c6:36:5d:b4:b1:9d:cb:e0:27:e9:73:6d:23:ba:
81:bd:b2:a7:6e:59:46:01:b7:4c:4c:31:5f:9c:5e:
78:fc:1e:69:65:16:b6:53:20:29:26:e5:eb:95:c8:
38:a9:d5:c1:02:d6:18:d4:c6:ed:68:9d:27:70:b1:
ee:fe:0e:5b:e2:55:8d:4e:db:f3:30:c2:70:07:fb:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7A:FB:CF:5F:C0:42:36:81:C2:FD:41:C5:27:B6:6F:50:15:A7:2D
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/unr7z1_AQjaBwv1BxSe2b1AVpy0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
20:e9:cd:03:6b:9e:f0:20:2a:90:a5:5e:ca:11:5a:5a:02:b5:
63:42:7b:1c:32:b6:06:42:13:56:39:ca:43:a5:1e:79:bf:fe:
57:02:fe:8d:47:58:1c:4e:0e:ab:75:ff:36:2f:25:04:3c:29:
57:53:8b:d7:41:ea:c8:6b:e9:c1:10:db:de:b6:86:74:95:f2:
da:6b:4c:e4:dd:e8:6d:e1:6a:7a:c3:60:5b:72:65:2f:1d:67:
cd:c8:8b:ef:9d:0c:bc:0e:1e:43:e5:91:f3:9e:5e:25:dd:1a:
86:13:ea:4b:f5:cf:b0:f3:9f:bb:e1:d2:dc:27:1a:ff:5f:11:
78:82:f0:0d:b7:8f:bd:2c:49:34:ef:25:5a:38:c3:ab:7b:37:
5d:cb:06:29:d8:d4:f4:55:64:4f:e2:76:27:cf:3e:88:78:ec:
9f:e4:d3:25:3b:b4:9d:33:97:68:c4:38:56:02:40:72:1b:7c:
e8:70:05:7b:f9:23:1f:57:93:99:f9:2a:db:14:fe:6c:ed:12:
53:e5:8e:ab:a6:eb:1a:59:e8:ab:f0:b2:b9:41:9b:da:63:c8:
47:f7:32:32:d2:16:4b:c9:19:05:5d:e9:a3:70:99:aa:c0:c6:
50:bc:f2:54:d0:5d:27:ab:ac:7f:03:2d:56:20:18:99:7d:4e:
78:0f:3f:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:09:48 2025 by rpki-client