Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/y7MgXoiMd2IQ7wgha5VL84O2bw8.roa
File: y7MgXoiMd2IQ7wgha5VL84O2bw8.roa (raw, json)
Hash identifier: hnsnGwG65FPNQDNofd6GL+gh5KLlOE/j0Kd9F/NwKh0=
Subject key identifier: CB:B3:20:5E:88:8C:77:62:10:EF:08:21:6B:95:4B:F3:83:B6:6F:0F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 06F4
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/y7MgXoiMd2IQ7wgha5VL84O2bw8.roa
Signing time: Wed 22 Jan 2025 02:25:00 +0000
ROA not before: Wed 22 Jan 2025 02:25:00 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1780 (0x6f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 22 02:25:00 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CBB3205E888C776210EF08216B954BF383B66F0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:d6:93:ad:27:84:af:a3:f6:62:a6:af:aa:
f0:ef:fd:42:06:2e:0e:cf:2c:e9:fd:ab:ac:32:9e:
3c:2f:31:41:52:0d:44:d4:06:2a:64:4b:d1:85:4c:
13:d1:8e:e5:a6:07:82:e3:62:6d:06:8a:07:c5:25:
73:da:1a:ae:e2:ec:99:bc:97:de:b7:e9:a4:56:ff:
98:bb:79:a4:76:8f:26:c3:c0:5a:83:b6:8a:c1:90:
1c:2d:0f:f4:5e:bb:b6:5d:37:72:95:9c:cd:d9:7b:
2a:11:1a:d3:42:51:a8:c9:52:ac:df:c9:3c:fa:dd:
46:24:19:bb:e4:c0:4f:d7:44:4c:9d:7e:c2:19:86:
9c:e6:69:1d:b8:cc:db:10:5f:ea:84:20:3f:92:b1:
e9:34:a8:b4:e5:f3:6f:7b:86:70:1d:74:61:c6:e1:
93:f7:ac:86:5c:4e:85:fa:e4:af:91:3a:1b:f3:fa:
d6:bb:7d:c7:46:71:33:fe:af:ab:c1:30:54:f3:29:
7a:7f:36:75:c9:c2:16:0b:be:bd:60:7a:32:f2:34:
3c:b2:cb:59:41:9e:a8:36:3f:dc:e8:c3:7e:c3:0e:
c0:9e:48:29:9f:b6:e9:6d:3c:24:4d:47:6b:01:0b:
78:58:c5:4e:06:7f:14:b9:e8:96:1a:b0:bc:8e:91:
66:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B3:20:5E:88:8C:77:62:10:EF:08:21:6B:95:4B:F3:83:B6:6F:0F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/y7MgXoiMd2IQ7wgha5VL84O2bw8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:00:b3:e9:8f:eb:41:e2:1e:d0:ea:52:5d:53:cf:b5:ec:32:
e1:b6:8f:87:4a:13:08:9c:18:4b:4c:b6:a2:37:cf:46:44:0a:
e6:1e:fe:57:e9:65:15:9d:21:88:97:b8:58:eb:f2:64:e7:8b:
27:8b:b0:97:b2:0c:c8:d8:d4:2b:10:dd:c4:21:c8:cf:08:5a:
af:d9:49:ed:13:14:c6:11:71:96:6c:2f:c1:de:07:52:a1:9b:
e1:08:3c:01:c8:80:c5:92:05:e5:6e:de:ba:dc:d3:20:7b:1f:
03:22:0c:05:b0:be:ad:7f:e3:76:aa:d2:ec:6f:f7:5b:7f:20:
7d:25:43:63:a2:ad:0c:65:10:6b:47:0a:09:9d:80:7e:42:5f:
99:f8:f0:ba:7d:22:0e:ae:ff:3a:cd:e4:38:3f:87:64:2e:31:
45:00:b5:2e:19:4b:bc:09:8d:3c:a1:9f:c8:99:16:2e:9f:54:
65:cb:b5:71:c3:27:d4:b6:92:b4:75:7f:7e:99:dd:66:7f:76:
93:00:ba:56:df:6c:56:91:1d:2c:37:b6:9c:b4:ce:57:e9:9f:
e3:64:dd:57:63:eb:fe:1e:73:a9:6f:68:2a:94:25:66:74:d8:
83:6a:9f:07:e8:28:fd:81:39:86:8d:9f:88:f7:d3:e5:7c:2d:
64:09:0a:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:29 2025 by rpki-client