Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/yjbRGrDjml5kfTuQ78xilC-A-XA.roa
File: yjbRGrDjml5kfTuQ78xilC-A-XA.roa (raw, json)
Hash identifier: wR9x67HSWJ8Qa6LQachkToZp8jU5R+l03GvHpaeH7Nc=
Subject key identifier: CA:36:D1:1A:B0:E3:9A:5E:64:7D:3B:90:EF:CC:62:94:2F:80:F9:70
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 04C8
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/yjbRGrDjml5kfTuQ78xilC-A-XA.roa
Signing time: Thu 16 Jan 2025 07:24:37 +0000
ROA not before: Thu 16 Jan 2025 07:24:37 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1224 (0x4c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 16 07:24:37 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CA36D11AB0E39A5E647D3B90EFCC62942F80F970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:70:cf:18:ef:63:56:d5:77:73:90:4b:29:22:
09:18:29:d3:6d:c1:69:9b:a3:49:67:d8:79:5b:70:
47:33:b2:5c:73:10:86:26:90:7a:64:cf:fb:71:63:
cd:c7:df:d7:6a:c1:af:48:90:a8:10:aa:e5:a0:69:
99:b8:f0:e1:21:29:e3:ae:2e:4d:c3:ad:1f:66:2a:
f9:0c:c9:97:62:da:55:ab:9c:54:fa:9c:19:09:c0:
4f:47:17:13:a6:c8:95:9e:b9:d2:81:a3:e4:4d:cc:
5b:ac:05:cd:4f:bb:47:77:ae:27:f8:fe:fe:34:d8:
0d:7f:cb:88:34:af:98:f8:8e:8d:38:16:90:d8:a1:
a1:1c:33:cc:ce:a5:20:6c:f1:2f:8d:09:d4:1d:f2:
bd:68:52:c6:af:9a:09:4d:ce:0b:37:0d:c4:53:6f:
04:22:e4:00:9e:21:70:6e:9e:c5:12:03:7e:6c:02:
a8:f5:32:f0:47:78:48:2d:1d:01:aa:2b:92:68:5e:
6c:d5:6c:70:62:02:59:76:6c:70:7d:c7:a5:fb:85:
d9:8a:e1:72:e9:39:8e:c9:e0:7b:fc:c5:cb:10:52:
ac:09:fa:fd:f4:89:8a:01:3f:b1:c5:e8:c7:af:4b:
2f:02:2d:a5:22:d4:35:b1:eb:a2:20:ea:9d:fc:65:
71:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:36:D1:1A:B0:E3:9A:5E:64:7D:3B:90:EF:CC:62:94:2F:80:F9:70
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/yjbRGrDjml5kfTuQ78xilC-A-XA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:35:c8:4d:e4:fc:05:cb:79:a4:2e:83:14:d5:16:d3:b0:f7:
47:04:96:ce:60:32:5c:b1:d5:ce:8d:26:46:6d:02:8f:23:98:
5b:0c:6c:7b:4a:a9:08:98:bb:d5:fb:00:52:1f:f9:a4:b5:da:
d5:31:aa:28:7b:37:ef:0f:1d:1a:56:7f:ca:b4:56:0f:95:c7:
f8:b1:01:a8:fc:9e:02:60:dd:9b:f7:a3:04:2c:63:86:a7:ba:
12:86:03:99:5a:f1:79:cf:36:02:a4:f5:ff:a4:74:6a:7c:a3:
af:6d:48:6b:4f:3e:8d:f7:db:3d:89:26:e1:57:f3:e9:6b:41:
6e:c1:1e:3e:7d:2a:17:98:31:82:91:30:91:39:4e:7e:9a:0c:
e6:bb:0f:c0:e7:0e:8b:a4:b5:ba:e1:95:ac:25:59:e0:eb:4f:
e1:e6:cc:72:b0:9c:7c:99:e7:54:28:91:f7:69:bc:45:d8:dd:
b7:e7:ec:03:b6:65:61:69:95:30:3f:df:52:ee:c1:1a:ad:f7:
44:2b:36:77:91:26:62:1b:3e:3c:d8:84:9d:22:5d:89:fc:dc:
12:12:3a:35:1b:92:a9:62:bd:a8:ed:b4:f9:11:92:ff:ba:8e:
bf:51:6d:11:3e:06:af:e1:fa:0c:35:31:61:61:de:28:85:c4:
3f:e3:4e:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:57:46 2025 by rpki-client