Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/ysMwrYIVg9Hn5sK7BGw5UN-WtXA.roa
File: ysMwrYIVg9Hn5sK7BGw5UN-WtXA.roa (raw, json)
Hash identifier: t4R4RKhY1Pw7ooOFRaqWfEMq1k98J6gu8tjop/NAxzI=
Subject key identifier: CA:C3:30:AD:82:15:83:D1:E7:E6:C2:BB:04:6C:39:50:DF:96:B5:70
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C46
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ysMwrYIVg9Hn5sK7BGw5UN-WtXA.roa
Signing time: Wed 05 Feb 2025 06:56:28 +0000
ROA not before: Wed 05 Feb 2025 06:56:28 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3142 (0xc46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 06:56:28 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CAC330AD821583D1E7E6C2BB046C3950DF96B570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:2f:d7:52:48:24:e5:3b:eb:d2:30:40:ab:
8e:04:53:8c:17:5f:31:58:39:f1:de:04:76:8e:e3:
3e:51:87:10:ec:0e:d5:67:93:6c:ee:db:ee:15:21:
c1:54:d1:06:c5:49:9b:ed:6d:e1:13:8b:0f:ad:db:
cb:e0:c7:03:7f:74:fd:7d:d0:7f:9b:25:1a:56:fd:
bd:9b:84:cb:bd:44:83:16:1e:a8:60:3f:38:03:7d:
99:07:d5:f9:90:c3:7a:08:ea:56:7d:f4:dc:82:73:
93:2f:15:68:f8:33:d8:f1:48:18:fc:eb:22:33:ff:
77:32:d0:d2:0d:a0:f1:bd:46:cd:99:b6:0c:b0:1b:
f8:84:5f:63:de:fe:39:96:ef:18:27:fd:6e:42:90:
64:dc:ff:64:84:4a:20:d9:26:39:5c:a8:d2:f0:a6:
a0:1a:b4:3c:b1:fb:bc:64:02:51:70:0f:37:36:11:
09:2b:9c:7f:d9:58:bc:a0:e8:6a:fe:6b:97:5f:be:
cb:fa:73:e3:20:e4:a7:5f:4f:52:58:63:d6:4b:bf:
73:70:06:08:e4:77:e6:d1:f8:d5:d6:d5:4a:e2:d6:
e9:3b:d9:f0:10:81:78:dc:b8:8f:7c:4b:18:00:24:
23:90:9b:0c:3c:6e:0f:53:24:39:5a:48:5e:e7:bb:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C3:30:AD:82:15:83:D1:E7:E6:C2:BB:04:6C:39:50:DF:96:B5:70
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ysMwrYIVg9Hn5sK7BGw5UN-WtXA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:41:b9:df:26:21:bd:94:5e:f9:9b:3b:97:bc:07:76:79:fa:
f1:65:38:57:cb:a3:c0:9d:fb:40:e7:ff:56:1a:14:d4:9f:8e:
10:90:bd:dc:1f:b3:33:55:d4:50:51:2e:b4:46:cf:cf:a3:02:
21:63:ea:a5:c4:cb:34:e6:40:e1:52:b6:92:73:13:8b:9a:31:
94:25:53:24:bb:1d:f2:f4:a3:6c:ca:9f:dd:c9:51:03:b1:b4:
c8:03:89:59:37:c7:e9:79:71:48:1b:a5:d0:fc:13:4d:f7:82:
b5:06:cd:64:ce:54:5d:3e:15:78:04:a0:04:bb:9d:f7:a5:34:
8f:48:ad:d3:2b:ce:db:d7:b7:0d:be:2c:4c:70:ce:cb:68:54:
1e:ca:18:9d:94:1b:2e:cc:0e:6e:c6:45:fb:07:32:6b:62:ed:
f4:2b:dc:cb:ab:6d:be:d6:aa:70:a0:68:72:b9:ca:2e:9a:06:
ff:25:74:cf:18:59:b4:8b:44:04:2e:fe:1c:6d:cd:b0:b0:55:
09:cc:91:6e:aa:46:42:67:cc:13:0c:33:a6:8d:92:a0:b2:ea:
12:38:47:e4:1e:6d:92:9f:fb:32:8e:73:6d:1c:3a:a8:91:9d:
9b:7f:ca:a0:e5:83:5e:28:de:65:84:c2:a3:75:8d:dc:72:22:
5d:f4:23:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:46:04 2025 by rpki-client