Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/z9swMgxuCztPwL0WnH-fb46vovo.roa
File: z9swMgxuCztPwL0WnH-fb46vovo.roa (raw, json)
Hash identifier: iNjNjpLprs2k0KwGMFcXTyGEG8FOG5Jo6zcxHUYoGPg=
Subject key identifier: CF:DB:30:32:0C:6E:0B:3B:4F:C0:BD:16:9C:7F:9F:6F:8E:AF:A2:FA
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D28
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/z9swMgxuCztPwL0WnH-fb46vovo.roa
Signing time: Fri 07 Feb 2025 15:25:54 +0000
ROA not before: Fri 07 Feb 2025 15:25:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3368 (0xd28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 15:25:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CFDB30320C6E0B3B4FC0BD169C7F9F6F8EAFA2FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:cd:fe:1b:46:84:13:3f:53:d2:9d:cf:5c:
7b:b3:bd:a9:7a:fc:a7:e2:f1:53:7a:99:b8:3e:58:
80:e1:ac:02:e3:83:bc:24:4b:32:d0:cb:88:5a:f2:
96:ef:70:ce:85:4e:42:6c:c0:00:dd:43:b6:8b:b4:
1c:25:92:c6:3a:fd:63:9b:ff:99:e4:53:c6:ec:2c:
b4:4f:79:e4:21:d3:7d:32:81:30:10:56:cd:19:22:
70:8f:e1:e5:5e:d0:80:88:77:23:04:9c:94:0f:48:
0b:8e:96:6e:77:18:1e:ce:ae:94:83:e5:aa:1d:65:
31:09:82:40:a2:c2:fe:b6:f0:74:74:fb:cd:30:f6:
70:48:6b:98:a8:45:03:e4:78:60:12:05:cd:88:31:
0f:3a:cc:86:99:03:38:42:19:22:e3:05:43:73:09:
9a:30:5c:c3:28:5c:9b:39:ff:4b:2b:7f:f8:16:8c:
1c:76:ff:1d:8c:11:46:03:08:88:c6:7b:bf:1d:ed:
51:fa:12:e9:20:20:25:d3:ab:87:17:6f:1e:47:10:
85:94:22:8a:99:36:30:4c:02:3a:d2:ac:e1:71:7f:
8b:ec:8a:d2:c9:df:08:35:36:7d:bc:1d:00:c5:68:
50:2b:b2:ae:6c:08:2b:04:35:ae:a3:29:be:ab:eb:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DB:30:32:0C:6E:0B:3B:4F:C0:BD:16:9C:7F:9F:6F:8E:AF:A2:FA
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/z9swMgxuCztPwL0WnH-fb46vovo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
00:e5:f7:bb:fc:42:7b:21:25:1d:8f:b3:a8:86:27:8a:3b:1c:
91:57:2d:08:c8:e4:6f:c7:bd:9f:1b:a4:41:b8:e0:5a:0d:ce:
b2:08:e7:5f:dc:eb:14:23:b1:c9:8a:46:e8:16:3d:68:51:a0:
a7:15:86:4d:ab:28:a6:1f:34:e2:ea:a2:42:bb:80:68:e0:7d:
9a:38:b5:ca:bd:ca:01:04:63:05:d1:42:d1:0a:21:2b:fb:ff:
22:c6:29:53:80:80:7a:28:3d:57:a0:77:cc:c4:06:56:dd:f3:
d7:40:f0:42:b2:76:2e:38:6e:00:e8:3c:8d:87:1a:df:7d:3d:
72:2e:21:8e:ad:b6:77:ab:ae:ce:c1:75:41:85:a6:2b:c9:4c:
bf:f2:56:e4:37:37:38:f0:ae:26:01:8d:4b:49:1f:fa:9c:bd:
b1:c6:9d:c7:b5:e5:4b:7d:f5:b3:f9:ef:5c:03:58:bc:6d:fc:
57:bf:fb:f0:42:11:66:42:7f:40:3f:e6:0b:64:23:99:0f:19:
16:67:99:c9:28:87:a2:35:bf:c7:02:1d:f2:43:01:10:73:c3:
61:43:27:60:00:1d:dc:09:0c:d6:e7:9f:10:61:7b:f1:1d:c5:
a6:ba:03:72:65:ef:a4:c8:4d:bc:39:72:22:9d:ac:a0:68:1f:
ba:dc:97:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:40 2025 by rpki-client