Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/-Ahq_a_Agtw1JSFukutND0kRBPs.roa
File: -Ahq_a_Agtw1JSFukutND0kRBPs.roa (raw, json)
Hash identifier: ipxN/WsKK1MsGJLWrx5Zfsa9sk+l1o2fBRfrhE9gd2M=
Subject key identifier: F8:08:6A:FD:AF:C0:82:DC:35:25:21:6E:92:EB:4D:0F:49:11:04:FB
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 05E2
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/-Ahq_a_Agtw1JSFukutND0kRBPs.roa
Signing time: Sun 19 Jan 2025 05:54:46 +0000
ROA not before: Sun 19 Jan 2025 05:54:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1506 (0x5e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 05:54:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F8086AFDAFC082DC3525216E92EB4D0F491104FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:10:19:9b:2e:60:45:90:63:f8:60:7e:83:
37:77:1d:e0:1f:0b:f1:b8:d0:73:b8:36:83:02:b6:
b0:39:1a:3c:11:ff:33:ed:4f:30:d8:ef:a9:08:5c:
b8:02:8f:9b:49:6d:f2:a2:bb:be:76:57:ba:00:0a:
6c:61:c9:35:36:ba:c5:5d:e7:36:d9:f9:db:6e:1f:
c0:28:ef:72:32:b1:f6:85:c6:f1:87:87:35:76:ff:
7a:55:1e:02:62:14:94:67:4d:62:fe:b6:d3:28:5f:
3d:f3:11:a2:7f:35:1d:de:f1:6b:ef:9c:48:db:82:
d1:9f:f1:5f:c4:ee:e0:51:4d:1d:40:34:93:58:bb:
bb:71:6c:62:be:db:f8:67:dd:b3:97:f0:f9:c3:41:
31:16:5a:25:78:6f:8d:a6:b0:2a:ac:f0:31:46:39:
a1:9d:29:e5:84:b1:9e:44:17:bb:f7:97:fd:91:bb:
fd:52:ed:a8:03:46:77:25:0d:1e:4a:13:16:f7:ae:
31:de:f3:bc:e9:2b:19:90:a0:2a:8f:6e:68:7c:91:
50:b6:f1:a3:d5:42:90:5c:4d:40:ab:38:01:89:7c:
53:ff:39:47:39:c3:64:f3:af:89:35:3d:23:4b:3a:
64:9d:d4:e7:51:80:fb:35:5b:8a:ed:40:fa:ca:f9:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:08:6A:FD:AF:C0:82:DC:35:25:21:6E:92:EB:4D:0F:49:11:04:FB
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/-Ahq_a_Agtw1JSFukutND0kRBPs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
04:90:84:89:3e:03:4e:04:6b:4a:83:6b:2f:9c:1b:79:5c:75:
23:92:b7:ae:df:a8:23:d2:1c:f0:83:15:af:25:59:37:73:93:
66:83:71:0a:13:63:90:d8:95:f9:c2:c1:8b:a2:b4:92:8e:e6:
85:a5:ce:96:45:2f:26:bc:0e:fd:3e:1f:e3:8c:e1:00:64:96:
47:da:dc:ca:6e:ca:07:0f:14:01:17:85:c6:cc:91:32:69:b1:
a7:26:84:d1:a3:62:89:bd:f8:00:d1:81:4e:57:2d:22:8f:a0:
a0:b6:80:ef:ca:02:cb:49:8a:51:f8:fe:8c:6f:aa:d6:c6:32:
03:e2:07:43:e7:5c:e2:03:b8:51:93:85:ad:6b:2f:9d:e7:79:
17:f9:f2:2b:ea:e1:73:9e:48:e1:5f:35:53:87:00:9a:5d:08:
4a:d8:95:06:d7:25:4e:d2:d9:d5:6b:b5:79:c1:e7:ee:04:56:
d6:ae:16:52:6c:ee:89:25:00:1a:25:63:1f:17:72:d7:9e:e0:
d2:9f:5a:1c:ff:3b:57:f0:a4:f2:f9:90:84:55:b4:c6:68:98:
7b:58:0a:62:74:f8:d4:ce:fe:f7:b2:b7:00:1b:20:e5:51:de:
18:8e:fe:00:70:e2:71:d9:39:2b:b7:19:99:92:41:7e:8e:ca:
d2:6e:98:ed
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 04:53:11 2025 by rpki-client