Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/-X78jjbcG5vc3Xdq9C6jAjVRqvU.roa
File: -X78jjbcG5vc3Xdq9C6jAjVRqvU.roa (raw, json)
Hash identifier: An/qsvWVh9iYmQvUXv5R93cxVw7nXP0X3dXDO4QZHYw=
Subject key identifier: F9:7E:FC:8E:36:DC:1B:9B:DC:DD:77:6A:F4:2E:A3:02:35:51:AA:F5
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C2E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/-X78jjbcG5vc3Xdq9C6jAjVRqvU.roa
Signing time: Wed 05 Feb 2025 00:55:42 +0000
ROA not before: Wed 05 Feb 2025 00:55:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3118 (0xc2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 00:55:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F97EFC8E36DC1B9BDCDD776AF42EA3023551AAF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:87:bd:ef:69:2f:a7:ec:d1:09:d0:d1:98:75:
6a:84:9a:40:c4:da:4e:de:cf:49:93:f6:a2:94:27:
b7:75:3d:85:30:9d:ec:c5:31:ea:ff:f7:8a:f5:91:
b7:e3:48:3d:2b:a0:c1:42:95:71:a8:90:d2:aa:f5:
12:40:70:e9:a7:e9:69:f7:af:ed:5e:2a:e6:e4:06:
83:54:29:40:3e:64:d4:f4:99:24:51:d4:da:61:57:
e9:52:2c:89:5a:cd:86:69:49:d9:79:d4:67:c3:af:
7a:de:a5:c7:6c:15:8c:e6:81:a1:f9:78:48:c3:0c:
fa:ee:25:b0:f3:fe:0e:99:51:12:be:37:1b:ef:bc:
a7:ec:bd:c0:f1:1f:ac:10:04:d5:58:58:40:d6:a5:
78:12:80:a1:a0:46:5d:b7:15:90:93:07:39:58:5c:
97:8b:15:52:2f:71:7c:83:7f:28:e3:db:19:0a:4f:
1d:6d:cb:91:31:56:3c:54:ef:68:97:47:37:b0:2f:
42:fb:cf:81:59:28:03:b0:fc:96:5b:1f:a0:f6:18:
9c:14:40:db:0d:8b:0d:f3:85:7c:c2:c8:44:57:b4:
5c:6b:58:b7:ec:29:b3:61:9b:0b:3a:05:c2:1c:e0:
97:4b:b3:b4:22:6f:d9:93:0e:41:af:fa:9a:c7:80:
fd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7E:FC:8E:36:DC:1B:9B:DC:DD:77:6A:F4:2E:A3:02:35:51:AA:F5
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/-X78jjbcG5vc3Xdq9C6jAjVRqvU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:00:31:a3:2e:2f:79:dc:c3:44:ee:9a:1e:9a:1e:d1:78:6e:
12:0b:1a:46:4b:e3:a6:d3:70:9c:14:c4:7a:82:ce:46:1d:57:
97:bb:84:08:72:dd:b4:03:02:7a:bd:59:27:1e:f3:0c:8b:23:
b5:cf:e0:87:61:f8:8d:13:f6:2c:7d:cb:46:20:ea:af:c3:b4:
c6:e9:62:46:8f:ac:06:fe:27:86:2b:9f:40:3b:36:ba:de:aa:
4d:77:da:77:46:3b:53:bb:29:14:00:27:50:98:2d:5b:6f:ac:
ea:fa:71:29:ac:6d:2e:65:79:78:ab:c4:3d:bc:09:65:39:62:
5a:a7:f9:da:62:60:70:a6:15:a2:e1:75:ce:1a:46:5e:a8:62:
3d:a2:c8:44:2d:93:b8:f3:d9:19:6a:ba:2a:f9:8b:12:e9:2d:
2b:45:0a:51:e5:8c:b0:95:50:cb:4b:30:2e:22:1c:4d:48:15:
7c:80:c0:3a:a1:bc:12:2d:e8:dd:71:f7:bd:71:82:b4:eb:f1:
57:90:43:60:78:cd:d1:62:e8:46:28:4c:c9:13:25:f0:b3:35:
5a:67:26:ca:8f:53:bf:d3:43:4d:56:c3:f9:be:d2:3d:31:7b:
14:f1:7f:7d:79:71:30:40:b7:33:b6:fa:df:18:f5:83:db:ca:
41:82:b2:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 22:53:08 2025 by rpki-client