Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/-wdrFDT-mSJA_6toijxjxwhYATc.roa
File: -wdrFDT-mSJA_6toijxjxwhYATc.roa (raw, json)
Hash identifier: tyGWwTvjMssYfcz70o6LBbZWxqEtzkg+HJl6KVWEIeQ=
Subject key identifier: FB:07:6B:14:34:FE:99:22:40:FF:AB:68:8A:3C:63:C7:08:58:01:37
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0950
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/-wdrFDT-mSJA_6toijxjxwhYATc.roa
Signing time: Tue 28 Jan 2025 09:27:22 +0000
ROA not before: Tue 28 Jan 2025 09:27:22 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2384 (0x950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 28 09:27:22 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FB076B1434FE992240FFAB688A3C63C708580137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:41:aa:e4:02:17:ba:52:13:5f:c8:42:94:
f8:36:a3:86:23:ff:7f:31:3a:98:cb:11:64:45:b4:
0b:5a:fe:21:60:05:0e:dd:85:62:88:ad:5d:05:fa:
16:11:2f:6e:d8:3f:7b:d3:95:9e:40:25:76:21:cf:
6f:1e:dd:2e:6b:a1:aa:f4:50:db:c5:14:ff:c5:cf:
fa:f7:3b:bf:4b:9a:f2:55:28:c1:a8:11:95:2c:45:
af:2f:b1:0b:c3:ef:0a:e3:a8:3d:d1:4c:15:06:ba:
63:39:e9:07:b3:12:38:7a:cd:11:0e:44:82:6f:f0:
43:b1:00:30:13:56:83:06:63:57:85:3b:91:00:de:
ee:94:1c:56:e1:67:62:69:99:15:98:4c:99:6e:61:
6a:22:09:e2:0a:aa:e9:90:dd:b9:e0:49:37:91:55:
f4:e6:fb:08:79:02:e1:45:45:73:b1:d7:08:80:a3:
5a:f4:e5:69:44:c2:95:87:ba:9b:8e:e7:9e:a9:92:
e0:1b:a7:64:8e:fa:48:a3:42:5c:d1:53:6b:60:55:
5b:f9:e3:7e:db:ca:f0:5a:b3:90:75:ca:82:c4:c3:
ab:b6:43:2a:66:49:fb:c6:79:62:c5:a4:94:a6:88:
cc:fe:58:fb:45:45:aa:b8:15:d4:8a:00:11:5a:46:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:07:6B:14:34:FE:99:22:40:FF:AB:68:8A:3C:63:C7:08:58:01:37
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/-wdrFDT-mSJA_6toijxjxwhYATc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:a4:e7:c9:3d:aa:8e:97:84:d6:56:74:78:74:87:0e:ba:5a:
7a:49:85:03:1c:1e:37:d0:d2:44:51:58:8c:5f:a1:4b:85:fa:
74:d7:06:1f:85:60:1c:ad:38:71:9d:a2:de:e6:8d:4c:2c:18:
56:54:75:24:ec:58:f9:58:b9:4e:e0:d4:f7:72:20:36:5f:80:
9a:47:e4:c1:9d:d6:60:22:d4:fd:e2:40:66:e0:e2:96:99:cd:
c1:9b:ed:75:a1:48:fd:78:3f:39:c7:fd:82:52:bd:60:e5:03:
19:81:b2:99:52:57:ce:df:72:a5:da:71:16:59:a9:20:89:54:
55:e3:92:6d:02:8e:d1:e8:02:4b:c0:9e:c6:fb:94:f2:05:ed:
b4:67:21:f1:46:0e:47:97:77:8f:b4:cc:54:0f:50:79:8b:ef:
d4:ff:5e:df:82:5e:d7:df:d7:b7:0f:17:76:b4:c2:ec:00:58:
53:d8:f6:41:7d:88:23:3b:bc:24:b9:b7:e1:be:06:3d:7a:a3:
53:76:53:53:04:f8:94:56:f1:bb:f8:34:32:4d:df:34:92:43:
32:ca:ae:a5:39:f0:08:4d:0f:73:71:38:0f:b7:a1:79:92:4a:
89:51:c7:a8:2f:df:36:5c:c7:19:f1:12:17:25:22:c5:6c:09:
39:27:73:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 06:33:17 2025 by rpki-client