Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/0BchlCQuLPpxFH1FAo8GEU40OHg.roa
File: 0BchlCQuLPpxFH1FAo8GEU40OHg.roa (raw, json)
Hash identifier: Z+iO0MlVtjVKXie/Um1nkX90pzLh/inlwMluZEeRJPc=
Subject key identifier: D0:17:21:94:24:2E:2C:FA:71:14:7D:45:02:8F:06:11:4E:34:38:78
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 08C6
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0BchlCQuLPpxFH1FAo8GEU40OHg.roa
Signing time: Sun 26 Jan 2025 22:55:54 +0000
ROA not before: Sun 26 Jan 2025 22:55:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2246 (0x8c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 26 22:55:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D0172194242E2CFA71147D45028F06114E343878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:fe:dc:22:93:b2:69:50:f3:21:99:1f:91:
2e:92:a9:58:24:c4:09:1c:a0:ee:d9:9b:82:a3:e5:
bb:86:00:29:a9:f1:6e:21:98:cb:6d:43:86:c0:30:
01:83:34:ff:44:95:a2:c1:7b:60:f0:3c:67:d0:87:
72:7e:d7:d4:b2:5a:72:f2:18:a6:bd:e3:72:6f:97:
2d:10:0e:a0:91:24:a1:23:a6:14:77:50:2d:d0:87:
29:1c:b0:53:24:3b:57:dc:57:44:25:a4:64:27:1c:
96:99:8b:42:8c:21:bc:b1:38:88:59:59:e6:87:e5:
6b:d8:77:80:d5:63:03:25:d5:4c:dc:0b:5e:ad:79:
5e:ef:ca:31:f3:ab:c2:aa:cc:e2:af:66:35:d0:1a:
45:25:aa:f3:ee:8c:fe:cf:4e:9d:49:12:17:2b:56:
61:83:67:cb:b6:bf:5d:9d:6a:13:59:89:ec:a4:60:
da:54:d3:0e:88:02:be:c6:0f:f7:42:d4:14:f9:21:
5c:33:f6:0f:aa:90:0c:8b:1c:39:4a:3c:52:3f:cf:
6c:cd:91:8c:44:51:4d:f0:b1:bd:ff:51:4b:37:27:
4d:18:33:0e:47:0b:02:1d:dd:94:f6:a6:9b:ab:97:
03:c4:90:b6:c8:0e:6d:14:4c:81:d4:a7:a0:4a:52:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:17:21:94:24:2E:2C:FA:71:14:7D:45:02:8F:06:11:4E:34:38:78
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0BchlCQuLPpxFH1FAo8GEU40OHg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
50:48:de:32:79:73:09:07:15:57:58:9a:2d:9a:76:d9:63:96:
88:d2:23:30:92:2d:80:ae:b5:9e:44:93:92:ea:32:08:cf:25:
60:35:0d:a5:e2:76:a6:46:47:ed:66:d8:95:06:ce:86:2a:94:
c7:81:d4:cf:0e:d8:98:49:ee:66:1a:e9:cc:67:a8:9c:2e:6e:
a9:d4:dd:b6:4d:0a:f5:6d:de:74:ed:0d:a7:9d:ae:d7:72:34:
14:4d:84:bd:48:97:95:c3:e4:90:4c:99:80:f7:8c:e1:55:d5:
66:f8:2a:2f:7d:1f:26:90:a8:a9:92:66:30:e0:fb:4e:36:35:
33:9b:68:97:8f:d5:10:c1:3a:25:11:27:ce:26:73:0f:7b:15:
22:fc:15:34:29:b9:68:64:77:6d:51:b5:53:17:4c:65:2b:fb:
07:d6:04:59:50:8b:a3:ac:4a:43:37:6f:10:b2:c4:1f:bb:52:
c1:c4:38:0c:ee:ca:50:a9:75:bb:e6:11:cd:eb:c3:cb:1f:c9:
40:4a:72:5d:55:5b:6d:ca:b5:b3:d3:f3:2a:12:91:1b:cc:89:
e9:32:8e:42:6f:4d:b7:85:7f:1d:60:32:50:03:06:22:9e:49:
da:5e:55:90:8a:bd:49:08:9a:58:6c:fd:c8:93:95:5c:ff:fe:
6c:13:42:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 06:22:09 2025 by rpki-client