Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/0Gw2_oQ7gcKP7YsYouz8w7v_NPU.roa
File: 0Gw2_oQ7gcKP7YsYouz8w7v_NPU.roa (raw, json)
Hash identifier: 7jmbrRJV3wkIOjiL8qep4rSNFA51Q2iPfsVYsSx7Yxk=
Subject key identifier: D0:6C:36:FE:84:3B:81:C2:8F:ED:8B:18:A2:EC:FC:C3:BB:FF:34:F5
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BE6
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0Gw2_oQ7gcKP7YsYouz8w7v_NPU.roa
Signing time: Tue 04 Feb 2025 06:55:39 +0000
ROA not before: Tue 04 Feb 2025 06:55:39 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3046 (0xbe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 06:55:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D06C36FE843B81C28FED8B18A2ECFCC3BBFF34F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9c:a1:93:2d:df:8f:b1:68:ea:fb:d8:16:1d:
f5:80:b0:7b:f2:fc:b2:bb:a2:4d:21:2c:95:1d:a8:
05:93:ba:b1:3c:7a:d7:ed:2d:68:9d:37:72:ea:2d:
6b:31:95:4b:02:6a:7c:2e:f5:81:a8:95:79:8c:16:
4a:7a:cb:11:32:9b:75:8a:9e:ed:0a:46:42:8f:9e:
c6:e2:a7:5d:25:4f:20:9a:5a:39:8e:20:f6:e5:8b:
73:05:48:04:09:f0:69:1d:5d:e5:e0:a9:cf:71:f9:
67:a9:0a:ca:ad:96:9a:da:61:f4:5d:31:d5:12:e0:
60:ee:b2:97:57:f1:54:38:4e:4f:54:16:51:3c:a3:
20:9d:ff:fb:99:e9:e6:c6:db:41:dd:69:6b:41:27:
07:cd:74:1b:a1:51:95:b7:d1:9c:e5:e5:4a:9c:bc:
51:72:4b:45:ab:cd:ad:31:fd:07:41:62:96:17:56:
2b:b1:fa:59:1d:44:d3:b4:2d:e0:c8:6c:88:91:71:
eb:5e:2e:1f:1a:2e:48:ce:fd:d4:48:e3:bb:38:ec:
c0:f6:20:50:1f:09:f1:aa:eb:1f:f7:e3:b4:cc:0a:
c7:29:cf:07:27:d6:73:65:a0:a7:90:f3:2c:10:d9:
f2:6e:ed:a9:7e:bf:c3:ea:29:4f:69:3b:a1:db:d3:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6C:36:FE:84:3B:81:C2:8F:ED:8B:18:A2:EC:FC:C3:BB:FF:34:F5
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0Gw2_oQ7gcKP7YsYouz8w7v_NPU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
63:d6:fb:25:38:71:06:18:03:ba:8f:45:ae:8d:cd:07:25:8a:
dc:69:fa:a6:a4:80:da:61:6a:d7:4e:96:a7:02:24:b5:97:50:
58:16:64:01:de:a4:46:9c:d3:3b:33:28:c5:f2:1c:b9:b8:9c:
de:5b:4c:d2:86:40:a4:c4:da:e4:22:55:9c:bf:72:a2:a5:97:
cb:38:57:ff:27:98:ed:2f:be:bc:e2:aa:21:ab:19:54:21:d8:
62:19:25:f7:71:4b:9f:c6:ee:6a:5e:2d:57:80:0b:11:1a:96:
4e:03:1d:2d:13:6f:a3:ee:70:34:1e:5f:6b:ae:46:37:95:b5:
4f:16:3d:8b:14:46:b8:79:b3:8c:1c:cd:05:f6:7c:8c:c6:ff:
e7:d8:b8:69:79:e1:5c:9d:74:38:40:9d:20:7d:60:ee:bf:ca:
ab:92:4b:0c:5c:f2:7f:4a:00:87:61:c7:56:80:ff:04:23:0f:
65:bd:2d:e5:bd:db:8c:28:ce:43:09:f5:3d:84:05:2f:20:cf:
68:dc:28:56:23:50:6f:79:cf:42:04:25:dd:7a:ad:11:9d:19:
52:d9:94:0e:ad:3c:f5:f1:a4:ad:d8:17:15:29:cd:25:af:0f:
26:66:2b:01:7f:c8:4c:fc:38:4a:25:b5:6c:01:a1:96:b4:e6:
8a:6e:86:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 21:28:08 2025 by rpki-client