Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/0UOYL8kdKsUTjv-S-pNyA1vUhgs.roa
File: 0UOYL8kdKsUTjv-S-pNyA1vUhgs.roa (raw, json)
Hash identifier: 0D9bOQ2IYD5wEhaV3HkLZijcuEPXZvxYtdwXtFeS1iw=
Subject key identifier: D1:43:98:2F:C9:1D:2A:C5:13:8E:FF:92:FA:93:72:03:5B:D4:86:0B
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A9A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0UOYL8kdKsUTjv-S-pNyA1vUhgs.roa
Signing time: Fri 31 Jan 2025 19:55:30 +0000
ROA not before: Fri 31 Jan 2025 19:55:30 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2714 (0xa9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 31 19:55:30 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D143982FC91D2AC5138EFF92FA9372035BD4860B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:16:92:d0:01:29:4f:04:e0:e7:02:6a:68:52:
cb:f9:22:7f:53:3b:b5:27:cd:04:86:90:cf:2d:24:
4b:b7:dd:f5:93:75:a5:80:5f:57:20:f8:91:df:e3:
26:7c:1d:d8:4f:a4:29:c6:8c:45:8f:ff:50:33:61:
30:d1:4b:ee:4e:67:f5:cb:31:a5:70:23:ba:61:22:
23:2d:40:3b:21:4b:93:36:6d:1e:3c:cb:f3:d6:ad:
8a:cc:b2:b9:17:8d:05:e2:97:91:c2:d3:ea:31:b7:
c0:ef:76:84:c0:bb:59:63:a3:e2:41:ab:2d:f9:a3:
69:d4:2a:fc:73:92:7d:a4:9f:33:b6:e2:a5:d5:32:
53:6a:a6:da:aa:ad:7b:9f:96:5e:cd:7c:58:6e:34:
87:92:ef:cc:f5:6b:18:90:6b:4b:67:47:13:9e:20:
54:67:19:dd:ae:5f:3c:f3:e9:f7:83:f1:19:78:27:
83:f7:f4:7c:9e:62:dd:12:16:3d:d8:6f:bf:a2:1c:
1c:48:60:00:20:b9:aa:cb:89:32:b3:b9:2c:c7:24:
3d:32:1e:e5:a1:ca:bf:33:6d:81:53:ec:a3:02:7c:
c6:41:07:37:ac:a9:87:4b:62:45:cf:7d:bf:0e:62:
f3:54:8e:30:50:36:06:09:13:e2:76:71:62:90:31:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:43:98:2F:C9:1D:2A:C5:13:8E:FF:92:FA:93:72:03:5B:D4:86:0B
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0UOYL8kdKsUTjv-S-pNyA1vUhgs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:4f:7f:c8:10:26:0a:08:a1:f9:42:29:19:9b:c1:29:98:36:
96:d2:0d:0d:80:2f:45:91:2e:7a:81:4a:aa:99:ef:1a:21:06:
bb:fc:6b:ee:a8:ef:92:bf:91:94:d0:19:9b:51:55:f2:f8:d9:
ef:e1:ac:fe:6e:23:25:3d:3b:c1:e3:48:23:98:e1:d2:2c:6a:
74:2f:69:d4:47:36:48:b9:0d:ce:a7:26:d7:72:e7:a0:4c:d1:
78:f6:60:f8:2d:bd:c3:7a:4e:34:d0:ee:c4:25:fa:92:f1:bb:
c5:66:be:f9:b9:57:8f:cf:76:d9:bd:8c:c3:47:d7:ff:66:97:
9e:21:8c:4f:0e:22:44:84:dd:bf:e4:20:ac:88:be:71:1d:4c:
02:63:b9:d7:17:59:44:5e:b0:b8:44:e1:fe:c7:e6:01:4d:6b:
8a:1a:b0:55:7c:10:6f:12:e9:50:9f:d6:61:b3:0e:6e:6e:3f:
09:61:68:4d:83:47:8d:0e:08:76:4e:72:2a:5d:26:c4:26:47:
10:fa:22:84:1b:e0:a2:a1:e8:02:84:e6:7e:31:63:60:1b:b0:
78:78:81:11:9a:e3:d1:49:52:00:4f:42:2d:7e:16:db:43:59:
ba:b2:db:09:3d:cc:33:5b:2b:c1:d0:3b:1c:62:f1:5e:8b:22:
bc:47:c5:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 01:56:07 2025 by rpki-client