Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/0dtaFOljOJeMCHRZXNCO0MkBmfY.roa
File: 0dtaFOljOJeMCHRZXNCO0MkBmfY.roa (raw, json)
Hash identifier: 3x4vaf5MDTCQ0Fe6aLCxbZDecSMcCrRohbtAEtRhzNM=
Subject key identifier: D1:DB:5A:14:E9:63:38:97:8C:08:74:59:5C:D0:8E:D0:C9:01:99:F6
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B0C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0dtaFOljOJeMCHRZXNCO0MkBmfY.roa
Signing time: Sun 02 Feb 2025 00:25:35 +0000
ROA not before: Sun 02 Feb 2025 00:25:35 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2828 (0xb0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 2 00:25:35 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D1DB5A14E96338978C0874595CD08ED0C90199F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e5:4a:6d:63:e8:87:fe:39:58:78:6b:bd:ad:
66:13:07:47:13:71:47:86:4d:82:a1:9f:62:49:f6:
6a:ea:1a:de:a3:02:75:86:ac:0a:39:84:16:75:e2:
3b:db:31:2e:70:14:e2:19:e1:1d:0a:7f:3d:f2:53:
8b:2a:4f:d9:57:39:65:6d:96:bf:84:ac:5f:94:72:
f9:53:91:d5:a7:1f:e2:49:6a:ee:b9:1d:90:1c:f0:
32:05:7f:29:a5:c5:7f:c2:76:31:d9:80:e8:5a:cb:
e4:10:4f:e3:5e:b8:85:4b:7c:6b:53:f9:c4:f1:51:
07:cd:8f:5d:e0:ba:03:df:3a:0e:73:e4:4a:a7:55:
40:52:26:4a:6d:2f:eb:36:b3:7d:c6:76:0b:b2:ac:
04:4d:04:27:44:24:31:53:48:c0:6b:8e:09:b6:0e:
6c:37:91:7c:a2:c5:72:44:ac:a3:ff:14:a9:17:b8:
be:92:70:ba:e1:6d:20:e9:8c:b4:8e:fb:fb:c6:0c:
7e:5a:26:29:00:e8:72:98:6c:dd:bd:cb:e9:dd:f9:
84:6b:92:64:16:53:c4:51:1a:95:19:19:d2:c5:2c:
e0:6c:ae:0b:08:7b:a8:92:5b:67:4a:35:37:aa:89:
6f:50:85:12:8e:dd:9e:a0:63:49:fb:71:85:e4:88:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DB:5A:14:E9:63:38:97:8C:08:74:59:5C:D0:8E:D0:C9:01:99:F6
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0dtaFOljOJeMCHRZXNCO0MkBmfY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
10:6f:f8:15:92:78:fc:7a:ef:ec:92:74:7e:95:3b:c6:9c:03:
72:38:55:27:43:aa:34:4f:b5:ac:35:03:1b:cb:b9:e5:75:c9:
9f:92:9b:18:4b:93:38:a1:bc:c8:f5:fb:7b:26:96:b7:5b:d1:
8a:8d:55:c9:0b:86:63:49:c7:d5:e5:9b:4b:ef:ef:19:ad:74:
33:6c:87:bb:fd:4a:ca:b7:c7:f3:f9:2e:94:55:c4:ae:23:49:
f9:e6:b7:68:fa:3e:09:b6:9e:34:c0:3e:df:4d:74:6b:90:a4:
15:b8:e5:25:33:a2:19:61:3e:de:52:7d:c3:7d:36:45:db:23:
fd:a2:04:be:58:f2:60:38:eb:92:07:ca:1f:99:94:4e:50:11:
a4:ad:25:7a:05:5f:52:7e:f9:c3:45:ca:2d:d2:57:cc:54:1f:
59:12:80:c7:1c:42:8f:dd:6e:02:d1:e2:1e:c6:89:ed:b2:57:
77:1c:2e:95:cb:35:93:9d:c0:8b:ce:56:62:fd:36:6a:5a:f3:
df:38:1b:2d:38:dd:68:76:e1:11:c9:2c:20:7c:63:9e:3d:e4:
87:d7:ae:65:3b:14:98:03:fa:0f:ca:38:bb:8c:97:93:0c:46:
6f:2f:c4:6a:63:83:e2:5c:5d:00:85:84:79:f9:ab:93:60:78:
34:ad:76:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 03:03:28 2025 by rpki-client