Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/3Pue9ORiy1mdMquKTsD24Fsl3gg.roa
File: 3Pue9ORiy1mdMquKTsD24Fsl3gg.roa (raw, json)
Hash identifier: XLm0dLn8NkA1D5TDVgN/1adP7liizh7KX4nSvKCJk4Y=
Subject key identifier: DC:FB:9E:F4:E4:62:CB:59:9D:32:AB:8A:4E:C0:F6:E0:5B:25:DE:08
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 07C4
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3Pue9ORiy1mdMquKTsD24Fsl3gg.roa
Signing time: Fri 24 Jan 2025 06:25:02 +0000
ROA not before: Fri 24 Jan 2025 06:25:02 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1988 (0x7c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 24 06:25:02 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DCFB9EF4E462CB599D32AB8A4EC0F6E05B25DE08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:bf:fa:9a:72:38:de:fb:1f:40:e4:19:c8:
f9:36:94:05:02:83:36:93:86:32:22:ba:28:99:c6:
f8:62:57:73:26:76:bd:95:4b:67:51:ee:10:6d:7d:
02:ab:5b:32:d4:83:52:7b:8a:16:fb:05:6a:92:08:
f5:25:18:81:21:4b:9b:c4:a4:a0:38:9f:a2:e9:0d:
59:8c:7d:f1:8f:16:4d:36:06:85:d9:cd:1a:18:1a:
ce:41:14:5d:39:b1:35:de:f9:12:3f:97:f4:ac:f7:
f8:7b:f2:ce:5f:aa:dd:2d:ca:56:b9:5e:c0:48:37:
99:c0:f3:33:ea:45:e6:53:cc:f3:5f:ac:8e:ce:30:
01:1c:35:17:5d:0b:47:13:8f:ed:f6:d8:e2:83:20:
a3:44:ec:9a:d3:d5:cd:60:0d:f3:1e:e1:ac:d7:08:
86:b9:37:43:72:b1:5b:d3:84:61:26:d3:78:43:8c:
11:26:9d:f7:85:ae:4a:06:5f:b0:91:32:9a:44:0c:
7d:14:f8:e9:d2:d8:31:3e:3c:86:ec:c2:49:3e:1d:
c5:5b:9d:9f:73:78:ee:da:6a:3c:3f:4f:9f:24:9e:
db:17:fe:05:ca:9a:bd:f8:af:a2:f6:d9:e4:54:0b:
93:b4:8c:a4:c3:67:ca:04:27:e1:cd:22:ad:6a:cc:
c2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:9E:F4:E4:62:CB:59:9D:32:AB:8A:4E:C0:F6:E0:5B:25:DE:08
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3Pue9ORiy1mdMquKTsD24Fsl3gg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
01:5c:e5:5c:79:7b:dd:c5:b9:6b:e9:bc:f7:46:e6:7b:fb:cd:
95:52:ec:79:0b:f1:95:13:23:c4:6c:f1:00:6f:30:f3:e9:2f:
a4:63:6a:07:3a:41:a7:ba:7a:71:7d:b5:11:5d:37:13:c8:0a:
f6:30:29:3c:45:8d:04:52:51:82:7d:dd:26:09:b0:6c:6b:0b:
9d:2d:f5:ac:f8:6c:2c:a9:bd:fe:e4:52:a2:89:d4:b6:bf:6a:
74:a7:42:44:94:28:88:1b:c2:be:d4:1d:69:be:d2:10:f3:b4:
86:23:5d:e7:07:ec:54:9b:aa:99:dc:1e:f3:44:d3:29:a9:f4:
59:c2:04:ee:67:58:48:9a:99:f4:c0:a5:63:90:bb:01:02:ff:
c0:c7:e2:1b:81:5b:4c:aa:b2:cf:bd:a3:af:1d:69:59:62:59:
b0:23:e8:51:08:6b:24:a2:b1:65:13:ec:01:11:a2:e5:4b:27:
07:f2:42:d0:f9:2a:72:ee:7d:9e:4a:f1:41:c9:60:be:e5:94:
49:6d:33:b6:15:3c:e2:41:e7:0a:a1:b4:b2:36:f8:fd:3e:2b:
21:b9:44:19:0a:1f:e9:59:80:6d:9a:41:aa:54:29:bc:23:9c:
40:ec:dd:2e:82:2f:43:e6:3f:d3:25:5e:aa:06:79:6e:f3:e5:
fe:72:c8:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 23:39:33 2025 by rpki-client