Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/3_vJqPs0f1jcyeWg2zYZArrEmfg.roa
File: 3_vJqPs0f1jcyeWg2zYZArrEmfg.roa (raw, json)
Hash identifier: BohU55R18CS6OfbZgjLHDgmgrZp/614mr673zNz7bbg=
Subject key identifier: DF:FB:C9:A8:FB:34:7F:58:DC:C9:E5:A0:DB:36:19:02:BA:C4:99:F8
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 06FC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3_vJqPs0f1jcyeWg2zYZArrEmfg.roa
Signing time: Wed 22 Jan 2025 04:24:57 +0000
ROA not before: Wed 22 Jan 2025 04:24:57 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1788 (0x6fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 22 04:24:57 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DFFBC9A8FB347F58DCC9E5A0DB361902BAC499F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:c4:11:53:4c:fc:f2:79:11:df:0e:bf:63:
3b:a0:d8:45:0c:c3:8f:4b:e6:38:a1:26:05:86:27:
fa:b3:16:fc:68:1c:c2:b9:c9:c6:f7:50:6a:f8:eb:
1c:d6:6e:3d:9e:eb:ee:b3:ea:bc:e9:a5:40:77:2e:
0b:a5:92:82:35:d0:2c:2e:71:4d:a9:b9:36:93:21:
b5:6d:e2:0e:41:2a:a6:b6:4f:4a:54:e1:ba:c5:0c:
a2:05:f8:39:32:fa:1f:8c:0d:c5:3f:5c:bf:c8:c6:
e5:5e:8d:8d:ef:2e:12:0a:36:22:3f:7b:c1:6f:7f:
c2:ad:4a:0c:5a:fc:9b:62:d2:b4:85:88:cb:07:e2:
67:aa:34:a4:ad:25:a4:c3:85:89:28:eb:c0:2e:91:
23:f1:9c:f3:71:e2:56:6f:10:f4:c3:cf:5a:c4:bc:
d1:33:da:b0:fe:bb:67:d3:ea:49:ef:8f:27:b8:38:
cb:ff:50:75:85:73:1a:ce:9e:cb:05:1b:f9:a5:e1:
bf:1b:29:13:6d:98:8d:07:c5:3f:0f:c2:aa:44:f3:
fd:e2:a9:7c:68:f3:11:df:61:67:7a:5b:6d:f3:b7:
ea:a0:aa:c7:e5:9d:b3:93:8a:61:a9:09:c8:26:39:
58:ed:47:77:e1:72:a7:b4:aa:f7:62:34:03:80:2c:
c4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FB:C9:A8:FB:34:7F:58:DC:C9:E5:A0:DB:36:19:02:BA:C4:99:F8
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3_vJqPs0f1jcyeWg2zYZArrEmfg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
94:64:8d:51:c7:84:c6:ee:b5:67:d8:7e:09:4c:d2:4a:3f:3e:
fd:6a:92:0c:64:36:67:21:cd:46:9a:ca:3a:46:d6:a4:f3:ad:
b5:1c:54:70:df:1c:1b:04:2b:d7:2a:51:fc:ae:7e:ee:7e:ea:
be:56:31:bf:4e:a9:22:07:0e:cc:08:44:a2:9d:a5:39:d2:a4:
80:1d:69:c1:6d:f3:a9:8a:88:69:95:1b:ff:0e:48:2e:fe:26:
f2:15:da:7e:1e:3a:b0:fa:cc:e9:88:75:e0:5f:0f:b2:15:86:
6c:89:f2:4b:b4:57:99:6f:91:4c:51:6b:b1:e9:51:75:9e:6e:
e6:7a:be:71:b4:4c:6b:c5:80:2e:78:4e:ff:83:66:f1:b1:6c:
fd:b5:d7:34:01:6c:8e:e1:d1:05:c2:dc:e1:f9:50:fd:0a:34:
a6:75:5b:b3:e5:19:24:7f:b3:0d:f3:3b:06:88:f6:b7:40:a7:
3e:e3:98:7b:78:a4:41:ff:f2:80:ec:8a:f0:50:8a:cc:fe:ef:
ef:63:18:f2:7d:f3:ae:7f:86:8c:03:38:4e:94:e1:56:63:89:
c7:ff:75:d2:36:76:48:0a:49:06:48:32:7c:f8:b3:af:b4:2a:
02:ec:05:7c:90:c8:b5:29:04:13:48:d2:f9:22:2c:14:44:36:
8e:67:bd:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 23:24:38 2025 by rpki-client