Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/4BhQPRF8qc0SLbq1ZqP_uZeD1do.roa
File: 4BhQPRF8qc0SLbq1ZqP_uZeD1do.roa (raw, json)
Hash identifier: rNDp334CEG1nqQ9fzXFM+Y5x25oJQn0PDIeYAglFcpI=
Subject key identifier: E0:18:50:3D:11:7C:A9:CD:12:2D:BA:B5:66:A3:FF:B9:97:83:D5:DA
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C3A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/4BhQPRF8qc0SLbq1ZqP_uZeD1do.roa
Signing time: Wed 05 Feb 2025 03:55:43 +0000
ROA not before: Wed 05 Feb 2025 03:55:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3130 (0xc3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 03:55:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E018503D117CA9CD122DBAB566A3FFB99783D5DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ee:0d:79:c3:a9:a3:c8:82:90:6c:69:20:44:
55:08:60:56:c7:bc:62:c4:f1:e1:d9:00:54:f9:2c:
36:9e:f8:78:6b:fe:d1:a9:be:73:d4:04:16:25:9d:
92:9e:1d:ba:89:85:65:aa:10:10:55:22:db:67:54:
8d:87:1a:0f:b6:5d:26:6c:f6:d5:b4:ed:f3:cf:67:
07:54:6a:2c:09:0a:78:fc:e9:d5:1c:95:98:af:c5:
cc:36:dc:0b:c5:fb:70:a9:58:14:d5:86:7c:49:bc:
11:a0:87:c7:8b:50:76:fc:bc:51:68:d3:fb:4f:bc:
46:aa:df:7d:fb:aa:80:52:c6:1a:09:f5:8d:ad:c1:
f8:f5:0c:ce:f7:21:df:bf:e2:82:96:70:8e:f9:49:
a6:0a:2f:7d:b2:fb:09:84:a3:35:cc:11:9d:3a:d5:
05:68:d0:57:7f:c8:38:d4:7a:a6:37:4d:07:7c:9e:
5a:b5:be:71:26:97:87:8f:79:66:e6:60:b1:0c:a2:
76:3a:d5:1c:59:82:ed:a6:12:8f:1a:82:5d:dd:00:
a6:bf:9a:f9:9d:e9:f2:59:fc:66:48:53:a7:ac:be:
59:e5:d6:48:78:ba:89:27:f6:a9:e5:25:b5:bc:8f:
d8:75:cf:3f:2a:1a:52:b0:5c:28:d9:8c:01:c7:ad:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:18:50:3D:11:7C:A9:CD:12:2D:BA:B5:66:A3:FF:B9:97:83:D5:DA
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/4BhQPRF8qc0SLbq1ZqP_uZeD1do.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
41:96:08:5b:71:e2:2c:cd:b4:0f:99:d5:08:c9:56:2e:4e:ed:
36:de:5e:59:ed:cc:15:46:0f:39:66:16:cc:ce:64:6e:72:4e:
f5:55:90:b8:8b:d9:b0:dc:bc:be:d2:22:58:88:66:46:f1:35:
bc:65:a8:e2:c3:a8:b4:40:a5:83:a0:8d:40:40:87:7d:71:c8:
6a:2c:56:46:bf:29:a0:41:6c:eb:4f:47:df:90:a4:61:3a:fb:
96:53:c0:72:10:83:da:a3:09:49:bd:af:ca:cb:c0:8f:a0:a1:
e3:de:57:85:fa:a9:e8:73:3b:06:f8:67:ee:2d:48:88:70:5e:
bb:df:78:c7:95:2b:33:71:c0:f6:32:bb:40:3e:cd:38:ee:fa:
b6:a9:5d:8c:94:4c:dc:b0:95:01:fa:5d:ad:38:42:a5:6e:37:
87:cb:05:8b:45:30:b3:3e:c1:b0:71:e5:51:69:ea:f1:46:94:
0a:03:fd:a0:fe:1f:78:a7:ec:56:8d:5e:51:c1:f4:63:37:8a:
63:6b:cb:53:88:36:86:ac:53:61:58:c1:c0:7b:68:94:ef:99:
f3:ea:ff:3d:57:ad:60:06:d8:d7:66:f7:d7:67:16:26:c4:af:
cd:66:5e:a6:aa:c9:c6:a4:9d:c1:e9:57:ec:8c:ba:dc:55:a2:
67:5e:ae:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 19:40:00 2025 by rpki-client