Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/7ZTaLqRagsTYRC-9Ow9yp5KazlY.roa
File: 7ZTaLqRagsTYRC-9Ow9yp5KazlY.roa (raw, json)
Hash identifier: em1zBZjnstkFx4vq5XDuJQnWKkBRIyWKFyCivG4TwCQ=
Subject key identifier: ED:94:DA:2E:A4:5A:82:C4:D8:44:2F:BD:3B:0F:72:A7:92:9A:CE:56
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0840
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/7ZTaLqRagsTYRC-9Ow9yp5KazlY.roa
Signing time: Sat 25 Jan 2025 13:25:53 +0000
ROA not before: Sat 25 Jan 2025 13:25:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2112 (0x840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 25 13:25:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=ED94DA2EA45A82C4D8442FBD3B0F72A7929ACE56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:dc:9b:43:75:ac:9e:af:b5:b6:99:12:67:
3b:7b:48:31:3a:14:34:bc:5a:ce:b7:ee:05:6e:61:
24:17:3c:37:a5:73:6b:9d:8f:8f:10:f1:7d:4a:71:
2a:22:69:4d:d2:84:c0:fd:eb:80:97:f5:26:55:80:
cd:59:64:fc:b9:26:a6:36:9b:37:84:9c:90:bd:1f:
d4:10:e6:ef:62:2f:1e:8c:f5:b9:21:ab:02:73:83:
39:af:6f:08:ae:e3:87:43:a8:9f:9c:91:04:b7:6a:
26:c4:5c:40:59:9e:5d:47:24:a5:87:73:e5:14:54:
92:dc:22:57:39:f3:28:7d:0f:94:0b:0e:6a:75:05:
33:f1:a9:f1:53:b9:25:c9:4a:45:e4:ba:d5:90:4e:
38:a8:0e:e9:a5:7f:04:7d:e6:fd:ca:46:22:0e:17:
28:41:93:fa:c8:86:8b:e8:ed:12:ad:d3:0d:66:7e:
e8:67:cd:68:94:30:af:0d:93:b2:75:1c:f9:6d:2e:
51:5c:30:c9:9a:2f:92:2f:81:f4:6b:04:a7:f9:c4:
51:02:fa:95:77:84:59:c4:3a:b1:31:2a:80:d8:0f:
7a:66:e4:86:7a:27:08:98:68:1e:13:07:2c:7e:f1:
82:0a:d5:ff:0a:45:3a:fb:95:af:0e:f0:92:11:61:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:94:DA:2E:A4:5A:82:C4:D8:44:2F:BD:3B:0F:72:A7:92:9A:CE:56
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/7ZTaLqRagsTYRC-9Ow9yp5KazlY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
45:14:da:a8:6e:46:78:61:68:2f:5a:f0:23:03:6e:ea:79:f2:
81:e9:41:e2:cf:f2:33:12:20:cf:93:73:cb:9a:00:63:16:b2:
5b:ea:37:cc:aa:2f:b0:9a:4d:eb:49:70:ff:15:48:25:33:7d:
e5:d8:5f:3b:a7:46:0b:4e:14:df:b9:fe:0e:53:31:e5:a9:8d:
17:d3:cf:e4:8e:c5:86:f6:48:cf:7a:c1:34:ed:fb:de:d5:a8:
11:e2:76:b9:fa:a5:54:93:46:46:86:c8:bc:0e:55:aa:96:c2:
f0:2c:a0:ca:65:0f:f6:67:59:08:4f:2c:bf:ba:df:d7:5a:54:
11:68:1a:e0:74:9a:b1:6c:a4:62:bd:17:74:3e:f3:e0:25:e9:
f0:45:84:14:89:d5:3a:b5:4e:b3:f7:1f:43:3b:eb:c2:21:88:
d4:5b:36:5e:2a:12:a0:9b:77:bd:a3:0c:6f:72:c6:f0:4e:29:
0d:31:1b:fd:3e:a1:21:58:d4:3c:16:87:54:e0:b7:4b:c0:0a:
67:ca:2e:7e:63:19:db:27:e4:06:f7:f7:40:81:10:86:a1:44:
91:c1:5a:f1:23:50:f5:5b:6b:20:56:19:03:f7:47:cb:34:8a:
6d:02:3f:92:b3:81:74:97:2c:7d:17:5a:64:16:d0:4c:ef:9b:
4a:0a:a6:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 02:16:20 2025 by rpki-client