Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/8hYD8Z7tGo72Pz0ueSRxAgrB5vk.roa
File: 8hYD8Z7tGo72Pz0ueSRxAgrB5vk.roa (raw, json)
Hash identifier: RV8ZfbQLcBWDBRoo5Fny4WVb5lfbFXWB2gDWsze4FuY=
Subject key identifier: F2:16:03:F1:9E:ED:1A:8E:F6:3F:3D:2E:79:24:71:02:0A:C1:E6:F9
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BAE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/8hYD8Z7tGo72Pz0ueSRxAgrB5vk.roa
Signing time: Mon 03 Feb 2025 16:55:38 +0000
ROA not before: Mon 03 Feb 2025 16:55:38 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2990 (0xbae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 16:55:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F21603F19EED1A8EF63F3D2E792471020AC1E6F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:10:1a:a7:cc:1d:dc:4b:60:b5:8f:b4:48:
bc:bc:2e:23:de:c1:53:13:93:aa:cc:10:39:fa:9a:
09:a2:13:00:2d:18:c7:26:5b:03:c3:20:f2:8c:ea:
bf:e4:af:30:fe:52:ea:1d:59:5f:0f:82:5d:08:3c:
65:9a:4a:c0:c1:3d:99:22:de:0d:d5:e8:89:e7:4e:
19:fd:cd:47:2f:e1:9b:0b:7d:54:91:09:92:6b:5c:
fd:05:5e:66:18:6f:f6:92:7f:43:60:91:1b:66:f7:
6b:dd:c5:06:c7:71:f0:f5:f9:30:f9:13:a5:7c:bd:
96:4a:ca:dc:82:e9:fa:77:87:a3:b4:8b:71:ae:83:
e6:b5:14:42:e3:3f:4c:f4:90:0c:97:8f:38:74:b0:
f5:a4:2e:51:5e:9e:5f:16:6c:77:0d:67:be:ec:77:
d9:73:d2:d7:b8:97:1a:50:29:67:3d:9d:2c:c4:64:
0d:c1:9d:77:b7:9e:21:cf:36:b2:e9:37:00:da:4d:
c5:f4:47:18:a8:ca:e7:12:1e:b2:94:dc:80:38:8c:
3e:ef:91:14:5c:dd:9e:61:58:48:8a:a8:53:1a:24:
87:d0:15:db:c6:ed:37:18:d5:e1:45:39:1c:3e:81:
6e:a6:1c:84:e5:a5:be:85:a0:ed:2b:b5:88:dc:ce:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:16:03:F1:9E:ED:1A:8E:F6:3F:3D:2E:79:24:71:02:0A:C1:E6:F9
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/8hYD8Z7tGo72Pz0ueSRxAgrB5vk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
57:7f:90:76:37:99:b3:4f:20:d1:63:d2:e0:f5:cf:d4:b4:14:
47:32:f1:46:09:cf:05:a6:58:0e:53:91:b4:ca:0a:08:48:75:
02:53:55:dc:f4:39:88:2c:31:67:e8:c0:1f:1b:53:1f:67:c7:
c8:82:ef:d2:b1:e8:1a:e3:4a:4f:d7:9a:bd:ca:34:3d:72:c1:
c0:42:c0:13:47:e4:49:2b:1b:2b:48:d9:16:f7:42:b9:eb:2a:
af:0c:c9:aa:ef:bf:d4:30:9a:eb:4a:d5:30:7a:93:ca:00:ca:
62:de:fa:3b:11:b8:7a:d0:0b:b2:bd:ef:5b:3a:3c:29:13:11:
80:41:fd:7e:85:32:db:da:e1:37:db:7d:80:06:86:8d:49:f2:
da:45:c8:d6:68:10:8b:08:81:4d:62:25:24:b8:b4:3b:b6:6d:
47:e1:87:39:91:51:91:b8:2c:c0:8a:41:3f:44:a3:ee:99:8e:
e7:32:e8:99:c7:4a:5b:31:00:65:a6:38:e8:14:2b:45:00:63:
65:17:65:0a:aa:a4:20:c2:00:64:e4:d2:84:e9:92:51:9a:4a:
f2:c9:57:7f:08:5b:cd:57:d4:74:ce:98:b6:09:14:d5:fd:eb:
4a:03:83:d5:5a:7b:fc:56:7f:4b:6e:13:b2:7b:12:4a:70:85:
3d:1e:a4:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 20:58:20 2025 by rpki-client