Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/A3E-XFVEuOG2wOENVb_EF4-ouIg.roa
File: A3E-XFVEuOG2wOENVb_EF4-ouIg.roa (raw, json)
Hash identifier: R4EsCc/MvYBm7Qi7OB/zx2laItyNM9OA4XqWk+978sI=
Subject key identifier: 03:71:3E:5C:55:44:B8:E1:B6:C0:E1:0D:55:BF:C4:17:8F:A8:B8:88
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A58
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/A3E-XFVEuOG2wOENVb_EF4-ouIg.roa
Signing time: Fri 31 Jan 2025 03:25:30 +0000
ROA not before: Fri 31 Jan 2025 03:25:30 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2648 (0xa58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 31 03:25:30 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=03713E5C5544B8E1B6C0E10D55BFC4178FA8B888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:22:7a:11:6c:1e:48:c2:7f:43:2c:90:0d:02:
42:cc:90:37:f1:f6:e2:9a:5c:60:df:c4:55:70:24:
fa:32:3f:c4:99:2e:19:ce:64:18:7d:77:78:ed:c8:
a9:b4:40:d5:c2:91:2b:21:6d:81:74:df:35:27:01:
92:9e:57:a6:a5:10:fe:5a:b7:ad:ec:49:ae:10:ae:
9a:9a:41:aa:c4:cc:09:99:6f:9e:36:45:b1:24:94:
fe:01:1a:2a:42:c6:38:2a:eb:27:13:22:2d:c6:3e:
26:61:1b:7f:e9:43:ab:87:36:03:c6:c7:6c:e5:d1:
fd:85:08:ee:bd:a5:93:c3:10:f0:92:f9:ea:42:c1:
cf:05:3d:0e:e9:1e:cd:26:bf:85:6a:35:ef:80:f3:
a0:82:30:05:57:c7:29:b1:2f:db:27:91:fe:df:17:
c9:22:51:be:67:b7:f9:f6:39:5a:b7:ba:4c:9b:c1:
18:36:1b:52:67:f3:2f:56:f6:86:0d:71:7b:5b:f2:
1e:03:08:ae:b4:fd:ca:45:9c:5a:5a:c0:e4:c4:72:
0c:6a:cc:f4:82:57:7c:26:dc:8b:51:5d:18:44:96:
96:ca:8f:97:93:45:a6:4e:35:04:b1:9c:c3:17:51:
61:3a:78:0d:ff:b6:93:47:ab:e7:5d:e8:9c:01:e2:
3e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:71:3E:5C:55:44:B8:E1:B6:C0:E1:0D:55:BF:C4:17:8F:A8:B8:88
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/A3E-XFVEuOG2wOENVb_EF4-ouIg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:51:2e:cd:e4:2a:08:e8:af:5c:f4:05:10:37:61:0f:13:42:
20:6f:28:f6:bb:b7:12:92:fb:b0:28:f2:de:ea:17:2c:44:9a:
35:d9:ec:01:34:1f:60:0b:56:eb:60:fc:e5:98:57:d4:6e:97:
6f:c4:c6:8f:01:86:51:f5:d5:20:1c:21:35:ef:31:2e:3a:92:
9b:c2:97:c7:69:a8:9d:0c:0e:e0:59:c6:c2:2c:64:9b:9c:7d:
cb:60:32:fa:1c:6e:4b:02:e1:98:23:e2:9f:1c:98:87:53:59:
20:17:cd:87:fd:3d:9a:76:e5:2b:5e:90:ec:fe:a2:08:f8:5f:
ee:2d:3a:b4:a1:ea:99:21:61:7f:13:37:65:21:d3:40:ad:10:
16:e3:99:eb:05:88:0e:6c:36:2b:ac:fe:96:31:85:0d:ae:8e:
fd:5d:79:0b:3a:e8:b6:58:00:61:26:fd:68:03:93:ee:96:91:
a0:37:ee:4a:65:5f:5a:97:23:a6:c8:b2:2d:9f:a8:0c:c7:2d:
ea:39:40:94:9f:ba:b5:58:ae:dd:04:3f:b9:dc:59:0b:eb:5a:
d1:26:7f:3d:57:9d:bf:05:be:ec:20:5b:64:35:81:40:8c:43:
ee:a9:72:5a:b9:15:aa:20:81:f6:cf:42:41:d2:c5:2d:66:6a:
40:99:c5:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 22:38:08 2025 by rpki-client