Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/B_7O1D0zO9-7pIh16XCigPuoUcc.roa
File: B_7O1D0zO9-7pIh16XCigPuoUcc.roa (raw, json)
Hash identifier: JSF9LDeRkxGBLvIZlE683Wk1dGNWlvtMqscoM/GpxZo=
Subject key identifier: 07:FE:CE:D4:3D:33:3B:DF:BB:A4:88:75:E9:70:A2:80:FB:A8:51:C7
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A72
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/B_7O1D0zO9-7pIh16XCigPuoUcc.roa
Signing time: Fri 31 Jan 2025 09:55:31 +0000
ROA not before: Fri 31 Jan 2025 09:55:31 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2674 (0xa72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 31 09:55:31 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=07FECED43D333BDFBBA48875E970A280FBA851C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:6b:e4:12:70:e6:4c:c2:b4:0f:d3:1e:c6:
f1:e0:31:0c:a2:a4:30:4d:7d:cf:32:bb:c9:9a:29:
45:e4:91:dc:ee:a4:62:9f:6a:ad:3f:48:5c:44:56:
61:d0:35:77:e5:66:98:05:61:46:ef:d7:b4:a6:30:
d9:01:bb:d2:ff:6c:ee:74:6d:1f:ea:12:06:63:e7:
39:3f:dc:9a:d4:0e:82:2a:a2:dd:ed:1e:06:d7:fb:
da:dd:3c:f2:69:38:17:52:79:4b:67:ce:23:1c:be:
8c:2c:0e:75:cd:d1:2e:e1:f9:57:00:0a:ea:be:2a:
a6:3f:7b:af:f3:52:fa:0d:67:49:cd:76:3b:b1:58:
0d:b9:b2:aa:ab:37:bb:39:78:0f:11:69:56:a1:3b:
7c:92:08:94:35:d7:68:6d:3a:d3:54:1a:dd:4e:bd:
3f:70:07:d8:83:f2:80:c2:a8:2c:ce:a3:df:21:84:
f4:c7:33:be:62:fc:9f:60:84:8d:51:4d:d2:64:2a:
fd:1b:c2:b7:07:39:63:8e:f8:a5:66:df:ee:f4:9e:
87:9e:e1:3b:f3:c4:b3:e2:a9:f7:e3:f7:62:b0:fc:
33:fe:74:17:29:25:7e:cc:0a:ef:c1:7c:2f:af:f5:
91:32:18:3f:cf:3e:2a:c9:49:43:77:af:ef:e2:ee:
72:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FE:CE:D4:3D:33:3B:DF:BB:A4:88:75:E9:70:A2:80:FB:A8:51:C7
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/B_7O1D0zO9-7pIh16XCigPuoUcc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:e7:9d:5b:f1:f0:d5:ef:50:87:7f:f0:69:73:9a:59:bf:97:
3e:91:d0:59:49:85:93:7d:71:71:e0:55:10:11:86:2b:78:99:
63:d3:5e:eb:2e:ea:91:22:15:9e:a2:fb:6c:a2:6e:dc:6b:68:
4f:ef:93:15:1c:52:f7:be:81:15:7b:d1:0e:b5:cd:0d:b6:13:
f9:a1:86:e1:ac:62:81:7b:13:83:23:61:ab:38:2a:6e:d8:ba:
f0:2a:56:0b:ce:11:73:b4:62:e3:65:46:47:16:d2:b1:bc:cc:
21:09:9d:ed:3a:ee:c9:24:3d:bc:d5:cf:80:25:eb:c6:11:9f:
86:ce:34:aa:d5:57:28:55:ab:0f:07:8a:f5:e1:47:65:19:1b:
bd:05:36:4c:12:5f:92:66:82:f2:a7:18:77:0a:b6:2c:a5:34:
00:d9:84:ee:88:7a:1a:0f:45:c3:dc:42:2e:10:66:8e:dd:14:
63:7d:5d:94:6d:91:e6:c5:a1:ec:27:e5:c9:77:8e:5c:5b:66:
a3:f7:f2:9f:e8:31:19:7a:a8:77:04:03:f6:23:9f:1e:91:39:
a1:a8:6d:64:fc:85:ed:15:0d:39:95:5a:3e:06:9e:e5:dd:9b:
03:3e:42:75:c3:86:f0:8f:15:44:a8:cc:8c:c3:9c:cc:af:14:
dc:7a:61:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 04:53:57 2025 by rpki-client