Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/FhYkAdYVobpz2vyDY-gjg1HHEPQ.roa
File: FhYkAdYVobpz2vyDY-gjg1HHEPQ.roa (raw, json)
Hash identifier: ffDYkT5ubR09NnY5lkbJXgdKxkDLRkCvZDVyZeLgWus=
Subject key identifier: 16:16:24:01:D6:15:A1:BA:73:DA:FC:83:63:E8:23:83:51:C7:10:F4
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 06B2
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/FhYkAdYVobpz2vyDY-gjg1HHEPQ.roa
Signing time: Tue 21 Jan 2025 09:54:56 +0000
ROA not before: Tue 21 Jan 2025 09:54:56 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1714 (0x6b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 21 09:54:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=16162401D615A1BA73DAFC8363E8238351C710F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b4:b1:89:42:9b:bb:52:ff:56:f7:49:7d:43:
43:db:c0:7a:e9:e9:3b:13:31:38:9e:6b:7f:9f:ee:
ca:a8:8c:db:13:d0:4b:ce:95:23:17:1e:95:cf:5d:
14:a9:60:8f:bb:b4:86:b8:62:34:97:a4:80:39:56:
21:da:d3:7d:f1:ac:c2:7e:a7:70:93:ca:bc:f2:75:
e8:f2:df:1f:6e:93:03:06:37:c5:79:ff:02:bc:7e:
dd:9a:1e:65:76:cd:01:a0:45:80:30:d1:1f:e5:95:
e5:7c:43:20:2a:70:8a:08:5d:f9:67:3e:bb:ce:08:
06:86:bc:24:e6:65:a2:7a:97:1f:bb:9e:2e:d8:74:
26:59:0f:da:a5:50:79:d7:13:92:cc:f2:fc:b4:16:
08:2b:9d:33:f1:26:86:6e:bb:91:9e:47:d9:3e:f3:
66:1b:95:d7:4d:f8:27:3c:38:c3:1a:f6:f7:e4:51:
2b:e0:ec:5f:fa:d3:ac:8c:d2:f1:cc:1c:ed:b1:7a:
73:f8:38:d0:8b:9e:30:ad:85:13:14:57:d8:f5:88:
bc:12:52:35:5c:e6:e1:08:94:43:ed:84:e3:bc:d4:
98:41:eb:6c:4a:02:51:58:13:90:bb:9b:a7:d3:11:
76:32:54:e5:3e:2e:ad:a8:26:2a:0d:ba:8b:2c:14:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:16:24:01:D6:15:A1:BA:73:DA:FC:83:63:E8:23:83:51:C7:10:F4
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/FhYkAdYVobpz2vyDY-gjg1HHEPQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:5a:8c:b3:91:14:9f:2a:45:9b:e9:e5:c8:d3:c1:59:b1:61:
92:d9:8d:c1:cf:d4:55:9a:0d:3d:6f:80:e1:9d:65:64:f8:00:
4a:82:e4:3a:6c:e8:55:fa:ad:d0:30:02:bd:d2:90:df:be:96:
0c:e5:ab:31:f7:28:96:74:74:27:ff:ed:05:18:7b:81:39:7b:
19:a4:0a:9a:12:a4:9d:26:16:c0:a1:1a:a2:f9:6c:38:49:39:
c2:15:9c:0f:45:88:cd:73:ed:89:de:ed:17:4f:53:e4:37:37:
1f:86:33:6e:41:d9:c0:bc:aa:47:dd:c9:40:0a:5b:33:ee:ad:
a2:39:42:79:33:3a:67:ec:20:b7:50:71:22:00:48:3a:48:2d:
b7:34:b8:73:02:1c:13:e2:f7:48:59:42:0a:71:90:1d:2e:32:
6d:89:7a:6d:77:2e:4a:de:c0:db:05:26:17:16:1c:bb:ee:92:
24:09:4b:f3:f6:8b:a8:75:58:81:11:b0:0e:96:16:20:1d:29:
39:2f:8e:fe:0b:63:e6:16:7c:be:c8:cc:8f:2c:56:ab:ad:62:
6e:07:3d:a1:39:66:c9:36:ee:4c:f1:02:1d:d7:5d:8a:f5:ec:
be:e9:fd:64:59:8a:1d:86:ac:06:3d:e7:68:65:1b:44:35:44:
c3:22:d9:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 03:05:12 2025 by rpki-client