Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/I97Vvzde6QUfXt8xLrcl0QgL7AA.roa
File: I97Vvzde6QUfXt8xLrcl0QgL7AA.roa (raw, json)
Hash identifier: LDG3JZ5s5vS+Es/UBD1twoYEtOIyEo0SNmtpv2arW8g=
Subject key identifier: 23:DE:D5:BF:37:5E:E9:05:1F:5E:DF:31:2E:B7:25:D1:08:0B:EC:00
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C8A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/I97Vvzde6QUfXt8xLrcl0QgL7AA.roa
Signing time: Wed 05 Feb 2025 23:55:44 +0000
ROA not before: Wed 05 Feb 2025 23:55:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3210 (0xc8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 23:55:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=23DED5BF375EE9051F5EDF312EB725D1080BEC00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:6d:d3:a6:9d:1e:74:7a:5e:6e:50:93:07:
a6:72:64:f3:ae:9b:e7:33:27:78:ba:ac:93:62:4e:
73:43:5a:8b:e2:a9:e5:af:81:89:39:25:0f:ba:6b:
c2:70:a4:e1:e2:44:53:aa:54:6e:5c:aa:33:40:ad:
c6:e9:27:88:c5:e0:f8:cf:ed:37:7b:c6:6f:06:35:
6e:7d:d7:a9:f7:9d:72:e0:d0:aa:03:b0:5e:88:a4:
05:f6:1a:f0:8d:df:3e:87:52:f6:5a:9c:62:04:6d:
18:12:80:51:b9:a7:cf:fa:5e:0f:4a:7c:96:5a:f7:
73:f4:e3:3a:66:74:99:64:8a:03:ad:9e:7d:38:86:
d8:5a:94:b6:31:ab:0f:3b:d0:b2:43:ee:ab:3a:b8:
41:59:b7:0d:6b:1b:94:07:e2:88:0c:46:c7:0a:c1:
6c:44:7d:30:0d:96:15:b0:cd:5c:19:aa:39:81:64:
12:6a:50:d3:cf:7b:58:e4:97:2e:c5:ad:2e:f1:50:
4e:9e:26:69:31:c4:80:c1:0d:5a:77:9c:e1:90:aa:
f8:cc:69:54:e3:2d:c5:15:23:8a:76:65:e7:4a:d7:
3c:d5:2d:f5:84:bf:0e:69:af:e0:dc:f5:30:74:1e:
0d:80:cc:fa:5c:e8:62:57:28:e3:31:ba:15:39:f6:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DE:D5:BF:37:5E:E9:05:1F:5E:DF:31:2E:B7:25:D1:08:0B:EC:00
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/I97Vvzde6QUfXt8xLrcl0QgL7AA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:3a:f5:5f:fa:5c:f4:89:ce:91:84:e8:71:8e:29:bf:39:ab:
23:49:e7:90:71:89:d4:65:1e:ed:08:7e:36:04:26:16:e9:8c:
2e:16:8e:eb:aa:72:5b:a5:fd:7a:47:58:2c:19:c5:ea:b1:7d:
a3:70:1f:51:e8:01:02:05:ca:d7:f5:e1:7b:ae:2b:6d:19:23:
37:d7:a4:77:40:eb:49:3a:56:92:14:87:d7:6e:13:57:b9:27:
68:68:2c:09:65:9f:ca:ff:18:b1:de:99:c5:64:d2:50:12:19:
18:b6:3a:7a:a9:9f:d7:f6:aa:6d:d6:06:0d:7a:d7:f6:f0:59:
ce:a6:7b:ac:35:ad:12:3a:e9:a4:41:29:a9:35:e1:1d:ab:ae:
41:55:9d:7b:37:4c:06:ed:6a:7a:a9:70:9c:e1:b4:ed:54:51:
15:89:ae:2f:eb:17:c0:36:db:cd:12:60:f3:4b:90:7a:e1:64:
4a:8d:4f:e2:1d:42:32:74:f5:4f:20:dd:c4:9d:b8:22:f3:9d:
4d:b2:48:57:07:81:27:5b:df:ba:8d:82:98:53:d5:27:a4:45:
bd:a2:67:df:7b:fc:c6:85:bd:61:02:86:16:36:2f:1c:65:a8:
fc:67:fc:d7:4b:3c:df:a8:d1:ae:32:38:b4:ee:da:87:04:42:
b2:90:85:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 19 03:55:40 2025 by rpki-client