Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Ivu5jmetdb6brHFv-lkp4X7OXQQ.roa
File: Ivu5jmetdb6brHFv-lkp4X7OXQQ.roa (raw, json)
Hash identifier: QUAX1O4Dih0ETy2gFuVkeK/pZdKB0cYUgZv3O7mvTwI=
Subject key identifier: 22:FB:B9:8E:67:AD:75:BE:9B:AC:71:6F:FA:59:29:E1:7E:CE:5D:04
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B6A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Ivu5jmetdb6brHFv-lkp4X7OXQQ.roa
Signing time: Sun 02 Feb 2025 23:55:37 +0000
ROA not before: Sun 02 Feb 2025 23:55:37 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2922 (0xb6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 2 23:55:37 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=22FBB98E67AD75BE9BAC716FFA5929E17ECE5D04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:77:a1:78:41:03:fa:2a:19:bb:10:5a:4c:e3:
1f:0d:3e:42:0a:32:a2:3e:0b:7a:5c:cd:ba:e7:86:
20:61:78:6b:e5:c2:91:58:dd:fa:2e:5c:44:db:72:
02:a4:0f:f7:bd:6f:9b:48:84:3d:52:0b:08:0d:35:
ea:e9:40:2e:cc:fa:c9:93:69:9c:ff:90:58:00:b0:
29:ac:b4:15:f9:fc:a3:f4:a9:30:96:23:a7:e0:6f:
47:92:07:4a:88:a5:40:f2:f6:34:a9:07:56:cf:7d:
78:de:b3:66:eb:7f:e9:fd:f9:d1:eb:9d:ad:36:4c:
aa:f4:ea:ab:5d:7f:cb:58:41:a0:a3:ca:ca:a9:75:
47:ad:52:44:0f:d7:fe:f2:75:d7:3e:ad:0e:9e:f1:
6c:1e:10:4b:41:e3:7c:f5:0e:8f:04:00:63:c9:50:
15:4b:3d:a6:88:5c:2f:25:a3:3f:8f:cb:e3:b1:95:
f2:76:c9:17:0e:a2:1d:8d:8b:0a:e0:df:48:50:48:
7a:9c:07:39:6e:42:1d:72:fd:87:46:65:1a:47:6c:
13:8d:3b:bc:cd:84:5c:b5:5e:9e:5f:1b:b8:20:7c:
36:9a:3c:19:b9:2b:e6:90:24:ac:46:8a:50:41:cb:
ca:72:1b:ba:d0:f1:dd:41:5b:16:b0:3d:3a:03:37:
d7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FB:B9:8E:67:AD:75:BE:9B:AC:71:6F:FA:59:29:E1:7E:CE:5D:04
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Ivu5jmetdb6brHFv-lkp4X7OXQQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:c4:5f:cf:3e:2a:5f:0c:39:72:70:c6:dd:ff:f9:87:79:50:
f8:0e:3c:82:af:8b:e0:89:e8:07:a6:d1:2a:19:d8:64:d1:c3:
f8:92:90:ac:6d:cf:2d:cd:b2:8a:2b:a1:20:46:1a:a1:dc:88:
71:11:cd:2d:29:ae:43:9c:e3:45:fb:a2:81:04:38:01:23:a9:
04:41:c7:d6:ca:8a:83:50:0d:0b:98:57:d7:2c:35:88:c7:7d:
75:be:d6:66:bf:db:fd:c2:4d:76:37:6a:70:c9:da:6b:37:78:
55:bc:58:1b:60:c2:66:ec:ee:66:90:fe:11:76:e2:37:71:81:
b0:85:4b:61:6a:62:a0:c1:1c:1c:19:27:b7:13:b3:44:6f:d7:
d9:5e:67:c7:e5:d1:7d:e1:2a:7d:a3:b7:d0:d7:31:41:d6:5f:
d6:23:6f:0a:22:65:80:d0:d4:b4:51:84:b5:ce:a4:14:8c:b3:
88:ad:cf:c2:0a:a0:88:7c:6c:d8:7f:16:3d:7a:2f:77:00:b5:
10:6f:10:a1:28:9d:76:36:93:25:24:3c:f5:23:af:77:fd:03:
ed:c4:28:47:42:ce:e3:63:42:16:b8:fb:cc:d6:3f:ff:8a:cf:
90:fc:c8:11:80:96:d5:e1:26:8f:14:9a:82:af:60:7e:a6:ec:
a8:d7:e6:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 02:02:59 2025 by rpki-client