Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/KQesliXk4-O2UZYpeweBfbqLpbM.roa
File: KQesliXk4-O2UZYpeweBfbqLpbM.roa (raw, json)
Hash identifier: mywwFidfdHbeKgcwXPwgo4O19PfkcQkic10ChEj339o=
Subject key identifier: 29:07:AC:96:25:E4:E3:E3:B6:51:96:29:7B:07:81:7D:BA:8B:A5:B3
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0620
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/KQesliXk4-O2UZYpeweBfbqLpbM.roa
Signing time: Sun 19 Jan 2025 21:25:24 +0000
ROA not before: Sun 19 Jan 2025 21:25:24 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1568 (0x620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 21:25:24 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2907AC9625E4E3E3B65196297B07817DBA8BA5B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:5b:5c:4f:bc:8e:26:7d:b0:6c:1a:c2:80:
5b:b9:81:3c:d3:5b:54:71:2f:aa:e0:5d:3a:fc:bc:
d6:a1:1d:8d:eb:84:db:74:04:12:2f:59:73:6c:f7:
ad:ce:35:15:4b:52:17:79:dc:fe:a8:d3:14:f5:7f:
48:a4:d8:b0:1e:32:b6:95:32:43:ae:da:7a:b9:b8:
cf:87:5f:a1:f1:91:6e:4e:53:3b:31:47:aa:57:1a:
34:63:0e:d2:9b:e9:02:00:68:b1:83:31:ed:a4:d7:
cc:16:b2:ca:1f:e3:a1:17:01:32:87:ff:73:8b:f6:
94:04:43:fb:95:a2:7d:a2:ad:c1:e7:ce:e0:4a:e1:
98:b6:9b:63:a2:88:88:80:19:f1:a9:43:51:48:36:
34:d4:84:9a:34:fa:34:99:2e:ed:c8:ec:3e:d2:f0:
53:f7:47:a0:3d:f0:d4:8f:ea:18:e1:f9:f3:58:b3:
97:59:98:c6:19:d1:a8:92:fb:05:69:1b:4c:12:bd:
53:9e:0a:da:18:6e:d9:fc:47:49:0b:1e:ce:c7:1f:
79:5a:1d:4e:36:22:75:04:f6:18:dd:df:6e:08:57:
8c:50:2b:4e:31:19:d1:0c:c4:29:de:12:8a:df:7a:
2c:c1:b5:36:b2:a1:c3:15:16:ce:bf:bf:6c:84:1e:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:07:AC:96:25:E4:E3:E3:B6:51:96:29:7B:07:81:7D:BA:8B:A5:B3
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/KQesliXk4-O2UZYpeweBfbqLpbM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
94:e5:7f:98:f5:a5:b9:e5:ee:97:3d:7b:71:ee:16:8d:b4:a2:
60:1d:54:c5:61:ce:92:0a:88:dc:9a:ca:53:de:7f:98:4f:35:
ca:3b:03:c0:66:71:fd:84:e8:3b:ba:97:b8:4f:74:d0:5f:47:
b1:ef:9a:9c:7a:50:86:13:41:3a:5e:25:a3:10:25:49:36:70:
28:ca:3c:59:e5:76:ef:34:ba:d2:d7:75:86:50:b5:6d:b8:c4:
e4:65:c3:92:52:2d:7a:6b:14:44:a7:27:ae:fd:52:db:17:00:
2a:7a:6e:d0:ff:f9:e9:62:16:65:cb:80:62:80:21:33:29:85:
ec:77:18:6b:e7:5e:76:3f:43:d5:d3:b0:cf:25:bf:88:1b:46:
f2:10:c1:2a:ae:09:d0:bc:3e:0d:04:cb:8b:72:80:1c:bf:af:
10:c9:8a:94:84:cd:38:b0:60:91:b1:38:b3:ac:1f:0e:7f:5a:
2c:d1:0d:1b:26:5d:28:3f:a7:b2:80:f7:33:ac:a0:b8:96:42:
9e:23:c2:e0:4a:74:9d:f5:ad:dd:e6:86:ba:b6:f9:d2:da:da:
7e:a8:8d:64:4c:41:0e:4d:66:44:38:b6:5f:b9:a7:2e:6e:08:
2f:03:96:e4:53:21:0a:9e:5f:96:61:7d:11:24:27:88:31:fb:
b4:cc:31:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 02:09:25 2025 by rpki-client