Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/LxCD7c8IISCgJ_f_d8zQWe4k84E.roa
File: LxCD7c8IISCgJ_f_d8zQWe4k84E.roa (raw, json)
Hash identifier: JjU4DMMVfUgMK0hKqUgTnnfBTILoPF8b7EdY6itiYWg=
Subject key identifier: 2F:10:83:ED:CF:08:21:20:A0:27:F7:FF:77:CC:D0:59:EE:24:F3:81
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 06C2
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/LxCD7c8IISCgJ_f_d8zQWe4k84E.roa
Signing time: Tue 21 Jan 2025 13:56:05 +0000
ROA not before: Tue 21 Jan 2025 13:56:05 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1730 (0x6c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 21 13:56:05 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2F1083EDCF082120A027F7FF77CCD059EE24F381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:5b:21:2c:1a:ca:6b:73:6b:de:d0:37:13:
b4:5a:4b:5c:6c:74:3e:1c:47:73:0c:99:5f:86:b6:
d7:15:8a:27:d1:83:12:e5:1c:1c:fb:bb:f4:31:a0:
f6:6d:1b:2d:6c:e1:6b:a3:9e:4e:7b:73:62:bb:b4:
9d:c3:35:88:16:62:1b:25:44:47:5f:33:00:70:f5:
83:58:8a:2b:6e:a5:c7:e1:7f:e9:5b:d3:95:60:1f:
38:b4:d6:ee:89:9e:00:54:31:39:b1:84:f5:e8:12:
b3:57:41:b7:0b:f4:a8:f9:d0:be:35:2d:e3:3a:17:
05:8b:a4:ca:15:19:38:f3:bb:90:95:89:5b:c9:d2:
14:a1:b8:78:c5:f1:66:53:33:4b:fd:ec:a2:fa:ec:
b3:eb:a2:be:9b:28:c6:60:dd:79:0a:85:6d:ce:8f:
37:cb:32:79:2f:e1:0b:7e:f5:0a:5c:a9:5a:dc:41:
22:84:6e:da:94:5a:66:06:b2:4b:32:3b:0f:8f:5b:
06:13:95:5b:80:da:ae:b2:e6:d4:e4:f0:df:a9:37:
1a:ec:12:78:85:0a:66:bc:4f:66:e0:29:1b:91:b1:
63:07:ef:67:8d:65:36:f2:7a:bd:c5:be:0e:00:1a:
48:75:47:2c:ed:0f:ea:07:b6:4c:68:03:4b:43:fc:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:10:83:ED:CF:08:21:20:A0:27:F7:FF:77:CC:D0:59:EE:24:F3:81
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/LxCD7c8IISCgJ_f_d8zQWe4k84E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
34:00:16:f5:f6:cb:5e:aa:e6:cd:92:fa:d3:7d:45:68:91:c1:
37:80:9a:fd:63:4a:93:24:c0:ae:d1:a1:9e:e7:ff:a4:d3:26:
6c:77:2d:8a:30:62:19:b3:3a:35:00:56:00:d7:74:c1:0f:8b:
7a:9a:b1:45:d3:00:93:9e:91:9e:c3:74:0c:09:c8:a7:a0:54:
44:5e:0f:c8:34:4f:cb:3c:01:3d:bc:b6:dd:73:19:71:9e:f2:
2c:9f:f5:04:14:24:4e:ce:12:1c:ec:d7:20:61:03:1a:3f:8f:
ab:52:17:4a:b1:62:62:f4:52:47:b4:af:e5:17:96:2b:bc:74:
79:34:89:f2:13:ee:ed:c0:26:99:33:22:08:e1:ae:6d:15:db:
0b:07:9a:1b:77:a9:0c:ff:cd:69:f4:a1:ea:c0:d7:49:4d:f9:
1b:5b:f3:81:c2:eb:ef:e4:ee:1c:2d:e1:71:99:28:e1:30:74:
48:09:35:73:65:e7:07:2b:25:e1:19:d6:d5:7b:2b:57:6e:f0:
aa:dd:33:53:90:00:2f:7f:b3:3b:f9:18:32:5f:ee:ae:b6:9f:
8e:46:5a:04:cd:bf:8d:72:fd:c6:4b:0a:9c:88:74:be:2e:99:
d5:6f:97:96:4e:7d:ab:ce:de:9c:28:a2:85:f3:c2:48:d6:1f:
81:f7:71:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 10:48:19 2025 by rpki-client