Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/O-KM4PH9d-ewUcvZTjxHgPaP8QU.roa
File: O-KM4PH9d-ewUcvZTjxHgPaP8QU.roa (raw, json)
Hash identifier: GYl7bqZYB9FaV1QhoW49NOX5Vl/4zh/FBJ8gcBNq7dE=
Subject key identifier: 3B:E2:8C:E0:F1:FD:77:E7:B0:51:CB:D9:4E:3C:47:80:F6:8F:F1:05
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B7A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/O-KM4PH9d-ewUcvZTjxHgPaP8QU.roa
Signing time: Mon 03 Feb 2025 03:55:36 +0000
ROA not before: Mon 03 Feb 2025 03:55:36 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2938 (0xb7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 03:55:36 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3BE28CE0F1FD77E7B051CBD94E3C4780F68FF105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:21:60:c0:5e:ba:a1:f0:5b:c0:39:0f:e4:
b3:12:6a:44:56:98:53:2d:3b:a8:03:5b:d9:b9:e5:
4a:64:da:40:67:64:c6:fb:8a:27:bf:c7:ad:d6:4d:
75:d0:4d:04:6d:48:e4:1c:3e:be:3c:60:2d:25:00:
1e:7d:8d:ba:06:90:50:eb:8e:9e:bb:68:bc:5c:fb:
d4:b7:b2:cb:f9:93:79:27:ab:71:f0:69:f8:d9:1d:
ba:47:f6:e9:be:01:12:93:b5:e7:f0:c7:1b:a4:1c:
a2:a5:9c:5b:ee:1f:31:f8:99:f9:12:1f:5f:e9:e7:
64:40:94:94:b4:7e:44:a1:30:12:a9:d1:76:f1:97:
9c:4d:ca:64:3d:91:05:45:29:df:f0:62:eb:3f:01:
0c:bc:2a:5b:06:e7:c3:94:a2:61:c7:f1:5a:07:75:
2e:60:f6:d2:16:1f:a2:38:3f:44:8f:6b:9b:1a:96:
f8:35:2f:08:8b:03:8f:b0:68:ac:49:4c:84:c2:74:
72:e9:86:b7:de:2c:d7:e7:42:9b:36:08:87:a8:8c:
46:00:77:55:12:4b:c1:43:cf:6c:8a:58:b9:66:21:
41:86:e6:39:ab:7d:bc:af:fb:55:f8:17:19:22:e6:
21:ad:24:61:de:82:cd:9e:d9:f1:1b:d3:a9:e2:65:
e0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E2:8C:E0:F1:FD:77:E7:B0:51:CB:D9:4E:3C:47:80:F6:8F:F1:05
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/O-KM4PH9d-ewUcvZTjxHgPaP8QU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
16:ba:26:a1:c4:04:d4:46:d9:c8:89:b8:ec:a3:70:27:ee:3b:
81:51:66:bf:08:a2:2f:68:ee:c8:11:52:e5:9b:4d:03:c4:c0:
90:de:2d:64:b5:f5:fd:74:75:d3:67:9c:06:7c:ce:7c:00:05:
cb:cd:01:93:51:7d:92:22:f2:06:b0:61:82:5e:29:71:ea:db:
62:f4:27:51:7f:65:07:04:f3:d8:ad:b1:3f:5a:89:a5:df:2b:
dc:ad:94:7d:34:71:c6:eb:db:0b:1a:72:d1:b0:20:7b:f8:0c:
6f:6c:08:57:ca:e1:e1:09:e4:c7:e5:58:59:e6:78:71:b8:ac:
20:bc:86:5a:63:79:79:02:93:0e:a3:01:8a:5a:77:3a:5c:5e:
1d:1c:56:72:e2:d0:a8:28:e4:da:5a:ce:0a:a5:c9:fa:81:c3:
8f:24:b6:c5:37:a8:77:c9:ba:83:37:6e:ed:25:f5:47:31:db:
f6:af:1f:60:46:d3:4a:fc:c0:f4:a5:7a:88:94:c9:cc:51:64:
41:8b:33:ee:83:fe:0f:7d:a0:39:27:7d:f3:31:41:d4:04:3a:
ac:03:f8:90:c3:b6:7d:65:f2:28:a7:92:4b:bd:d5:7d:21:0c:
17:b8:16:67:85:f1:26:c6:ee:f3:bd:ac:fc:35:a6:69:d6:11:
57:09:37:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 13:38:36 2025 by rpki-client