Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Q8dgR7sB88Esvo-jiabGKa-jh04.roa
File: Q8dgR7sB88Esvo-jiabGKa-jh04.roa (raw, json)
Hash identifier: xyMPk0bFsZs0aEJ7FRfRO1C10NG0grF3zpNYD197Q40=
Subject key identifier: 43:C7:60:47:BB:01:F3:C1:2C:BE:8F:A3:89:A6:C6:29:AF:A3:87:4E
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B28
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Q8dgR7sB88Esvo-jiabGKa-jh04.roa
Signing time: Sun 02 Feb 2025 07:25:32 +0000
ROA not before: Sun 02 Feb 2025 07:25:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2856 (0xb28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 2 07:25:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=43C76047BB01F3C12CBE8FA389A6C629AFA3874E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:33:5f:ae:6a:96:95:49:8f:65:2e:95:da:
3a:e0:3e:cd:ae:a9:d9:aa:af:51:a8:b1:0b:5b:d5:
44:5f:4b:e0:45:e9:34:96:5d:d3:dd:17:e2:37:a2:
0e:ea:d8:5a:2c:0f:74:46:98:4a:a9:b0:2e:59:1c:
10:a7:5c:52:4c:cd:c4:11:a9:75:1c:d2:72:8f:f4:
39:bf:f1:28:fb:ca:c2:7d:c2:d0:e9:5a:d8:1e:86:
4b:53:6c:90:10:05:cb:7c:0c:2d:b4:bf:49:e8:a2:
ab:15:ed:ea:f9:2a:e6:e2:16:7c:a8:5a:19:aa:68:
19:8b:08:26:5a:92:10:d7:cf:42:4c:5d:4b:6d:4c:
f6:75:10:86:26:06:de:a5:a1:90:96:6d:97:f1:6d:
8c:e8:27:72:fa:70:1a:56:15:f9:ee:a1:ca:ca:44:
4e:b8:ba:b3:d9:4e:b2:d7:28:d3:88:bc:c6:7f:bf:
3d:93:ea:2d:33:d2:de:2c:6e:2d:22:32:eb:11:b0:
4f:6b:f1:e5:47:18:fe:4d:99:8f:0d:89:d8:a8:37:
b6:14:30:eb:ec:0f:b0:ab:dd:36:2c:0f:49:6d:e6:
03:93:6b:87:a8:5e:eb:0a:e3:6e:cd:26:82:87:b5:
b4:a8:58:90:43:82:70:e6:f5:c7:92:f0:5e:b3:81:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C7:60:47:BB:01:F3:C1:2C:BE:8F:A3:89:A6:C6:29:AF:A3:87:4E
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Q8dgR7sB88Esvo-jiabGKa-jh04.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:f0:b8:40:79:39:e9:5a:2a:30:0f:a4:6c:93:1e:72:e3:d8:
73:2c:3b:c3:19:b9:83:16:6d:c6:48:26:a0:b4:20:07:b5:ca:
ae:6c:ca:0a:34:c6:96:79:eb:4c:f6:f7:b9:16:4c:6a:77:15:
38:3f:ee:2e:2a:8c:ca:b6:77:d9:6b:d8:98:4d:35:c6:a9:4d:
a4:80:48:8c:3b:59:4e:ef:68:e1:b3:10:4e:77:99:77:cb:bf:
e8:27:9f:00:4b:87:33:d9:c5:f6:0d:da:b8:db:f5:37:80:28:
5a:5d:17:4b:5c:a8:0d:bd:d1:de:48:fb:c3:91:02:43:ed:53:
eb:be:40:9c:b0:76:a3:fb:db:5f:b8:a4:3a:3c:d2:1f:b2:e7:
86:aa:b4:2e:89:f0:fd:c7:c1:1a:ce:90:20:da:ef:ed:fe:97:
ba:74:eb:bc:cb:d3:e7:9e:29:91:33:d7:41:f2:6e:ed:b0:e9:
b3:cc:21:9b:83:e5:c1:40:12:20:64:0b:85:ac:64:49:61:c5:
a1:ab:8d:1f:06:65:bf:b2:01:b8:34:60:e9:17:09:ac:97:da:
ee:cd:d6:78:12:ee:51:dd:2b:f4:0f:b4:a3:12:70:3f:9a:ac:
8e:b7:d2:56:19:91:20:7d:92:ad:d1:92:06:53:c0:6a:e7:82:
36:99:f3:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 18:48:21 2025 by rpki-client