Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/QCLhw6miVcjMx7F3sh9KqFbMx5g.roa
File: QCLhw6miVcjMx7F3sh9KqFbMx5g.roa (raw, json)
Hash identifier: pDu56jFAFuANYPnNd1zBTcJZAFLHTlx052EQdR6JtlQ=
Subject key identifier: 40:22:E1:C3:A9:A2:55:C8:CC:C7:B1:77:B2:1F:4A:A8:56:CC:C7:98
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BF8
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/QCLhw6miVcjMx7F3sh9KqFbMx5g.roa
Signing time: Tue 04 Feb 2025 11:25:40 +0000
ROA not before: Tue 04 Feb 2025 11:25:40 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3064 (0xbf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 11:25:40 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4022E1C3A9A255C8CCC7B177B21F4AA856CCC798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:28:55:f8:bb:e6:b8:96:a7:4c:a1:0f:7d:1f:
78:1c:09:f6:67:2d:a5:2c:4b:b4:ce:69:a5:ed:db:
50:26:50:6e:3a:76:9e:00:da:dc:47:93:a5:05:03:
35:8d:f7:c1:40:90:8c:74:57:9a:24:71:34:80:be:
85:72:75:a2:eb:9d:53:bb:d7:91:ed:4c:d4:28:c2:
fd:45:ce:ba:1a:99:c7:77:3a:1d:7a:99:b3:7d:85:
36:04:d4:bc:d6:dd:16:11:56:5c:62:8a:c6:84:69:
22:f9:99:1d:1a:81:27:e3:8d:73:cb:27:b6:45:e9:
ba:9f:4c:80:ee:00:19:a9:3c:16:f9:36:36:9c:ea:
34:a6:23:58:38:79:b4:a7:af:95:6c:e6:4a:75:1d:
9b:42:21:4e:1e:5e:f5:35:23:5d:34:de:df:67:e4:
27:82:78:ba:6f:e9:a4:12:11:36:74:4a:b5:0c:4c:
ee:91:2f:4c:df:e1:36:8e:f6:c8:0f:01:70:5f:c4:
a9:76:6f:b0:b5:5a:4a:70:ca:9f:4c:b4:37:a2:ee:
e8:e5:e0:b8:6f:ed:61:46:52:a9:8f:47:11:0b:ac:
d0:87:95:12:b8:de:91:60:ec:1a:6a:0f:fb:a3:ae:
14:cd:d6:c4:4a:14:bd:64:23:b6:a7:21:b2:d1:ff:
65:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:22:E1:C3:A9:A2:55:C8:CC:C7:B1:77:B2:1F:4A:A8:56:CC:C7:98
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/QCLhw6miVcjMx7F3sh9KqFbMx5g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
80:b6:a5:1d:8c:45:f1:7b:3a:3c:81:f3:55:df:ac:c2:01:b9:
4c:8b:5d:9e:2a:4e:ec:67:bf:f0:25:19:d3:ec:bf:d0:9c:ce:
da:dd:32:a4:a5:d9:a7:2a:fa:81:a2:6d:4e:2b:e0:18:8c:c9:
e6:05:3f:b2:b3:d5:82:42:00:17:89:ea:3e:64:a8:69:40:0d:
82:d9:58:39:e6:fc:6f:dc:f1:cc:cd:08:42:28:45:7f:56:19:
6a:91:7e:ca:68:9e:ec:79:00:29:47:90:da:10:81:db:67:0a:
0b:ea:e1:5a:e7:07:d7:89:62:dc:03:c6:f1:10:00:64:5d:9c:
c3:1a:74:62:79:5d:dc:39:3b:4c:79:9f:50:21:54:3b:ce:3e:
72:0d:d4:76:36:c9:6c:f8:fe:3d:55:6b:79:98:ed:d5:33:01:
01:94:e4:71:b0:81:a8:ab:34:20:d7:bb:01:3a:e3:80:5b:3a:
37:ff:8d:6e:65:ae:2c:c9:b2:21:0c:ba:db:dc:b2:a6:2e:bc:
ad:89:e0:c8:f3:b5:43:3b:85:45:7b:f1:35:60:b7:1d:99:8f:
73:4a:c0:fd:b3:39:b4:af:cb:19:d3:22:86:fe:51:43:c9:64:
f4:cd:04:5b:e7:10:da:52:f6:88:66:a2:03:48:63:29:0f:32:
f7:19:2d:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 23:03:02 2025 by rpki-client