Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/QNBtFcJGFJSsGZUpde_rOFJZSyY.roa
File: QNBtFcJGFJSsGZUpde_rOFJZSyY.roa (raw, json)
Hash identifier: rsSFbOQhns50GKi/dMZp4Op0bnDOTrazCJY0W3Z8Z1k=
Subject key identifier: 40:D0:6D:15:C2:46:14:94:AC:19:95:29:75:EF:EB:38:52:59:4B:26
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CB0
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/QNBtFcJGFJSsGZUpde_rOFJZSyY.roa
Signing time: Thu 06 Feb 2025 09:25:46 +0000
ROA not before: Thu 06 Feb 2025 09:25:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3248 (0xcb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 09:25:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=40D06D15C2461494AC19952975EFEB3852594B26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:7c:b4:ce:7a:9a:8d:ab:2b:d8:0b:96:14:
63:65:48:09:b7:ec:54:95:fe:f0:1c:db:89:18:a5:
ec:10:b0:90:31:b8:01:00:ea:d2:8b:c0:ed:bc:3c:
11:43:7d:52:e6:cd:52:f3:b5:1c:b3:71:6e:fb:3a:
38:88:ea:15:b5:df:16:ff:ee:68:fd:19:ae:74:8d:
57:f7:94:03:71:39:19:c0:73:ed:79:49:fb:50:f9:
c6:93:7d:dc:ef:e3:0e:9f:01:c9:ed:fe:1b:7f:88:
7a:0e:a2:7c:7d:95:c4:94:83:66:ea:b7:19:ac:00:
c8:a2:76:8c:46:f7:67:46:d1:94:63:04:8d:ad:fb:
f3:75:73:78:22:d9:f9:df:53:8c:1c:e4:ac:71:34:
f6:58:fb:e2:a7:48:85:a6:24:25:99:41:3c:12:b1:
87:6a:45:0e:dd:a7:10:c0:eb:e6:49:3c:d5:e6:d5:
e5:62:22:20:19:d2:db:04:f4:c7:81:d7:80:94:af:
84:c7:38:c9:fd:23:ca:81:56:fc:27:31:0a:c6:6e:
a9:9f:0d:d8:96:f2:cb:ac:23:0d:d1:00:3e:ab:ff:
3f:c2:80:13:70:2a:d8:9c:44:37:a4:5f:87:bd:79:
f3:47:63:4a:03:e8:4e:c0:8e:f0:c0:3b:62:96:d7:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D0:6D:15:C2:46:14:94:AC:19:95:29:75:EF:EB:38:52:59:4B:26
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/QNBtFcJGFJSsGZUpde_rOFJZSyY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:e9:14:95:73:d9:29:e9:26:b1:03:bb:2c:64:2b:eb:f9:ed:
99:f5:29:6d:0a:16:4d:83:ef:ea:62:db:12:d5:2a:a0:4c:ec:
0b:db:53:a6:96:f6:d7:f5:68:83:b1:b3:87:ed:d9:e1:1c:85:
ef:11:51:7e:8b:36:45:ca:f6:ca:db:dc:9e:9b:d2:0e:88:55:
f7:6e:58:e6:64:a6:e7:82:73:a4:cd:e4:35:7a:98:a5:a4:5c:
dc:c9:01:e2:28:02:d4:8f:d7:e5:59:32:33:66:cc:1e:61:fc:
a8:67:e6:13:cc:5a:0f:6f:d3:f5:da:92:6d:b6:61:97:cb:e1:
4d:d8:be:ea:93:88:42:e9:c0:19:46:05:ef:1b:2f:08:a5:b4:
66:f1:c5:de:3c:c0:b7:c2:5b:89:b7:72:19:1d:30:92:32:40:
0d:51:0a:be:60:cd:c0:5d:b3:58:d9:d6:8c:dd:3c:66:a8:6d:
53:54:71:1b:ad:8a:e9:58:30:45:69:cf:1b:fa:c1:1c:26:f9:
fa:a4:8b:7f:ca:b8:de:5a:89:f6:f4:22:18:89:94:f4:d9:39:
ec:0e:58:6c:e6:1a:da:9e:e8:c6:96:a3:03:bb:15:4f:49:8f:
07:b3:65:33:49:04:a4:60:82:6d:28:d7:d9:36:f3:fa:8a:2e:
81:1e:c2:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 19:42:17 2025 by rpki-client