Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/TyN_XckD1I9zj3VmtQ8QOOhzBy4.roa
File: TyN_XckD1I9zj3VmtQ8QOOhzBy4.roa (raw, json)
Hash identifier: Z7Mtwe8ExLNqykiQspiLRrqReOI8UG874gb8NbEUXXk=
Subject key identifier: 4F:23:7F:5D:C9:03:D4:8F:73:8F:75:66:B5:0F:10:38:E8:73:07:2E
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C70
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/TyN_XckD1I9zj3VmtQ8QOOhzBy4.roa
Signing time: Wed 05 Feb 2025 17:25:44 +0000
ROA not before: Wed 05 Feb 2025 17:25:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3184 (0xc70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 17:25:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4F237F5DC903D48F738F7566B50F1038E873072E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:fb:39:20:95:85:7b:df:35:91:51:a4:a2:
72:05:8b:06:ab:55:84:f6:5b:bd:24:69:5e:f9:21:
eb:aa:7f:eb:36:1e:92:5d:6b:9d:a0:de:e8:59:ec:
b9:a7:d9:a6:66:91:86:b3:94:2f:4b:9a:fe:c4:d8:
ca:19:21:67:f7:36:a4:5d:2c:0f:82:40:ab:cc:45:
06:f0:8f:ec:4c:c5:f4:7e:27:c7:c6:68:38:4c:fe:
61:57:fa:96:8d:0f:0d:5e:07:1d:1f:64:73:08:b3:
49:b2:e9:69:c2:59:87:ac:fe:db:d6:60:3c:c7:1c:
58:8e:ed:3b:df:5c:02:42:e5:bc:a0:d2:5f:a6:37:
f7:ca:8f:71:10:24:8e:20:a8:c7:8b:6a:fa:b8:57:
a1:4e:c1:ba:f1:ac:b7:5f:f7:3e:a8:2a:12:01:33:
c2:47:e0:a4:be:62:1c:ba:a8:fc:cb:6a:27:89:3c:
cc:1e:64:dc:6f:9d:0b:0d:7e:9d:34:ab:88:85:35:
9a:9d:e6:1d:aa:45:e0:12:ed:44:c6:70:79:0e:cc:
39:24:d1:d0:7d:76:70:f6:a9:e1:5b:71:ca:08:18:
29:ff:15:8e:68:43:41:40:e2:2e:ae:81:15:03:66:
05:cf:bf:5b:26:ec:e3:44:97:ad:04:eb:ae:d1:08:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:23:7F:5D:C9:03:D4:8F:73:8F:75:66:B5:0F:10:38:E8:73:07:2E
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/TyN_XckD1I9zj3VmtQ8QOOhzBy4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
65:09:31:31:46:8c:cb:5e:df:2f:bd:57:74:e4:55:79:e2:52:
98:9c:54:76:ef:3b:55:e6:42:25:e7:33:1e:14:4e:3b:f5:5a:
6f:4d:b3:80:0a:ca:95:72:3d:22:62:19:80:9c:85:4d:48:d2:
5a:02:e5:a0:2e:f0:b1:9e:c2:42:45:75:f0:15:34:6f:c6:a8:
50:cc:dc:5b:d6:2b:c9:b4:7c:67:07:18:6e:41:ea:b7:ab:d2:
fa:67:e7:13:51:ac:e9:de:1c:f7:6b:06:4f:2c:b7:2f:6f:43:
26:53:c4:17:a8:2d:1a:b9:b2:15:7a:bd:17:4d:ba:b3:74:80:
6f:39:b9:ea:5e:56:14:2d:29:8c:1c:7c:1c:8e:a0:73:30:df:
2f:88:bf:ee:ca:e1:db:f0:25:2f:6a:95:1c:d9:5d:03:1a:c1:
a8:6d:fb:99:84:27:f0:09:8c:65:c7:14:e6:33:f6:f6:ba:9e:
27:25:fd:0c:a5:a0:12:85:05:99:c6:04:3a:99:69:27:58:f1:
d1:15:ce:ad:9a:17:5f:9d:a5:ba:43:35:4b:77:be:e7:da:23:
fa:0b:0b:d1:a8:ce:9f:7a:12:0e:76:38:65:3d:9b:df:42:85:
4d:2b:30:84:d5:7d:88:e2:44:88:82:6d:e0:d7:eb:f7:5d:0a:
65:e9:71:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 23:28:45 2025 by rpki-client