Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/UBrRuzp83I_gM2OkWd7EwRLomNc.roa
File: UBrRuzp83I_gM2OkWd7EwRLomNc.roa (raw, json)
Hash identifier: S4VWOiSEvM3UQ2cdZah3DNE4TtVmlo1FaNn8gAy52cA=
Subject key identifier: 50:1A:D1:BB:3A:7C:DC:8F:E0:33:63:A4:59:DE:C4:C1:12:E8:98:D7
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0640
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/UBrRuzp83I_gM2OkWd7EwRLomNc.roa
Signing time: Mon 20 Jan 2025 05:24:49 +0000
ROA not before: Mon 20 Jan 2025 05:24:49 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1600 (0x640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 20 05:24:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=501AD1BB3A7CDC8FE03363A459DEC4C112E898D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5d:23:7d:44:eb:11:a7:5d:5c:fe:29:2d:28:
b3:4e:7b:cd:1d:e7:5a:a6:63:4a:de:26:3e:17:6e:
63:da:59:49:da:c1:66:91:54:16:c7:eb:46:22:4b:
17:d4:41:0e:04:46:78:f3:56:26:ac:80:4b:e0:e7:
6d:26:a2:08:92:eb:ae:8a:9a:b2:49:05:bb:c8:90:
d4:57:17:ba:34:a0:2a:7d:71:93:33:12:e3:fc:16:
08:33:4c:64:0e:9b:33:e3:1f:49:ff:f0:37:94:bd:
87:ed:b4:b4:ad:ec:da:67:a1:82:71:01:21:6f:46:
dc:f9:42:8c:aa:fc:af:44:f1:db:25:0f:9d:92:94:
17:c6:88:42:a0:8b:3c:15:e5:5b:a5:5c:84:67:a6:
72:a8:95:74:bb:fc:86:5e:0e:3e:11:4a:f4:d8:db:
c1:15:48:75:52:4e:bd:56:96:79:5b:00:a4:c3:d2:
71:5a:f6:d3:5b:77:28:13:a8:0f:24:f1:9c:4c:d4:
84:b8:a3:77:4e:73:2d:48:b5:0a:87:5d:70:66:6e:
18:53:62:e9:04:2d:5b:59:d8:0f:7e:dc:17:e2:a8:
7f:f0:94:25:05:05:d3:1b:d7:bc:8c:e4:61:2f:9b:
c4:e2:59:e7:5c:c9:89:79:d0:21:a2:04:d0:3a:31:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1A:D1:BB:3A:7C:DC:8F:E0:33:63:A4:59:DE:C4:C1:12:E8:98:D7
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/UBrRuzp83I_gM2OkWd7EwRLomNc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:d1:93:9c:75:7b:f1:7b:ee:92:27:91:ae:4e:f1:22:16:49:
12:fa:3e:8a:99:aa:55:96:70:ad:b2:84:6d:a0:09:89:74:57:
01:63:e2:5d:56:5b:c0:95:25:7c:b4:f7:cb:a0:03:43:a2:ae:
98:65:87:c8:9d:d3:5c:cf:4c:5e:a7:7c:7e:4e:54:5b:f5:b6:
b6:fb:e4:46:87:e6:44:fb:12:71:16:f0:74:f3:36:91:05:92:
e7:72:7e:f3:bc:e1:4c:92:9a:5e:81:f8:76:33:96:f7:74:80:
3d:0f:84:bd:13:b4:0d:7a:f0:0d:c3:7b:cf:cf:f9:6d:c3:90:
1a:0c:2a:63:77:c0:d2:56:19:5f:48:c1:79:7f:82:5b:3d:19:
bf:2c:97:09:1c:ed:d6:19:0a:17:ca:a0:08:88:f9:fa:dd:d1:
fa:00:26:c4:08:ad:5b:f2:d6:77:ef:5d:19:f2:93:3f:e5:24:
b1:58:db:50:6c:88:c0:2e:6e:20:44:8b:fe:44:35:58:9d:dd:
19:6d:1d:c3:3c:74:35:57:dc:62:91:b0:1a:76:c7:f3:91:fc:
0a:3f:27:73:42:fa:75:79:10:c3:2f:13:e9:a5:9a:13:cd:a9:
9e:3a:76:e1:b3:a3:68:de:b0:f2:31:68:92:72:da:0c:2f:20:
09:1f:91:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 19:45:56 2025 by rpki-client