Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Ve8XcN4znfdgkQTme8yOdw_eCBg.roa
File: Ve8XcN4znfdgkQTme8yOdw_eCBg.roa (raw, json)
Hash identifier: qItjr3KPRdId5VUQGBI4xaXsWXBsAjzh5fel8mwO8k8=
Subject key identifier: 55:EF:17:70:DE:33:9D:F7:60:91:04:E6:7B:CC:8E:77:0F:DE:08:18
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BDA
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Ve8XcN4znfdgkQTme8yOdw_eCBg.roa
Signing time: Tue 04 Feb 2025 03:55:39 +0000
ROA not before: Tue 04 Feb 2025 03:55:39 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3034 (0xbda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 03:55:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=55EF1770DE339DF7609104E67BCC8E770FDE0818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:21:b6:c0:3a:cf:0e:1a:af:cd:f3:d8:c8:
45:b9:bc:3d:3e:17:c6:94:43:77:08:45:81:cb:d2:
0b:0e:f8:53:d9:00:89:99:55:f1:9e:cb:be:df:f3:
10:11:3e:8f:ab:a2:83:81:93:e1:6a:c4:02:66:92:
c0:07:e4:6e:d0:dc:c8:5a:ca:80:d3:5b:a3:fd:24:
44:83:cb:20:aa:04:72:51:7a:52:a9:48:12:4f:c2:
1d:0d:15:8d:df:69:ad:e1:42:29:bd:48:db:b3:bb:
98:d3:20:47:cd:8d:10:22:e4:b8:0a:26:9a:5b:b6:
2a:2d:43:5d:02:32:92:c4:73:fd:34:62:1d:9c:74:
a3:36:b3:3b:86:af:6c:86:48:4e:8d:e9:95:69:36:
71:f9:29:aa:04:04:56:3e:a3:95:5b:09:91:26:2f:
38:f9:08:dc:22:84:cd:bc:bc:48:13:bb:da:6d:b9:
54:1c:a2:9e:51:92:4a:95:f1:fb:a6:49:84:35:a0:
b1:1c:eb:8d:27:6e:62:85:81:9a:51:03:af:66:45:
f5:32:22:08:ab:c9:42:43:1c:3f:cf:88:af:b6:e9:
b5:9e:76:6a:f5:79:7f:22:0f:ce:2c:90:6b:ed:84:
a4:a7:5e:d2:a8:bd:aa:4f:60:47:94:f3:d2:3b:1c:
b5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EF:17:70:DE:33:9D:F7:60:91:04:E6:7B:CC:8E:77:0F:DE:08:18
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Ve8XcN4znfdgkQTme8yOdw_eCBg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
17:22:6c:c9:ec:fd:8c:1a:45:e0:a3:fd:0e:79:2f:53:65:45:
a7:7a:f2:50:cf:d8:4e:01:e3:29:ef:76:f4:17:74:e1:a6:ba:
64:b9:72:6e:e4:c6:03:7b:9f:00:aa:e0:8b:ff:c7:45:3e:de:
d4:36:46:b9:33:41:9e:87:c7:c4:2f:b4:8b:0a:ca:45:b3:b1:
2f:f8:26:53:91:d9:b5:7e:1e:49:9a:64:ac:f1:87:62:07:f5:
e8:2a:0a:30:c7:6f:b8:1b:e7:1f:65:93:06:6b:b4:00:33:c6:
bc:a8:5d:e9:0c:10:ee:0d:6d:fb:14:27:27:44:3c:89:db:46:
3e:f6:23:c3:9e:33:4a:f3:2d:a5:57:55:39:7b:6b:b1:00:91:
c2:da:e6:ea:0d:32:4e:98:e2:aa:b2:54:5a:e9:3b:69:46:b6:
3b:96:a5:c4:fb:8c:82:b6:89:57:3f:da:fd:85:14:ef:ab:9a:
b9:51:29:cf:77:b8:34:9b:c7:4b:70:4f:d9:07:95:e9:0f:4a:
e8:96:ec:18:f4:2e:69:a7:2d:88:86:fa:37:b8:97:3f:ce:df:
7d:d2:e1:96:12:f6:d8:11:df:3a:61:bc:05:76:84:49:cd:7d:
44:df:c1:07:07:06:fd:e4:4b:7a:62:5f:73:86:5a:1a:78:6c:
f3:32:81:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 03:32:21 2025 by rpki-client