Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/XFIOvcnYAcNRe2zWvj-pp_jKC88.roa
File: XFIOvcnYAcNRe2zWvj-pp_jKC88.roa (raw, json)
Hash identifier: O50wvDvYF/Vul/WiWtzRpdWYu43nM5OBKNjohyQ//4c=
Subject key identifier: 5C:52:0E:BD:C9:D8:01:C3:51:7B:6C:D6:BE:3F:A9:A7:F8:CA:0B:CF
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0ABC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/XFIOvcnYAcNRe2zWvj-pp_jKC88.roa
Signing time: Sat 01 Feb 2025 04:25:32 +0000
ROA not before: Sat 01 Feb 2025 04:25:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2748 (0xabc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 1 04:25:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5C520EBDC9D801C3517B6CD6BE3FA9A7F8CA0BCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:db:c7:9b:1c:a8:fe:37:4d:b6:cd:cf:f6:
f9:89:e5:7f:69:83:ec:e2:38:b8:28:ff:29:9d:f8:
db:83:9f:74:6c:ba:f1:0d:0d:fa:19:23:3b:9f:46:
9f:2c:e9:8b:41:77:2f:56:0a:01:b6:78:94:d6:22:
e0:c9:e2:b1:22:25:41:4e:6c:29:1c:f0:b0:73:8c:
af:94:bd:96:c0:90:00:c3:2d:c7:e3:21:1a:d9:c7:
83:43:5c:3d:f9:14:28:28:ee:64:a2:9a:e5:fe:2e:
bf:68:2c:c0:72:dc:6d:48:07:d8:2d:37:86:1d:59:
73:3c:df:0c:33:57:be:9d:ba:5a:8b:70:24:4e:54:
81:5a:aa:40:31:90:4f:83:69:4b:18:7a:a4:cc:f4:
da:90:18:84:6f:b1:e0:68:f3:21:37:ef:d4:ed:5c:
f6:57:fb:c5:78:bb:09:fb:fb:c2:5d:3c:a3:3e:8e:
f4:a2:30:ff:f4:4b:50:ea:73:08:0c:18:fc:b7:5f:
10:6e:bb:d1:95:8a:63:e8:9b:91:ad:46:53:a4:7d:
38:c0:45:fd:87:88:cf:e9:71:83:58:28:40:d5:01:
7d:6a:b5:f7:4c:7d:b0:86:2a:b5:8d:c0:5a:80:59:
43:b3:c6:de:d3:09:69:e8:cd:9e:01:00:50:f9:39:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:52:0E:BD:C9:D8:01:C3:51:7B:6C:D6:BE:3F:A9:A7:F8:CA:0B:CF
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/XFIOvcnYAcNRe2zWvj-pp_jKC88.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
63:b6:51:7a:7b:ae:ed:c6:4b:43:d0:d8:d5:e4:09:00:13:7e:
b0:7a:48:b2:9c:96:fb:5f:ff:ec:e7:42:d1:8f:ac:8a:c9:cb:
a1:c5:eb:01:6c:3e:4e:be:c7:b5:08:fe:6b:92:0f:1d:82:42:
57:4b:93:03:fc:c9:ae:aa:c5:5d:0a:04:11:4f:66:c4:5c:2f:
8f:c0:c3:40:00:01:7d:d9:1b:2d:eb:38:ab:31:e8:3d:2d:fa:
79:b4:62:59:43:62:d5:14:eb:fe:21:c9:f9:21:ef:d1:9d:c1:
c9:ba:a7:dc:7a:0f:ce:5b:12:82:3d:82:d4:41:04:97:ff:41:
b3:ca:50:23:76:02:4b:50:11:62:16:99:e3:44:be:ec:cf:7b:
1e:18:0a:f7:5a:a1:69:64:b7:00:c2:0a:2f:7e:ca:1e:7a:7e:
33:ac:6c:f7:32:94:f2:7e:79:b6:f7:c9:cd:6a:28:9d:47:aa:
41:ac:38:b3:c8:15:06:e5:cc:ad:d9:61:c4:86:b3:e7:b7:c5:
24:6c:a7:2b:72:8d:fe:22:95:30:12:52:6b:a9:8d:00:02:c4:
06:6a:a8:70:fa:c8:c9:f3:3c:10:f7:66:72:65:9b:4f:b6:ed:
4e:f1:52:80:0d:cb:9d:8b:e5:04:04:53:0c:26:4d:14:f3:7b:
e3:0e:91:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 19:58:37 2025 by rpki-client