Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/YpyNyb2P_QG0F-F0MARRlM4sHkk.roa
File: YpyNyb2P_QG0F-F0MARRlM4sHkk.roa (raw, json)
Hash identifier: rbeEAGkKmNlt757LG6bfTLGfK+RROMUjCq1Y8JU/Mbs=
Subject key identifier: 62:9C:8D:C9:BD:8F:FD:01:B4:17:E1:74:30:04:51:94:CE:2C:1E:49
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BB6
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/YpyNyb2P_QG0F-F0MARRlM4sHkk.roa
Signing time: Mon 03 Feb 2025 18:55:39 +0000
ROA not before: Mon 03 Feb 2025 18:55:39 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2998 (0xbb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 18:55:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=629C8DC9BD8FFD01B417E17430045194CE2C1E49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:7f:0d:b7:37:30:ce:97:91:19:70:51:4f:
41:20:fa:c4:ea:51:97:26:72:e9:89:46:0b:cd:72:
2c:5b:0a:cf:7a:34:5b:1e:d9:d7:12:25:9c:f3:f4:
58:87:a8:bd:bb:0e:20:c0:1e:8f:29:31:f3:e9:36:
51:37:8a:23:27:09:27:4d:77:27:c2:17:86:1c:56:
ac:91:e9:86:6e:14:02:2b:28:f3:36:95:be:77:bd:
53:d6:e1:01:fa:21:27:95:76:80:5c:a7:22:8a:fb:
ec:3e:5c:87:d4:4a:12:b2:65:31:d1:e2:31:3c:96:
92:bf:b5:04:ab:3a:15:12:45:94:ba:6f:0c:25:00:
ad:78:ea:58:fe:9c:1b:b4:1e:bf:b8:53:00:08:1d:
d8:bd:aa:a7:f8:eb:c0:ad:bc:82:67:2b:0a:da:f6:
e9:98:7f:8e:10:c7:a9:f3:e2:49:bd:ab:e5:6c:33:
dc:26:40:66:53:0e:b0:fb:d6:52:a5:46:74:b9:5f:
e2:8d:6d:e6:64:cb:66:9d:fd:d6:b5:ff:bb:00:fa:
5d:c4:6a:cb:fb:8d:82:65:5e:17:12:af:be:de:d9:
12:31:10:0d:3b:e0:69:db:30:ac:ea:9e:73:8b:8c:
86:11:62:1a:ad:cf:95:ac:8d:64:83:5d:7b:dd:c6:
be:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9C:8D:C9:BD:8F:FD:01:B4:17:E1:74:30:04:51:94:CE:2C:1E:49
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/YpyNyb2P_QG0F-F0MARRlM4sHkk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
11:79:27:7b:90:c0:84:b4:30:ba:6b:40:72:78:7b:73:ce:67:
de:7f:b9:e5:42:47:40:36:f7:d1:94:2f:9d:03:a3:79:d7:ce:
11:ac:89:f9:7b:12:08:ed:74:2c:4d:a1:e3:a4:c2:ee:f0:5b:
82:7d:9b:67:37:9b:4e:dc:9e:49:15:52:97:c6:a6:c4:9f:40:
19:d5:1a:fd:9a:28:f8:db:d1:ad:ee:8b:33:10:34:0c:3e:5d:
70:91:05:d0:6d:2a:3a:dc:97:74:62:5e:11:0b:87:26:8b:01:
99:a0:cd:51:44:fc:98:67:a7:c9:d7:11:9e:b5:21:8b:54:54:
89:bd:55:19:18:a1:59:ed:db:f8:21:6d:97:a1:1b:cf:35:0f:
d9:4b:c4:53:58:ec:01:18:22:69:f4:eb:57:0f:5c:72:65:9b:
d3:30:fb:b2:b9:41:ad:e4:15:d7:67:d4:7a:ba:17:33:0a:95:
50:c4:9b:0d:01:b5:a1:81:c5:a8:5b:82:d4:09:93:d1:4b:c7:
21:22:5e:b9:b9:22:e4:68:dc:c6:e3:20:33:70:38:94:ad:02:
64:0e:62:71:44:2e:cc:1a:21:a8:d5:90:da:66:91:cd:5c:84:
f6:2e:a3:ec:c8:da:5e:74:fc:32:9e:4d:73:72:8f:0e:d9:38:
54:bf:a7:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 20:17:20 2025 by rpki-client