Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/_slWbvBIJH11Mh98M15fPAYp6Tg.roa
File: _slWbvBIJH11Mh98M15fPAYp6Tg.roa (raw, json)
Hash identifier: SvQuxIYRHwu+0IjQApwKNOt8qxp21KkYMnBtdQEO7UE=
Subject key identifier: FE:C9:56:6E:F0:48:24:7D:75:32:1F:7C:33:5E:5F:3C:06:29:E9:38
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B2E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/_slWbvBIJH11Mh98M15fPAYp6Tg.roa
Signing time: Sun 02 Feb 2025 08:55:35 +0000
ROA not before: Sun 02 Feb 2025 08:55:35 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2862 (0xb2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 2 08:55:35 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FEC9566EF048247D75321F7C335E5F3C0629E938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:fa:f0:1b:2c:95:36:8d:9b:af:df:55:ed:
25:ab:90:9a:4e:48:5e:95:44:74:d8:9b:5e:30:13:
d9:4e:40:5b:09:db:d9:ee:3b:c5:e4:5b:df:d2:65:
9b:dc:6a:39:2d:4e:cf:5e:13:19:09:ed:48:4e:77:
9b:20:8e:71:5a:88:b1:0b:ab:77:a8:fe:c3:bc:de:
5e:bb:be:2b:00:28:a4:ca:16:37:c6:ba:16:16:e8:
e9:c3:d6:d9:57:cc:09:c1:5e:7b:0e:ee:42:46:8c:
f7:34:a7:ce:e5:f3:09:49:90:79:b9:88:01:a2:82:
75:89:3e:7d:8c:bd:17:93:9c:ca:05:86:ac:50:6e:
af:9e:d7:91:38:cc:ba:07:aa:6a:8d:52:aa:f2:50:
56:c3:8f:52:44:3d:41:a6:ca:63:e8:3b:38:82:06:
d5:95:de:ef:e3:7d:83:d6:75:38:16:b5:d9:36:33:
d2:29:1a:7f:3c:15:c6:0e:38:9b:84:46:0f:3a:53:
24:32:02:59:63:5a:79:7a:8b:09:6f:0d:2f:ff:8b:
32:c1:08:60:a1:b3:bc:fd:60:b9:6c:35:1e:06:f0:
ad:f1:25:0a:eb:cf:32:62:37:82:bd:12:78:1d:a9:
29:d1:80:1d:2d:fa:1d:49:9f:a9:17:9f:c5:4a:54:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C9:56:6E:F0:48:24:7D:75:32:1F:7C:33:5E:5F:3C:06:29:E9:38
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/_slWbvBIJH11Mh98M15fPAYp6Tg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
ba:55:81:1c:67:3a:b4:f2:7b:78:1d:b9:92:a6:25:7b:58:59:
77:9a:52:66:17:ce:ff:a0:9b:44:3a:ff:eb:26:89:8d:af:db:
97:33:5a:28:9a:de:ef:81:ed:54:77:5a:4d:dc:9d:84:e6:12:
36:0e:25:b0:d9:66:ff:d1:a7:a4:20:cb:ce:a2:c3:d5:a5:b8:
07:4a:4b:c8:8d:69:e6:a6:b3:f3:6d:2f:be:48:61:4c:8d:b5:
8a:e9:64:6e:40:c3:3e:49:6b:5b:5f:2f:16:75:b9:3a:95:c8:
8b:07:5e:2b:1e:9b:41:58:8d:74:43:cd:ce:55:38:30:b9:72:
0a:21:b9:b2:a6:e8:8d:cd:9b:73:72:85:eb:de:0a:f4:82:e1:
a1:9b:b4:ce:eb:12:a7:1f:47:d0:5b:8b:f1:5e:66:72:01:5c:
80:96:75:d4:73:88:77:0e:1d:52:4c:64:f9:01:90:b9:ca:fd:
c2:7a:eb:83:8a:dc:70:48:ab:c3:cb:2a:f9:8c:d4:fc:14:62:
2b:c1:e3:16:5b:79:43:0b:69:c5:9d:04:63:66:7e:f6:c5:c9:
9a:fa:cc:72:7d:e8:5c:e8:cc:ca:24:76:ff:8d:5e:1b:6b:fd:
c8:ef:7f:c7:e7:f0:5e:c6:bd:13:5d:ab:13:5b:b6:cb:41:b4:
a4:61:61:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 03:05:28 2025 by rpki-client