Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/aVVT9lf21LDPTPRD4Jdq896YLcM.roa
File: aVVT9lf21LDPTPRD4Jdq896YLcM.roa (raw, json)
Hash identifier: YI+0a9uonELdT8S0p8kHmNvkvoGLBexo/C88DokPFu8=
Subject key identifier: 69:55:53:F6:57:F6:D4:B0:CF:4C:F4:43:E0:97:6A:F3:DE:98:2D:C3
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B02
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/aVVT9lf21LDPTPRD4Jdq896YLcM.roa
Signing time: Sat 01 Feb 2025 21:55:32 +0000
ROA not before: Sat 01 Feb 2025 21:55:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2818 (0xb02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 1 21:55:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=695553F657F6D4B0CF4CF443E0976AF3DE982DC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:21:22:6f:a0:66:25:da:f1:9b:82:5f:11:
4a:83:b4:1d:be:8e:05:e8:f9:ca:b6:90:67:48:b7:
bc:de:5d:ff:d1:b4:0e:ec:b3:f5:e3:51:8b:3b:78:
6e:3b:31:ee:00:09:12:ee:6f:7b:76:31:b8:98:7d:
5d:32:98:e6:aa:bc:4a:a0:d5:81:54:7f:a4:35:a7:
1d:46:09:ef:b3:aa:83:a1:de:01:39:dc:15:cb:d7:
17:34:77:36:a3:3b:91:ee:74:29:ac:20:ca:f3:1e:
cf:be:1f:6c:b6:b3:d7:11:bd:2f:ad:48:75:48:7f:
13:8a:f4:57:85:67:88:ae:4e:08:35:d0:8c:b3:d6:
21:c2:d3:15:7a:0d:d8:10:2e:b4:34:c9:c4:6d:a0:
eb:9e:81:49:12:70:4f:9b:32:3a:05:14:2d:2e:61:
b8:fc:2e:2a:b9:8a:26:69:7c:55:7d:c4:48:fe:87:
e8:14:5f:39:db:e5:c0:a6:3b:8b:20:58:13:5d:89:
ed:8d:b1:2c:86:7a:e5:cf:1c:d5:8e:74:f6:72:3e:
fb:40:c1:07:3c:55:1e:6e:a4:65:cd:e4:66:4b:85:
80:d7:71:06:76:21:0f:26:aa:25:fa:58:c3:48:44:
85:12:f9:7e:9b:e1:12:0d:26:67:25:fa:89:3b:c2:
5b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:55:53:F6:57:F6:D4:B0:CF:4C:F4:43:E0:97:6A:F3:DE:98:2D:C3
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/aVVT9lf21LDPTPRD4Jdq896YLcM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
66:ee:f7:9d:be:cc:b4:e9:4e:ef:77:ef:28:3f:a7:ee:7e:0d:
2c:78:3e:ea:a4:34:98:fc:55:f1:46:9c:dc:d6:93:7d:56:4d:
a0:7a:74:3f:6c:13:59:67:2e:70:48:d4:5d:b4:53:8d:a3:80:
f0:85:f5:9a:2c:2f:16:28:2f:e3:2d:cc:08:86:d6:74:38:b1:
de:c7:eb:bd:f1:88:05:61:90:0e:cc:5b:9a:7b:a8:60:3a:d0:
8c:64:31:b8:61:3b:ac:52:81:ce:84:84:96:63:a0:a0:1d:82:
95:2b:59:d7:ca:50:bc:b4:34:a7:1e:95:d2:0e:6f:f9:db:d9:
51:09:3d:3b:74:d9:7a:e4:81:59:5c:57:e1:d1:3f:e9:bb:42:
b2:b3:42:a8:2f:75:99:41:4f:92:f8:b0:42:86:29:78:9b:97:
ca:89:ad:bf:5a:fb:2e:96:fb:5d:14:35:3b:66:f1:5b:e5:1e:
ea:ec:ce:e6:da:40:5a:d6:32:01:0f:94:dc:ca:34:69:fe:b8:
8c:48:92:bd:c5:d1:08:12:c4:bd:6b:8f:a1:66:4c:69:c1:e4:
fd:8d:81:dd:26:aa:e7:5f:c0:87:57:8f:30:e7:42:79:eb:85:
fc:de:76:41:6a:d8:09:4f:d8:ba:be:79:d8:57:49:4f:e5:5c:
72:50:ca:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 22:40:12 2025 by rpki-client