Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/dUiIZpwOskoepOAS2RbX2ANa7_8.roa
File: dUiIZpwOskoepOAS2RbX2ANa7_8.roa (raw, json)
Hash identifier: 6NCm7l6IQUHpLCusVmv6urUiE7DcvCAkfA51Xos61UI=
Subject key identifier: 75:48:88:66:9C:0E:B2:4A:1E:A4:E0:12:D9:16:D7:D8:03:5A:EF:FF
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D0A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/dUiIZpwOskoepOAS2RbX2ANa7_8.roa
Signing time: Fri 07 Feb 2025 07:55:48 +0000
ROA not before: Fri 07 Feb 2025 07:55:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3338 (0xd0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 07:55:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=754888669C0EB24A1EA4E012D916D7D8035AEFFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:4a:94:19:06:44:ad:2e:23:aa:74:5d:b4:
7b:b6:84:9a:b6:1d:7f:84:a2:40:d3:4d:85:91:8a:
d0:39:b9:6a:ef:7a:50:4b:3e:10:a1:44:87:40:9a:
9b:e2:61:84:2c:05:c8:96:7e:c2:8e:46:1e:79:93:
91:92:ee:7a:28:03:00:19:17:da:70:f5:d6:b7:61:
e8:17:df:51:a5:34:34:6e:b4:58:04:c2:b0:22:ae:
bb:42:14:5f:1e:d8:cd:f0:32:a3:bb:35:16:4b:81:
ef:29:5a:14:34:e8:e1:6e:4d:6b:62:0e:67:76:8a:
bc:88:ff:ee:72:79:aa:8d:55:b8:99:c7:dc:5b:54:
79:18:21:ff:ac:b6:db:5f:55:ae:1a:35:0c:db:61:
fb:81:db:2a:a3:06:16:ae:c7:b3:d9:8e:58:22:46:
80:7c:17:79:4c:06:fb:3b:9f:18:0b:14:fc:e8:36:
79:96:cc:5c:4e:92:8d:18:a0:fd:d2:3c:db:8e:9e:
25:0e:05:fd:49:2e:4f:98:17:d0:b9:b5:73:e9:e6:
c9:31:18:9a:8c:50:09:39:66:29:a4:ff:90:d9:d6:
d5:0e:ea:86:24:27:d8:62:00:71:af:98:51:bc:26:
62:59:9b:7d:53:27:04:3f:c6:20:85:8b:c6:59:6e:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:48:88:66:9C:0E:B2:4A:1E:A4:E0:12:D9:16:D7:D8:03:5A:EF:FF
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/dUiIZpwOskoepOAS2RbX2ANa7_8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
42:e4:d3:85:ad:61:b5:8e:04:82:ed:03:44:4c:79:1a:e5:77:
f8:02:9b:72:87:d5:e3:90:79:d8:8c:9b:65:fb:13:0c:cb:67:
e0:2c:50:a7:44:83:c0:2d:9a:c6:45:da:06:45:b6:cb:6c:5f:
b5:c5:3d:06:ef:1c:e0:35:dd:22:68:87:21:5a:80:3a:da:77:
75:05:59:27:d6:15:89:47:3d:d8:42:4c:53:6e:fa:1a:51:07:
6f:ab:e2:ea:34:ac:49:2c:6d:ab:4b:6f:84:cc:22:18:40:a3:
d2:45:a8:7f:59:d9:60:46:a1:6f:f3:ba:48:56:14:fb:bf:3f:
aa:0c:51:2f:63:3f:55:80:5f:45:f5:5d:43:58:ab:74:c3:b5:
5f:ec:1c:e3:56:bd:93:4a:b1:ee:1d:42:73:07:68:4a:10:a2:
64:29:8c:c8:31:84:11:be:1e:a1:4d:0f:02:62:63:84:f0:79:
54:b9:3a:07:91:1a:6c:da:ed:18:cf:43:46:05:60:e9:87:b8:
52:e7:b2:7a:43:af:f7:32:19:74:ea:69:94:28:4a:a4:59:60:
74:64:fd:4d:97:d6:a1:5d:91:23:b3:9f:a9:75:ca:e4:78:99:
cc:97:9c:6d:1f:62:e7:c3:06:60:29:04:66:e8:b7:d3:7c:93:
ac:da:8c:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 22:38:24 2025 by rpki-client