Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/gzPTOeQBp4wz0QqfgwgU-p-qq54.roa
File: gzPTOeQBp4wz0QqfgwgU-p-qq54.roa (raw, json)
Hash identifier: NX8WytqPwe74Tl5VYS+T2A7Sw5hHIS0b2W+4cfhV68I=
Subject key identifier: 83:33:D3:39:E4:01:A7:8C:33:D1:0A:9F:83:08:14:FA:9F:AA:AB:9E
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0512
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/gzPTOeQBp4wz0QqfgwgU-p-qq54.roa
Signing time: Fri 17 Jan 2025 01:54:43 +0000
ROA not before: Fri 17 Jan 2025 01:54:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1298 (0x512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 17 01:54:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8333D339E401A78C33D10A9F830814FA9FAAAB9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:f4:7b:01:85:8b:ff:02:77:a3:5e:ea:fd:
0e:ee:60:31:64:f7:5b:ff:c5:06:9b:d9:66:f3:04:
6c:94:26:85:21:be:97:ff:1e:12:f1:df:80:da:9c:
01:f9:71:95:7b:4b:8d:1e:d2:61:af:8a:51:77:8b:
6c:fc:5e:87:a1:e5:6e:ad:61:d2:75:2f:20:10:9e:
bf:2a:b3:e4:98:dc:87:38:a0:6d:04:00:3e:dd:b1:
63:32:70:fd:52:b8:49:36:f3:88:a8:cb:e9:e9:ad:
e6:ac:36:54:b2:dc:ca:60:9e:23:af:04:1e:1e:0b:
84:06:03:d0:96:99:63:c2:8d:9a:99:70:4a:4b:e1:
08:08:0c:e3:00:43:df:aa:38:4d:91:15:31:41:13:
e8:32:25:26:bf:30:d8:02:10:a6:9d:e6:f7:73:3b:
f6:89:31:6c:c0:4d:62:2d:30:99:34:8c:37:5e:fd:
20:d0:9c:56:77:07:88:e4:e1:ab:e8:34:80:27:08:
fa:b1:78:a6:1f:79:84:35:17:b5:8e:a1:3c:d1:fc:
b2:41:eb:51:aa:0b:6b:4d:be:25:79:fc:af:38:b3:
6b:9f:12:d3:5a:a3:74:fa:49:08:44:3c:8d:dc:95:
b3:f2:33:88:75:0b:00:cd:fb:ca:d2:b9:f6:96:f7:
da:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:33:D3:39:E4:01:A7:8C:33:D1:0A:9F:83:08:14:FA:9F:AA:AB:9E
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/gzPTOeQBp4wz0QqfgwgU-p-qq54.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
00:d0:11:ce:be:3f:d2:91:56:9c:25:01:b3:26:ec:12:6b:70:
82:1d:d9:e4:fe:37:db:49:ca:8c:09:12:48:10:02:4d:b7:38:
b2:6b:a9:85:3a:d0:58:2f:6b:46:df:07:d5:d1:03:a4:5e:e9:
bb:50:0c:b3:ae:d5:76:36:50:40:68:2c:21:c2:33:15:10:42:
8c:3c:49:4b:e6:dc:f6:46:30:43:05:79:c7:c6:e9:37:74:56:
ff:a3:16:c7:51:fd:e9:cb:bf:03:5d:03:a2:06:7d:7c:c8:90:
55:aa:33:33:66:c1:65:d6:4b:ce:2c:d9:f7:16:61:8e:19:cc:
ef:f2:c7:56:04:d1:c5:0b:d4:8a:64:d1:0b:ba:fe:f3:d8:c0:
63:f0:b7:61:fc:03:45:93:25:b6:13:1d:37:d6:43:21:c0:3c:
0d:ff:a9:e2:97:27:12:b2:92:f1:ae:01:e8:e2:e8:51:d1:1a:
17:6c:fb:4c:97:fe:e5:a1:01:68:e2:ff:33:64:55:11:a7:17:
a7:0f:b0:72:d4:1c:56:bc:2c:b3:99:89:5f:55:17:43:f5:f4:
df:8a:88:75:33:17:61:f1:d5:c0:2c:af:86:97:22:00:e4:fa:
30:a7:21:58:ee:3a:5b:b4:e5:b1:ac:81:25:1a:10:e6:4d:b4:
7e:7b:ab:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 23:20:03 2025 by rpki-client