Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/hYjHrRBdYkeLdjUduRON2NB2xYQ.roa
File: hYjHrRBdYkeLdjUduRON2NB2xYQ.roa (raw, json)
Hash identifier: cFyufupG7qydnj5warbk21chbFuXtT3V/H53oY3Pesc=
Subject key identifier: 85:88:C7:AD:10:5D:62:47:8B:76:35:1D:B9:13:8D:D8:D0:76:C5:84
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 098C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/hYjHrRBdYkeLdjUduRON2NB2xYQ.roa
Signing time: Wed 29 Jan 2025 00:25:25 +0000
ROA not before: Wed 29 Jan 2025 00:25:25 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2444 (0x98c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 29 00:25:25 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8588C7AD105D62478B76351DB9138DD8D076C584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bd:df:6f:cc:bf:e6:1d:6c:68:d6:2c:4b:b2:
46:c0:4a:9d:95:a4:3a:11:24:c2:62:9a:f0:1c:8d:
d6:c4:0d:f7:04:db:58:a1:9c:1f:25:2c:50:eb:23:
0d:e5:98:f6:e4:79:98:17:17:43:80:ac:00:c7:8e:
bf:60:16:b9:a1:44:33:26:a8:9e:03:d6:5c:d9:bf:
3a:cb:c7:b4:7b:95:b0:c6:6f:b3:0b:43:ce:a7:4e:
d9:e8:5c:03:51:4c:bd:48:e6:d0:ad:a6:2e:e7:e7:
d1:1d:d7:b8:2d:f4:5a:52:cd:34:5a:af:5e:18:14:
c2:64:78:62:a2:5a:47:7d:bc:36:83:f4:16:f4:25:
e0:76:c0:5f:22:cb:2b:c0:bd:c1:b6:69:1f:fe:9d:
59:2b:d0:99:6f:9d:48:ab:fc:0b:dd:73:57:c3:d9:
89:dc:41:b7:4e:85:7f:e7:98:11:57:a5:ad:91:cc:
22:e6:e5:4c:96:ab:6d:ae:ff:7e:c4:91:8b:cf:10:
81:8d:c0:af:91:7a:d0:8a:f5:d8:f0:af:30:b5:9c:
c8:44:2b:f5:d5:f5:b6:73:27:b9:05:a2:f1:0e:64:
c3:b2:17:ba:0b:b4:b9:a8:74:65:82:b2:d8:d8:8c:
05:b0:8f:00:a0:4d:25:7e:f1:93:09:d8:40:92:83:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:88:C7:AD:10:5D:62:47:8B:76:35:1D:B9:13:8D:D8:D0:76:C5:84
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/hYjHrRBdYkeLdjUduRON2NB2xYQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
71:06:ba:aa:e9:88:3d:f1:17:83:ef:3b:87:4a:77:35:f6:d3:
75:0a:45:1e:3e:53:33:23:31:cc:e3:58:40:4d:bc:bc:d5:05:
65:6a:7c:24:53:c1:e3:1f:0a:8a:2e:a8:bd:f9:a9:f8:eb:c2:
8b:56:3e:e9:25:05:b5:93:98:ee:0c:0e:7c:70:eb:7b:5f:3f:
2f:24:2c:6d:c4:26:64:ba:95:e4:22:6f:98:23:ae:f4:1f:d1:
c4:e3:c2:11:e1:09:10:05:b6:81:76:d2:4e:63:9d:b6:f2:e5:
29:75:10:22:42:66:5a:6f:a8:c9:eb:2f:6f:3a:55:90:ea:9d:
f0:96:bb:0b:44:e1:47:aa:a9:82:75:2c:67:aa:a3:1f:21:06:
1c:53:7d:c8:52:d8:ac:47:1b:97:e7:e9:8c:41:2c:d9:30:1e:
32:31:16:0b:68:4e:5d:ec:1f:ec:ba:e4:20:e8:50:1d:60:38:
88:01:38:b3:f9:6f:91:f4:3b:e9:03:14:ce:ed:1e:69:fe:c5:
18:a8:d8:2e:61:b5:6b:62:c4:07:7d:e7:ed:b9:7f:6b:a5:17:
8d:cc:43:5b:2e:d2:37:0b:a0:5c:35:4a:05:b8:91:c6:a7:ea:
af:cb:b0:8d:5c:e3:e0:db:f7:58:0c:ea:3b:6b:f3:c2:eb:2a:
f8:fa:53:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 21:22:41 2025 by rpki-client