Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/hvHTboL1VVB0LYix9pamo1T6MxU.roa
File: hvHTboL1VVB0LYix9pamo1T6MxU.roa (raw, json)
Hash identifier: 0uoSum+XWIUCRV8EVdBRoKtKeLBtf6px3tT8Z1dwIgk=
Subject key identifier: 86:F1:D3:6E:82:F5:55:50:74:2D:88:B1:F6:96:A6:A3:54:FA:33:15
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 05FA
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/hvHTboL1VVB0LYix9pamo1T6MxU.roa
Signing time: Sun 19 Jan 2025 11:55:24 +0000
ROA not before: Sun 19 Jan 2025 11:55:24 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1530 (0x5fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 11:55:24 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=86F1D36E82F55550742D88B1F696A6A354FA3315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:03:7b:4a:64:52:f0:62:ac:bd:3d:20:e4:
0e:1d:09:9b:2b:4a:37:f8:21:23:7d:b1:e0:54:a4:
6b:29:46:ad:15:d2:e8:62:7a:a9:a7:57:09:52:1c:
78:61:df:b5:d3:d0:eb:c2:af:0b:c9:b0:4a:25:7b:
30:9d:14:b9:04:f1:04:71:85:3c:e3:21:46:b8:88:
0d:89:7b:d0:f4:a6:c3:0c:28:8b:16:da:aa:5c:29:
be:a7:53:84:ba:df:96:52:43:3c:6d:7d:60:e6:e6:
4b:29:ce:3d:3b:f0:fb:13:63:aa:89:d1:ef:ce:70:
d9:f3:91:8a:11:fa:87:58:ca:a6:1e:49:d7:68:09:
a1:53:0b:09:00:ad:09:8a:1f:15:a8:72:36:50:46:
04:9d:bd:dc:65:2e:17:c7:cd:72:6b:66:87:e1:75:
84:4f:29:73:f8:85:67:f2:91:fd:a0:1d:79:50:44:
22:dd:f4:72:3e:0e:31:f7:ce:c2:82:82:f1:6e:0f:
8c:41:a0:a0:41:e2:33:05:e7:8e:38:05:af:22:3e:
62:cc:91:85:0a:a3:7a:cb:08:38:54:02:eb:8e:1e:
50:2a:6a:f2:53:11:8b:b7:36:cb:68:35:c6:93:26:
a4:fc:76:6d:0b:a9:58:84:e8:55:75:cf:06:48:85:
d7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F1:D3:6E:82:F5:55:50:74:2D:88:B1:F6:96:A6:A3:54:FA:33:15
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/hvHTboL1VVB0LYix9pamo1T6MxU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
19:63:00:0c:10:50:1c:83:f5:4b:e7:ed:32:47:12:3c:a8:06:
82:88:48:ec:7c:de:cb:8f:07:e7:04:cf:f8:e3:d3:47:d7:c9:
f4:59:44:5d:c8:23:af:6e:49:fe:04:aa:8b:ae:cb:ee:0b:01:
c2:1a:3e:30:08:b7:28:a2:04:7b:f0:a0:7c:b6:47:86:d0:5e:
59:5f:0f:24:10:cc:ad:ce:42:43:be:a1:13:ab:64:5e:04:30:
07:16:d8:9b:95:ff:a9:fb:94:9a:03:e8:96:e0:3c:e6:75:6c:
f4:0d:96:dc:ce:27:bf:9e:4a:2c:e3:6c:1e:52:68:0f:0e:50:
f6:11:6a:71:a9:43:8b:00:30:52:e1:67:03:00:71:15:d3:b9:
f9:b7:05:16:aa:c6:97:91:c3:9d:e1:19:9b:f0:fe:a2:bc:cc:
51:16:20:d5:0b:c7:59:a0:4a:d1:63:35:ef:d3:56:f8:60:b9:
bf:23:e8:1e:93:32:5e:c9:22:39:8c:9f:eb:db:13:60:95:53:
45:ff:77:92:1e:74:5b:55:bd:06:db:4b:b3:ba:76:66:e2:02:
4c:ca:88:bd:e8:4d:b6:7c:00:d4:6c:ff:86:75:5a:aa:87:b4:
05:8f:b8:fd:9a:96:dc:40:16:6c:fc:9b:0e:cc:27:63:07:fe:
35:7b:46:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 20:01:49 2025 by rpki-client