Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/i2j3CRG2Q5PXv6PkiNXtiP1RKzQ.roa
File: i2j3CRG2Q5PXv6PkiNXtiP1RKzQ.roa (raw, json)
Hash identifier: Ewhcmgucg+cosalzSl6tQ8ZucxSC1COZmStUXgKsEXM=
Subject key identifier: 8B:68:F7:09:11:B6:43:93:D7:BF:A3:E4:88:D5:ED:88:FD:51:2B:34
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B52
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/i2j3CRG2Q5PXv6PkiNXtiP1RKzQ.roa
Signing time: Sun 02 Feb 2025 17:55:36 +0000
ROA not before: Sun 02 Feb 2025 17:55:36 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2898 (0xb52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 2 17:55:36 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8B68F70911B64393D7BFA3E488D5ED88FD512B34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:f6:8f:7b:a0:d1:eb:db:db:17:66:1e:c6:
0c:16:f2:39:5a:45:71:ff:f1:47:61:6c:d3:47:3b:
b4:1f:62:e9:85:6d:4b:5e:46:67:a4:19:d8:9b:65:
97:f3:e4:ab:86:3d:0e:b9:90:b5:7a:40:79:b2:d4:
bf:c4:d9:a9:e1:39:08:41:d8:8a:70:67:df:8e:8e:
d5:bf:34:e7:89:03:28:b2:f9:bb:94:45:f0:40:69:
f9:f3:9f:52:b3:bf:dc:36:fb:0c:84:9c:31:a4:6a:
3a:1b:09:7c:89:b7:7f:a0:be:c6:14:0a:37:fe:7e:
d2:77:eb:cd:2b:43:37:ff:d9:03:ad:9b:c4:43:28:
e8:0d:ea:70:58:a8:1e:3e:95:fb:f7:ae:e6:cd:48:
47:3a:75:3b:35:68:12:3b:e9:2a:09:e6:bc:bf:c4:
9f:76:e6:29:e7:e7:1b:88:99:53:39:d2:24:13:7f:
dd:c8:76:bd:a7:65:81:cc:54:94:87:29:37:33:cb:
66:b9:90:d1:4f:be:12:21:ab:48:16:16:2b:1d:8d:
12:bc:e9:6f:6b:e3:2e:24:71:2b:81:82:39:9b:57:
75:de:f6:5a:fc:17:62:60:ee:1d:68:55:01:81:52:
66:59:78:87:67:cf:79:e6:a7:d1:10:8d:0e:3e:e3:
0a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:68:F7:09:11:B6:43:93:D7:BF:A3:E4:88:D5:ED:88:FD:51:2B:34
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/i2j3CRG2Q5PXv6PkiNXtiP1RKzQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:c9:42:53:20:ca:d1:28:85:8e:c5:b3:ae:ac:83:30:c7:54:
44:bd:7c:9d:aa:14:2f:29:92:98:f3:fa:ba:d0:d1:37:f8:bb:
36:0f:18:81:91:13:36:8d:21:9c:93:8c:2a:9f:14:c0:7b:cf:
aa:c3:50:60:a5:cf:91:87:d1:f3:0e:89:09:9a:21:c2:5b:fe:
4e:13:02:64:ca:88:41:02:ba:c8:63:31:e9:c1:00:98:9a:44:
8b:bb:ab:6c:2c:41:9a:fa:6a:7a:87:a7:38:11:a0:2b:66:21:
15:d3:2c:a3:0b:d2:4e:4b:d3:88:38:c9:fb:7f:57:39:b6:35:
f8:66:88:2f:af:bc:b4:4b:6a:d8:d6:cd:48:e0:ea:5d:76:4b:
d2:bb:b5:10:bd:c2:32:04:56:72:f5:70:72:39:36:1e:cb:ea:
eb:cb:f6:8e:1b:6a:cb:b3:00:7a:9c:f1:2e:6f:bd:bb:22:ce:
05:4d:98:e8:99:c3:1c:fe:4b:f7:12:34:e9:78:6f:05:3a:5d:
9e:6e:e8:46:1c:27:ad:5d:17:cf:5b:ac:19:2a:b7:da:a1:5d:
46:97:3c:8e:0f:87:1e:8c:e8:99:62:7e:8e:60:c7:09:a4:35:
56:47:ae:42:16:47:fb:16:e1:8c:55:e9:33:2e:93:05:c4:2f:
42:e9:e2:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 02:03:00 2025 by rpki-client